Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: dANG8EXx1rzi0dQGN/l5KA9Jad6TAkLKuoqPgGzuTeQ=
Subject key identifier: 4F:A5:E2:88:34:CF:B1:3D:6B:BD:C4:F2:FC:18:37:01:B4:64:76:88
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 0194BD179EF5BCF37FD48B2F664DA2F6B04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: 5snfE6kcnuZTzbVXbnbo3XN4fkyivCJvbzYANhTVxLw=)
2: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
3: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
4: nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa (hash: jcflcFSB0gGF5Eobckb0cDmbAhuF6soPeVbl+/qaprQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9e:f5:bc:f3:7f:d4:8b:2f:66:4d:a2:f6:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=4fa5e28834cfb13d6bbdc4f2fc183701b4647688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:78:ed:b3:8f:71:29:cf:79:63:28:4b:4b:
29:bb:e0:a7:fc:ec:c3:fb:f5:6f:04:91:bf:8b:69:
01:f2:92:04:bf:53:c1:bf:d0:67:be:29:6d:5c:b4:
49:2f:3e:dd:e8:bf:71:f1:52:60:e5:71:93:e3:fb:
00:4b:eb:ed:53:1f:29:1b:22:ad:c0:0c:4b:8a:c4:
b1:e5:0b:f1:6f:e7:21:4c:b9:0c:b1:06:6e:d8:b0:
45:13:6e:47:e9:0c:aa:35:a0:2f:ea:a7:57:43:fa:
0d:08:28:47:ff:9e:04:9a:cb:ee:f2:a6:4b:6b:8b:
0c:d5:b6:a9:3e:96:dc:d3:ae:b4:c7:05:4d:a3:84:
1e:23:07:ce:48:87:28:8e:5e:e2:e6:a1:84:6c:6c:
a3:b0:01:02:a9:fc:19:3e:f8:37:97:93:6e:a6:37:
fc:e9:64:2c:a1:b8:0d:d9:f4:63:62:60:5e:2d:11:
f4:c1:04:9b:c3:a1:a4:13:c4:d4:a4:e2:80:2d:a8:
2a:d5:47:af:5d:77:98:de:2e:58:7c:72:ba:d7:0a:
cc:ee:85:a5:b8:0c:5a:51:d4:aa:84:21:19:b4:69:
6e:ce:60:a5:0b:c1:2e:95:11:83:21:ca:59:db:a8:
51:8f:50:3c:e5:fa:75:5e:5b:91:e2:da:af:7a:43:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A5:E2:88:34:CF:B1:3D:6B:BD:C4:F2:FC:18:37:01:B4:64:76:88
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:c8:84:ef:61:45:fc:28:ef:26:76:ef:9f:d4:0d:2f:86:
4a:b4:96:39:30:af:4e:24:44:5a:b2:5c:9e:9b:71:8a:1d:15:
a2:dc:b2:fe:a7:da:4f:cd:e5:97:be:22:bd:e9:e0:2d:da:b5:
ea:3f:d6:df:f4:94:c2:f2:9c:d1:45:7b:a2:84:b0:aa:23:0d:
e2:20:ed:90:61:bf:d5:bd:68:94:78:49:a3:17:08:c7:fd:2d:
1b:ea:49:08:91:fa:24:8a:a8:92:b3:60:59:3d:f1:f8:b3:cd:
98:7f:fa:69:36:fa:85:6a:33:1a:98:76:3d:05:d2:72:b5:54:
51:e9:da:0c:68:30:cf:65:d0:75:c8:d5:71:98:0e:aa:d2:36:
21:79:2f:e4:ba:06:73:62:a9:fa:6a:2c:52:7f:ed:c6:c9:82:
f0:3c:d6:06:36:65:60:f4:38:a5:e2:1d:8f:1c:68:55:50:b5:
1d:a8:3b:d7:2c:f5:00:f6:d9:a6:87:ff:cf:24:cc:d1:cd:d1:
a1:0b:a7:52:51:1d:7c:d9:f1:cd:60:41:02:3e:d9:a3:9a:75:
66:46:0b:b4:ab:a4:37:f2:bf:01:08:0a:e1:5d:42:22:5c:52:
e2:5b:5e:c1:23:49:30:89:6d:f3:bc:68:35:8b:6e:fd:8c:62:
3e:f6:7d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:18 2025 by rpki-client