Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json)
Hash identifier: tb+Kjj2TzPthopEg2UkeQuHphzGfSaLBrpw9D5OY5Cc=
Subject key identifier: E4:AD:CF:3B:89:3F:27:1F:69:18:43:EB:DD:B5:B8:01:0F:BD:0E:77
Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Certificate serial: 0194BCE0C8DB6CB9BE6F87D87531821D2A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=)
2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: ZLWhKPC5NLGb1g5ncy5YYt5hCRvn2KIfMgtEF+eMRoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c8:db:6c:b9:be:6f:87:d8:75:31:82:1d:2a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=e4adcf3b893f271f691843ebddb5b8010fbd0e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:20:e5:f8:f3:4c:5d:b5:ea:ce:03:c5:49:
98:e3:8f:33:98:54:7a:5f:70:af:9f:4a:3f:70:ec:
10:62:81:c3:e6:39:34:76:2f:37:37:de:11:9a:f7:
7a:80:74:c7:78:28:8b:a9:c2:34:6f:39:6a:4a:4d:
e8:56:16:a9:6a:dc:e0:21:58:2b:8e:86:ce:44:a7:
26:d1:8d:d0:30:ab:da:cb:70:26:ff:bb:e3:e8:9d:
a4:6e:d9:42:ed:dc:a7:8b:a4:56:a4:91:56:5a:a8:
20:4e:68:6f:df:83:74:07:27:99:70:e5:88:70:24:
5b:5c:83:b0:b6:78:eb:75:8c:16:21:e2:dc:c9:ce:
c2:12:ae:be:2e:1b:b8:ca:d1:bf:4b:f2:ab:3a:43:
35:1d:92:c9:36:2f:20:c1:70:d5:14:32:07:c2:56:
a2:d7:1a:f7:6f:1b:02:c8:9a:be:9b:8d:62:ff:6f:
06:46:7d:de:b1:b3:50:1c:9b:d9:5a:b4:39:39:e8:
af:7c:19:a9:b9:3f:75:ae:b7:a1:5b:9f:d4:a2:98:
6d:e8:e0:56:31:6f:3a:cc:2a:0b:ab:7b:9f:ec:a8:
0e:de:ad:33:50:af:81:b2:dd:8f:b9:f4:23:9a:ea:
c0:fd:30:3c:08:95:0a:8e:85:b3:ff:2a:de:fb:72:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AD:CF:3B:89:3F:27:1F:69:18:43:EB:DD:B5:B8:01:0F:BD:0E:77
X509v3 Authority Key Identifier:
keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:49:93:5c:a4:26:76:8c:5f:33:db:6c:f1:66:29:c0:5b:59:
d9:f2:37:1a:97:ea:3d:90:c2:40:2b:21:19:99:ec:7f:4f:f3:
8f:ea:7a:74:ac:a0:55:08:3a:07:a2:98:9d:6d:95:46:27:90:
00:00:6d:1e:75:08:1d:25:fd:d4:f0:0d:fd:3e:46:4c:ac:55:
65:66:e9:1c:a4:46:b7:ac:b6:f8:4f:b0:c7:74:f5:82:3a:c9:
9c:f7:f8:0b:84:ba:02:f2:be:4d:8a:c1:29:a6:dc:0b:03:ca:
7d:e4:c0:ea:2c:99:61:ef:30:d0:5f:72:8b:37:a5:f9:6b:f9:
87:b3:e2:9a:3e:40:41:ce:de:d7:6c:4d:04:16:0d:76:3c:10:
0e:9d:53:19:5b:64:86:8b:41:70:b5:9d:b6:1e:71:9f:8b:ad:
37:29:a0:0b:26:fe:20:42:94:87:03:33:a4:6d:16:c2:96:25:
95:8f:b9:5f:f9:86:a7:7b:6b:81:73:c7:40:e7:33:2a:ef:7a:
c4:d9:5c:50:1a:b5:f2:19:5e:7a:7d:33:f8:4d:6e:69:69:19:
38:8b:ef:91:0c:ad:1e:2d:11:cb:40:a4:3a:fd:f3:42:ba:70:
f5:6a:63:06:6b:87:07:04:6d:56:1e:cc:bd:e0:a1:b8:99:a7:
59:c0:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:01 2025 by rpki-client