Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
File: zUNP2FkiOudujXhkipNylejs15o.mft (raw, json)
Hash identifier: v9Vve1zXlWgxiv+lxr0B6EwsW4VykFxEw1EvQUO3nqU=
Subject key identifier: A9:6B:D7:ED:37:C3:BF:09:FE:92:C5:C1:C2:86:D0:BE:6F:67:D2:F6
Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
Certificate issuer: /CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Certificate serial: 0194BBCE70332672A0D621C64714FF628AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
Manifest number: 03D7
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: R9FIW-YXitjJpX1Q3jcy6-oEIFI.roa (hash: UPbldeCj6tFYKOIutM8BR+cGGez6vIB0/3ZKKmpjUZo=)
2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: iKq/nTjZccrRRN0ItUjYjNQt+uHzYJSZlSbTLmc5XvU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:33:26:72:a0:d6:21:c6:47:14:ff:62:8a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=a96bd7ed37c3bf09fe92c5c1c286d0be6f67d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:ae:a8:2b:52:38:ff:e3:b2:fc:86:e6:e0:
c9:dc:91:3d:ae:58:b5:0b:53:e0:4c:2a:0f:f5:42:
bb:d1:07:97:66:1d:fd:72:b7:ba:6b:7f:b1:ca:69:
92:a8:92:8c:ca:d5:61:f8:a4:0e:90:7e:e0:d5:62:
8b:f0:29:65:41:c7:cd:90:d2:52:08:b2:db:67:69:
f6:e7:7e:0d:eb:69:26:0a:b3:4c:57:01:c6:33:8f:
fb:79:76:1c:3d:70:aa:a4:d9:7b:02:5e:86:a7:ca:
23:7b:62:e8:12:76:9e:47:fc:a2:44:db:4e:c4:fe:
0f:03:97:6b:8e:e5:08:42:dd:d0:9a:96:ea:33:17:
b6:2f:48:14:cd:71:d0:6b:fd:24:15:18:36:22:27:
73:30:9c:9f:2c:5e:f7:4f:66:04:7a:d9:ea:05:cd:
b2:44:25:dd:5f:2c:36:2c:c5:fd:87:ae:35:e7:84:
14:98:d2:9b:5b:87:d8:04:dd:30:9c:cf:3a:d6:8d:
94:20:2f:3a:c1:b0:e1:9c:7d:0d:4d:db:a4:cb:0a:
34:79:8d:91:ac:5b:a1:f6:3d:5c:1c:bf:a4:f2:26:
c3:23:9a:48:17:7b:2e:80:d9:c9:7d:5c:87:0c:c4:
c7:cf:94:e3:77:a7:05:3c:08:2a:fa:d9:8d:06:a3:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:D7:ED:37:C3:BF:09:FE:92:C5:C1:C2:86:D0:BE:6F:67:D2:F6
X509v3 Authority Key Identifier:
keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:da:4a:81:fc:31:13:b8:1a:4e:b4:1b:f7:4d:be:f0:39:86:
6c:c5:d2:67:c9:ae:d1:3e:3f:58:02:e8:59:63:26:78:79:f4:
f7:00:bb:73:78:0c:c7:a9:47:d4:84:8c:09:07:62:88:03:a7:
e2:81:de:f1:62:a5:50:2a:d4:5e:09:4a:93:8f:95:ff:b3:14:
be:51:a6:59:90:a6:9a:6c:1f:34:ca:76:46:a3:b5:3f:ce:d8:
2e:16:e5:84:e4:f1:6a:e6:a4:12:57:22:41:c7:ec:03:f5:eb:
da:52:14:c9:03:d2:31:4f:6a:26:5e:3d:73:36:a3:4f:21:c2:
6f:db:7f:c6:23:38:89:d5:3b:d8:88:fb:a0:06:12:65:6f:b8:
94:19:71:b7:59:9b:9f:54:5d:92:bc:aa:55:ba:0d:f6:bc:38:
0b:10:ca:c6:cc:47:34:3d:5a:6e:62:cf:5a:82:26:c7:d3:6a:
de:66:05:0a:c0:1d:c6:a7:6b:15:dc:80:c6:60:d4:3c:16:0f:
91:ae:5f:b9:69:55:dc:f3:0e:76:06:01:d4:70:a0:88:b5:c1:
a8:be:89:5b:49:69:1c:af:15:01:a9:53:2a:4d:e8:0e:47:85:
6b:c6:40:0a:9f:ee:a4:06:dd:68:19:2e:4b:25:81:51:d1:3c:
a1:1c:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:28 2025 by rpki-client