Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json)
Hash identifier: GGd+VbKfh7q56kstrxMF9U1v/oS8m44pbL5slz8EKWs=
Subject key identifier: E7:54:71:E0:11:FF:2D:44:C2:EE:0B:FF:CE:9C:96:4C:82:1A:34:57
Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Certificate serial: 0194BD858FA5018718AE686C565B119B8A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
Manifest number: 34
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=)
2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: fGiUR4B/DICf/aDt3tDHll7SMimd7FsqCUOwRd/WUng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:a5:01:87:18:ae:68:6c:56:5b:11:9b:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=e75471e011ff2d44c2ee0bffce9c964c821a3457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:ae:f7:db:9d:a4:27:78:e9:a2:c7:7a:a6:
cd:a9:be:d6:49:e1:c2:a6:61:2d:02:2a:44:3c:3a:
48:e7:24:a9:24:c6:71:af:c7:e6:be:c7:b7:31:84:
48:46:73:4d:ea:a4:af:66:2e:08:08:c5:c8:26:af:
cf:c9:d8:8d:09:6e:ec:bd:01:2e:78:00:20:80:da:
a5:ad:d4:f4:54:2e:01:64:c3:b3:a2:7a:4d:4c:44:
36:8d:f8:56:58:41:01:2e:04:4e:5b:5c:5d:24:e0:
3e:52:44:f1:74:b8:d5:e0:04:d3:44:4c:c3:2a:2f:
8f:32:e4:cd:5e:98:e5:d4:11:d1:15:6f:41:5d:f8:
ee:cf:d9:29:22:46:46:f0:36:d7:d8:61:b8:3d:cc:
74:58:7f:36:e5:6e:54:51:bf:0c:fe:93:99:f0:db:
8e:9a:44:fc:18:a7:b5:bf:44:34:23:f8:43:87:8d:
79:6e:fc:c8:28:10:3b:07:71:49:e6:67:1c:ef:ea:
e3:4e:c7:81:98:f1:47:57:b0:27:c2:60:66:70:e5:
4d:1a:6e:b4:0a:a5:bb:35:7c:84:74:97:4a:65:1a:
71:3c:a8:80:47:5d:87:03:6a:9d:2a:aa:59:8b:7a:
59:6a:7b:8f:05:43:11:5e:2d:c5:bc:c7:46:11:ab:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:54:71:E0:11:FF:2D:44:C2:EE:0B:FF:CE:9C:96:4C:82:1A:34:57
X509v3 Authority Key Identifier:
keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5b:60:72:3b:65:0b:f1:2c:59:dd:86:b4:99:0f:07:3f:d1:
7f:20:59:16:50:ad:59:af:7c:b5:77:85:45:25:f4:fb:45:c5:
3e:b1:59:6b:9f:56:03:3e:45:cc:e9:a8:e5:8d:40:37:6a:0b:
6b:ac:fd:9b:fb:1c:52:43:28:44:f9:6e:01:d6:51:89:1c:be:
ac:7d:bc:f3:08:5f:b2:96:d3:f5:8a:0e:e3:af:8a:6f:82:b9:
4a:f7:93:69:d6:c5:b7:8f:58:4f:00:f0:04:59:e9:19:53:e7:
f3:70:a8:22:21:08:88:d7:d3:06:7b:12:67:cf:bc:39:af:25:
b9:92:6d:c2:ac:81:57:da:3c:10:99:33:fb:4f:97:31:c8:e0:
74:1f:db:9b:ef:93:10:e5:70:74:a7:c7:25:b4:f3:de:8a:4a:
20:d7:af:ed:87:5e:05:13:27:a3:37:32:60:e9:a4:20:59:db:
75:f4:e5:ce:ab:8a:5a:7c:ac:d8:4d:b5:61:89:99:77:fa:e0:
ac:ac:05:fe:46:b2:90:db:5e:ff:22:f1:2a:b2:55:63:41:72:
17:a1:08:53:41:ac:7d:43:c5:ab:ef:f3:ae:37:0f:cc:06:c1:
66:b4:d2:79:c4:bf:09:c4:31:2e:85:36:0b:e6:52:f1:f4:62:
e2:94:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:27 2025 by rpki-client