Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json)
Hash identifier: JOl1uDEQt7isfWoOncrBVIiqLjX71t67GlFvc/6156g=
Subject key identifier: B7:B5:DE:7B:2C:65:08:56:51:C4:05:B7:F7:7D:CF:67:AE:F4:E3:39
Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b
Certificate serial: 0194BC727E76910DCF317D3C160B4E682719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
Manifest number: 0EF5
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: WntehPztUAsCnfsYWJyPGRUsUHM.roa (hash: 5/L8DbJ4CG3bN8z8g844cMQvNk+i0ElV2AgHgE9q718=)
2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: qENokXKvVVgzAFDgsS55zJ2O1SWJOrTqlrUOq5fpB9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7e:76:91:0d:cf:31:7d:3c:16:0b:4e:68:27:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=b7b5de7b2c65085651c405b7f77dcf67aef4e339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:37:02:57:9f:2c:7e:b8:aa:f8:7d:86:a5:
d4:d5:ae:4a:75:46:f4:a3:61:54:2d:f5:45:67:7c:
0a:5b:fa:18:9a:c9:da:d0:1a:bd:61:c6:bd:65:e8:
ed:30:63:6e:52:cb:f8:7c:b4:10:63:53:02:5c:60:
fb:cb:8f:dc:fb:d4:20:64:e1:55:ed:b1:fe:c0:0e:
f3:f9:10:8a:aa:ec:4a:f0:78:88:0d:64:b0:2d:44:
f7:14:36:36:57:77:f7:e5:ff:47:46:58:3e:9d:8c:
2a:69:19:4a:82:d2:9a:53:c4:9d:59:9c:e0:82:f5:
1b:3e:c4:ed:9b:85:0d:34:c3:b0:4c:99:25:b2:3a:
c7:e3:3d:52:52:51:37:81:de:c1:ad:59:59:e0:0b:
84:0f:93:30:50:f4:d5:13:8d:09:01:d6:99:ea:08:
09:08:60:28:f8:66:df:78:dc:87:7d:c2:f5:d5:91:
87:38:81:d5:11:f8:19:e6:58:65:f0:f3:59:77:37:
07:c7:4c:e4:8f:7e:ae:ba:ac:ce:22:c8:68:f1:f4:
cd:90:d1:80:07:ac:8e:97:8e:23:d9:80:cc:ba:5b:
38:de:8d:93:d6:1c:93:35:d9:54:e5:85:c5:09:97:
41:79:75:6f:f8:30:1f:b0:44:f0:a0:4a:6c:7a:14:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B5:DE:7B:2C:65:08:56:51:C4:05:B7:F7:7D:CF:67:AE:F4:E3:39
X509v3 Authority Key Identifier:
keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ff:24:8a:75:ba:e0:6d:41:40:4b:a2:db:4f:c4:7f:1f:5a:
5a:ed:d3:2f:04:2a:c2:6b:a5:ae:32:a0:1d:14:3f:60:d1:b0:
ef:04:32:f1:15:05:78:8e:fc:32:81:9c:e2:0c:e2:50:e7:6a:
cf:a4:ef:89:59:00:52:05:d7:87:0c:7a:25:f1:ff:af:a9:da:
06:72:7d:7c:24:aa:8f:ce:35:6d:78:4f:61:d2:e4:57:ca:fa:
7b:90:21:59:a8:5a:7f:eb:4c:22:f9:c2:84:65:31:52:46:1d:
56:71:80:88:03:60:50:30:f4:56:16:ac:ed:ae:e2:5d:f9:65:
1c:8c:bf:40:fb:33:d5:6c:7c:c5:d4:62:e8:91:14:11:c8:82:
fd:1a:eb:e5:ee:70:3e:67:75:c9:20:1f:cd:37:69:93:3e:96:
54:06:61:9a:b3:37:aa:ae:61:ec:ae:da:a7:19:97:b5:a7:e0:
39:88:7f:85:d6:3d:f7:f7:37:ee:37:a9:dc:7d:b1:74:57:93:
cd:3d:f9:c9:f5:5d:07:d0:13:53:d1:f4:14:cb:f3:a9:09:24:
d6:68:25:88:7b:6f:07:5c:a7:c4:45:14:ab:c7:d3:e9:b5:54:
5d:a9:47:50:52:26:06:7c:a8:36:7c:87:f9:bd:2f:30:67:9d:
78:62:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:15 2025 by rpki-client