Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.mft (raw, json)
Hash identifier: zeloJfy90ZGnM+K9JTgyPivTbVWPTQM9ZG0cXsPg0aU=
Subject key identifier: B4:BE:BF:35:08:56:42:EB:A4:39:A1:B9:B0:AE:C1:43:97:C4:BA:8D
Authority key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Certificate issuer: /CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Certificate serial: 0194BBCECA1944CE05DA5E14DBD8898E08DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: 0zWMPscfwZpqyYRrr03lmDY1cpM.crl (hash: 2EmH3/aNrglKte45d5YIqeFgiBFYkaGlEW69MAvV5NI=)
2: LYl-ckZTCA5UyIouoIve31n38qY.roa (hash: vPSTPP2+IXPu60S6+w3ugZNedqIYo00aGNP955WAY1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ca:19:44:ce:05:da:5e:14:db:d8:89:8e:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=b4bebf35085642eba439a1b9b0aec14397c4ba8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:2e:83:48:a2:66:d4:9e:d1:ae:1a:76:da:
48:55:9e:f5:72:2f:eb:a0:67:c5:37:2d:64:bd:46:
a3:2c:76:28:28:5e:81:e7:5f:50:c7:3a:7d:cb:eb:
18:76:f4:05:16:67:7f:cb:c4:a4:16:87:e4:58:77:
e3:81:49:12:aa:16:79:e6:b2:77:74:16:72:9a:76:
4a:b2:de:a4:3e:1c:1e:22:98:e4:00:59:f3:a8:1f:
06:bc:ac:f3:4a:f8:ec:0a:be:f1:6e:99:fa:f7:5f:
6d:2c:30:b9:09:75:fe:b8:a9:52:0d:cc:30:31:3a:
bf:91:eb:8b:e2:57:8d:9c:0a:a8:bf:1e:9b:55:41:
1d:dc:ee:2a:42:a9:91:13:cd:12:b1:ac:f4:ed:ec:
3f:d4:c5:d8:4e:8d:d0:a0:fc:17:57:30:3e:92:d7:
24:a5:0a:26:99:25:1c:15:f4:24:bd:c0:42:44:1f:
a3:9b:b2:fe:23:37:6c:66:a7:94:76:95:e3:73:2e:
5c:de:89:39:e1:7c:9a:cb:6c:81:78:91:17:56:d0:
4c:e2:17:0d:57:ea:a4:61:38:9d:31:e3:65:ee:b2:
42:38:9e:2f:fd:91:52:97:12:7e:6e:0b:e9:b8:66:
24:99:8c:f9:6e:b3:52:01:16:af:78:13:43:ee:59:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BE:BF:35:08:56:42:EB:A4:39:A1:B9:B0:AE:C1:43:97:C4:BA:8D
X509v3 Authority Key Identifier:
keyid:D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fe:20:a6:30:c0:b5:34:a7:13:e7:23:d8:eb:38:76:a0:9e:
6a:fc:b1:e9:e0:d9:27:39:5c:32:ed:00:13:95:09:97:a6:57:
3b:38:f7:17:7d:3c:c2:6e:20:39:f1:e3:2b:02:a9:d8:f0:64:
c3:db:b2:a9:72:e8:1c:49:74:74:49:ac:87:81:bb:ab:05:5d:
9d:bb:cd:8d:ff:5d:42:f8:b2:cd:f6:86:77:fc:6c:33:b0:48:
dc:0c:12:a1:5d:fe:c2:62:9d:4c:5d:74:f9:76:f6:1e:2f:cd:
e4:76:d3:63:fc:c2:b2:4a:0f:fe:e6:f7:be:75:1a:1b:14:55:
a5:86:d3:9f:23:44:53:7f:e5:0e:27:5d:a4:78:aa:e1:c1:73:
eb:e3:8a:c5:fc:e6:8d:86:d2:93:d0:0f:11:ff:b0:2b:f3:f6:
57:c2:59:42:c3:b2:e5:73:dd:aa:d9:4c:b5:a2:d3:6c:bb:c9:
24:21:01:04:4d:40:47:20:1a:72:46:6f:f5:5d:20:ca:56:ab:
9e:a1:57:ee:2c:82:85:ed:96:c9:4b:1b:5e:37:7c:b4:c4:e1:
82:bb:3c:e1:47:47:89:34:68:6a:c2:d8:d5:8c:ee:d1:ca:38:
fa:6e:44:9a:52:14:e4:d9:a3:a5:7b:22:d0:98:b1:dc:b3:3d:
c9:31:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:11:24 2025 by rpki-client