Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
File: ZdnpJm7sq8D9SmB36wuo-p873ic.mft (raw, json)
Hash identifier: qteP+yPPcmF/DsOQo5VafnXbo/paOgjOUbJLQUmM7lU=
Subject key identifier: 52:13:2A:F3:4B:22:69:A8:77:D4:8A:14:97:15:58:CC:E3:8C:36:25
Authority key identifier: 65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
Certificate issuer: /CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Certificate serial: 0194BC3C8CC35ACD72CC5E80BD64BE435289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: ZdnpJm7sq8D9SmB36wuo-p873ic.crl (hash: 6YVPqaHgvt7IcL10KO6ZyBBdA/bIgeE+F3Vp7tnfT+A=)
2: jl2QMltgucjm6DsSRtvejzHwgVk.roa (hash: 2ICsrOX/Ng80gGFWmU3eag4CX8TEZwSeNwBpo27725Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8c:c3:5a:cd:72:cc:5e:80:bd:64:be:43:52:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d9e9266eecabc0fd4a6077eb0ba8fa9f3bde27
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=52132af34b2269a877d48a14971558cce38c3625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:06:71:cf:da:c0:4b:13:05:a8:2d:1e:36:
da:e9:55:67:fb:df:ac:be:19:25:d8:33:15:98:f3:
da:14:db:f0:84:1c:0f:5d:2e:1c:02:54:e9:e8:77:
ba:44:a6:b3:c1:41:71:0d:02:82:4a:49:7c:ab:c6:
a5:7d:88:9c:d0:8f:1a:9a:1e:80:fb:be:34:ef:93:
3f:62:7f:4e:13:43:c1:3b:95:7f:d6:e3:07:c8:d7:
66:c3:a6:9a:e0:52:e6:72:35:0e:e9:48:e3:8f:25:
b3:85:87:54:fc:01:44:66:18:9d:56:da:2c:93:60:
aa:e5:4a:1b:e6:10:25:89:2d:49:aa:b5:97:45:37:
6a:28:ce:dd:50:2e:84:be:3f:21:7b:d7:1f:58:fe:
8b:56:c2:91:ff:e7:23:77:7f:7a:52:0d:39:75:32:
39:be:55:d9:34:56:e4:85:3e:56:45:fc:9d:4f:fb:
e0:9c:06:0b:d9:80:c6:fe:50:9e:c7:20:b9:58:13:
ed:d4:51:d1:76:dc:0c:4b:f9:08:12:e0:2f:e6:a4:
ec:17:16:6a:fb:a2:96:90:91:16:75:4d:3c:02:b9:
ff:4b:a4:77:47:e8:65:29:5c:8b:03:0f:6f:88:8c:
9c:db:91:02:a1:97:70:ba:7f:de:27:87:d8:e5:6c:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:2A:F3:4B:22:69:A8:77:D4:8A:14:97:15:58:CC:E3:8C:36:25
X509v3 Authority Key Identifier:
keyid:65:D9:E9:26:6E:EC:AB:C0:FD:4A:60:77:EB:0B:A8:FA:9F:3B:DE:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdnpJm7sq8D9SmB36wuo-p873ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ba402c-b00e-4a26-bf53-8e747e34e162/1/ZdnpJm7sq8D9SmB36wuo-p873ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a5:5c:ed:5a:9c:10:45:e3:10:2b:bf:eb:69:d4:81:34:d4:
a1:a5:a0:be:9a:30:98:0b:50:73:3c:f1:c7:f2:24:08:a1:e8:
57:d8:7f:26:ed:34:04:c3:c9:91:44:e9:b2:32:ee:21:ec:00:
9d:6e:4a:7d:86:93:c6:a2:31:98:ef:e7:14:53:62:8a:a8:24:
03:1b:67:35:9d:d1:50:d9:2d:5e:98:22:07:ec:36:9a:36:da:
f2:78:e4:4a:92:77:64:62:7c:f7:6b:86:29:75:aa:f4:f7:6e:
b3:63:d6:90:6a:9e:c6:16:0e:52:3f:82:dd:b2:5d:2e:0b:d5:
94:ef:35:a7:1e:52:98:09:4d:ef:a1:8e:b9:fa:93:0b:95:59:
4c:b0:71:f2:da:52:2e:d0:39:b4:de:07:f4:12:b4:eb:fc:53:
c6:89:6c:b9:e4:49:05:52:0c:13:f4:b2:da:58:4b:4c:d7:2b:
61:cc:af:2d:e2:bc:ea:3f:a3:cf:a9:59:c3:bc:b4:4e:2d:25:
69:44:fc:9b:6c:37:86:e6:ed:6e:c6:77:3c:e1:99:88:2a:c2:
4d:1c:b5:56:f2:d0:70:89:20:bb:15:a3:91:7c:67:89:76:75:
25:64:3f:d2:92:d6:07:4e:a4:ab:41:f2:a7:f9:09:db:11:db:
0c:08:46:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:38 2025 by rpki-client