Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
File: ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft (raw, json)
Hash identifier: 68XRgJw99N9xkukirS/BrLyi6HMSR3oh+LCUCjPoUTw=
Subject key identifier: 2A:72:0A:EA:57:45:61:03:44:30:D2:37:21:64:DD:03:4E:F4:42:71
Authority key identifier: 65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12
Certificate issuer: /CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
Certificate serial: 01932E9F633046F72FA8BB37A44175D936D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
Manifest number: 135A
Signing time: Fri 15 Nov 2024 07:00:17 +0000
Manifest this update: Fri 15 Nov 2024 07:00:17 +0000
Manifest next update: Sat 16 Nov 2024 07:00:17 +0000
Files and hashes: 1: 9cNkOnvTCog2hgiasaGZdrnPHbM.roa (hash: zS/Xw5VN1/8hexWf6gdCNIvqiL7JGNesOL/kTQHZ+ew=)
2: ZdP4CuZosTz7YljFsZ-GgCp0_RI.crl (hash: xvl5On1x9nPy5lyX6wTHBd7PoMIwPoD44J2WnWa6h0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:9f:63:30:46:f7:2f:a8:bb:37:a4:41:75:d9:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d3f80ae668b13cfb6258c5b19f86802a74fd12
Validity
Not Before: Nov 15 07:00:17 2024 GMT
Not After : Nov 16 07:00:17 2024 GMT
Subject: CN=2a720aea574561034430d2372164dd034ef44271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:31:e2:e3:57:cb:8f:82:00:5d:c6:28:1f:
40:8c:01:70:be:08:9a:55:f9:44:d1:f6:d8:1a:43:
b8:f5:38:0d:f5:28:fe:a6:da:05:29:a1:f6:d0:84:
5b:8d:55:ad:4f:ca:d8:13:dc:33:e2:72:8f:14:1d:
03:5b:ec:9a:58:c8:52:5c:9b:4f:fc:a7:4c:f8:c9:
50:19:8f:5a:cd:2d:2f:69:63:d9:7a:48:4d:cd:39:
a4:71:cc:ec:7e:bf:b3:ed:df:2e:86:6e:d8:b7:c9:
eb:5a:35:b7:e3:c1:d2:10:8b:d4:56:67:75:ee:3c:
82:da:50:1d:cb:14:bb:7d:4f:99:f5:09:67:77:85:
f4:88:93:b0:46:f8:77:53:7b:b9:f5:99:6f:c1:ba:
1d:cc:e0:3c:46:17:fc:3c:18:00:ed:7e:38:0b:f8:
0d:54:7b:73:17:a5:04:93:11:0b:e2:58:fa:aa:4f:
7a:e9:65:3b:2a:2d:4b:53:21:21:9d:db:af:01:28:
f4:e0:a6:22:61:77:3c:cb:57:c8:8b:ef:2f:b4:79:
90:f2:25:05:b8:e0:b0:3f:ec:18:81:a9:97:3f:43:
50:c3:d7:82:b5:b7:a9:4f:68:85:26:a4:96:5d:51:
74:7c:24:44:37:4e:cf:60:03:a6:88:72:63:09:fe:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:72:0A:EA:57:45:61:03:44:30:D2:37:21:64:DD:03:4E:F4:42:71
X509v3 Authority Key Identifier:
keyid:65:D3:F8:0A:E6:68:B1:3C:FB:62:58:C5:B1:9F:86:80:2A:74:FD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdP4CuZosTz7YljFsZ-GgCp0_RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0d1a-0d8d-4d33-9913-ead20b8fefdf/1/ZdP4CuZosTz7YljFsZ-GgCp0_RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:03:53:bb:65:f4:90:ab:84:17:e9:a8:77:92:48:ba:e9:21:
b2:fc:5b:a2:50:e6:05:11:59:92:f5:ae:88:6a:6c:44:13:f5:
ce:77:a0:8a:e3:65:04:7f:4e:c1:4a:3d:94:4d:8a:33:e4:7c:
b4:d9:89:be:6b:c7:57:81:9d:b0:1d:d0:71:2c:66:f3:bc:98:
2f:c1:d6:80:2e:7f:0c:b8:1f:85:ae:6e:30:f6:52:3e:e9:92:
5c:90:65:c4:0a:56:c6:cd:37:b5:e2:37:91:94:75:5d:26:f6:
53:e7:83:e3:f0:a7:f6:58:79:96:53:bd:68:a1:96:50:36:88:
19:45:b0:d1:ac:f4:f5:13:bb:9a:78:1e:2b:b1:d1:74:ad:6a:
4c:ae:23:e1:74:cd:0b:8b:7c:e0:21:cc:ee:6b:23:42:b8:c6:
65:d7:29:80:a8:f0:ec:61:2b:d9:4f:ea:f7:4e:6c:54:06:ed:
19:33:9c:43:c0:42:f2:d4:fa:e6:3d:d4:bd:03:2b:61:c3:0a:
b3:10:58:c8:c2:8c:50:28:b7:1b:87:04:60:7e:f7:0b:c0:7b:
b7:bc:eb:5a:b0:8d:56:21:f8:96:a0:a6:ef:68:a5:3b:d7:37:
f4:cc:14:59:2b:96:5d:61:a3:e8:55:ea:8a:c2:51:70:50:b4:
bc:03:72:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:42:11 2025 by rpki-client