Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.mft
File: _zLOxgb7b2_WrnvodIJsMCtpXvM.mft (raw, json)
Hash identifier: E5WmSferhtCQQ4WSXRtbFbxiHQr+ACrMGLb5/OLANGY=
Subject key identifier: A6:72:BB:80:FE:4C:43:DF:6F:1D:34:18:A0:9A:E9:71:32:9B:F2:9C
Authority key identifier: FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
Certificate issuer: /CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Certificate serial: 018D78B61C7EE0E99E752D72FDD219C0EC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.mft
Manifest number: 085C
Signing time: Mon 05 Feb 2024 10:00:16 +0000
Manifest this update: Mon 05 Feb 2024 10:00:16 +0000
Manifest next update: Tue 06 Feb 2024 10:00:16 +0000
Files and hashes: 1: GhKyxk0esCL4fUxr4Hd_mjj8-tw.roa (hash: eC4wknSrkqEp5k8cYsdHH8bnYrKRlcRo+U4nTCEVfDo=)
2: T2ja2nzLCi_PMfPmiQMYoGz3NA8.roa (hash: sO8P6DKcJ0oWyvVDkh3lSWJX1Z89OdWbzqExARFvkb0=)
3: _zLOxgb7b2_WrnvodIJsMCtpXvM.crl (hash: ftAICS9aju3zGUXK5bUTNZOahybqTDKXXbcKgaIUeBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:b6:1c:7e:e0:e9:9e:75:2d:72:fd:d2:19:c0:ec:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff32cec606fb6f6fd6ae7be874826c302b695ef3
Validity
Not Before: Feb 5 10:00:16 2024 GMT
Not After : Feb 6 10:00:16 2024 GMT
Subject: CN=a672bb80fe4c43df6f1d3418a09ae971329bf29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:ae:ca:b8:5d:63:9a:20:79:aa:41:3b:21:
fa:fa:36:69:1a:37:cd:4a:70:ae:51:66:0e:64:26:
33:56:b5:c8:f1:d9:96:60:ad:9e:e2:f2:10:d6:6a:
e5:a9:77:e4:3a:21:b0:67:5b:ed:74:63:4d:14:14:
5f:a0:38:be:ec:b7:94:4e:18:bc:57:85:77:d5:54:
21:08:ec:63:dc:07:f8:0f:29:13:8d:eb:56:5b:6e:
fe:94:a5:74:31:a2:71:58:89:b0:63:f6:29:07:82:
a8:92:a5:e6:47:bc:f3:e6:c9:2d:7c:21:49:49:35:
a1:5b:8d:42:ac:6c:5c:76:a8:0d:29:c4:11:3e:da:
75:0c:d1:f6:16:95:95:04:e4:34:99:8e:eb:7d:bb:
48:42:e4:a8:9f:04:1e:20:3c:9a:e0:f4:a6:88:f0:
d8:33:84:b7:fe:12:65:1f:24:64:73:49:a9:fe:30:
63:97:c1:e5:4b:c1:ed:f7:52:28:b0:27:0f:88:ff:
6e:d2:5d:b3:23:97:eb:81:bb:d1:68:46:4f:32:a1:
9c:77:88:0a:fd:f1:f4:b9:94:27:6a:fe:d4:1d:3b:
13:3a:24:b4:3f:49:c8:71:4a:09:89:e7:6b:b5:d0:
23:25:65:e3:be:ff:52:b1:b8:46:92:d8:ab:fc:74:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:BB:80:FE:4C:43:DF:6F:1D:34:18:A0:9A:E9:71:32:9B:F2:9C
X509v3 Authority Key Identifier:
keyid:FF:32:CE:C6:06:FB:6F:6F:D6:AE:7B:E8:74:82:6C:30:2B:69:5E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLOxgb7b2_WrnvodIJsMCtpXvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f097b6-7a7f-4f16-a60e-3699707b8631/1/_zLOxgb7b2_WrnvodIJsMCtpXvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a6:26:00:76:7d:22:5b:f3:15:1a:15:be:f8:6e:21:36:d8:
35:67:88:aa:fb:73:dc:a4:3e:d6:8c:50:65:08:9a:7e:10:69:
82:aa:75:11:2d:65:d9:c7:59:15:56:d7:5d:9f:88:67:c4:1f:
d1:46:0b:a6:8d:98:82:ab:43:69:c7:8d:5f:d1:68:69:36:7d:
1e:fc:5a:81:7b:ec:71:f9:10:68:64:55:94:54:88:0f:34:a1:
43:de:5a:75:76:62:7a:0b:78:dc:5b:76:ea:1d:ea:7d:5e:67:
7c:e6:bd:49:c4:0f:51:ca:db:66:a1:84:df:5e:f1:f8:34:26:
66:9c:6a:ca:e1:85:ea:ee:c4:09:10:98:a8:95:99:99:84:6b:
14:79:e1:49:8a:1b:c5:69:3f:1a:71:5d:fe:f3:be:70:c2:99:
3d:dc:c0:dd:01:40:08:0a:df:8e:a2:bb:d8:bd:80:b1:d2:84:
ec:7e:2e:72:8c:31:66:24:41:38:53:08:8a:68:26:eb:76:16:
07:f6:cf:04:2c:33:83:07:17:f6:7e:21:34:b8:54:9b:e9:00:
91:a4:ca:48:db:05:7c:03:cc:3c:4b:51:5c:f9:0e:28:cc:5c:
fa:e7:58:93:93:5e:d2:4c:8a:aa:8a:11:9b:53:20:f4:27:ea:
09:9f:b9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:55:27 2025 by rpki-client