Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
File: z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft (raw, json)
Hash identifier: Rd7JRUQ/NA0B8Oxv26uyvqNclDVc1rx/qydYube2+Ww=
Subject key identifier: 56:1D:A6:2F:2D:4E:2B:5E:DE:8F:1F:2D:C6:49:6B:A5:85:AB:57:1D
Authority key identifier: CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
Certificate issuer: /CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Certificate serial: 0194BD855AF25F96F78A1D9F71FF82EDB07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
Manifest number: 012B
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl (hash: dLiz2t6mk+Gk5zbtQb/uiMw+hdia6QvSvitCPkml+5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5a:f2:5f:96:f7:8a:1d:9f:71:ff:82:ed:b0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=561da62f2d4e2b5ede8f1f2dc6496ba585ab571d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:c9:e0:80:9d:2b:9e:a9:40:c6:57:10:2b:
7d:a9:df:c6:b6:bb:55:aa:0b:f3:42:12:63:3f:a7:
4d:86:da:cc:60:35:5e:b3:8f:6d:e1:2c:62:e6:cc:
5b:9d:88:4c:79:52:e2:c7:fc:6c:8e:91:90:ab:b1:
69:91:3e:d5:d6:dd:0b:3a:b1:ea:50:8d:44:d3:02:
22:0e:ad:a5:a1:a3:27:a5:5f:28:32:02:e9:14:0b:
43:fb:a4:fa:c2:54:98:d3:ef:cc:04:ff:69:22:ad:
3c:97:11:f1:76:37:2e:48:a0:ac:f9:0d:58:60:93:
fe:28:76:66:a3:ae:d2:cf:94:a3:34:36:46:13:45:
b0:c6:fb:1c:34:68:41:a5:f8:49:6f:38:9d:7e:44:
b4:0e:35:39:8a:6c:86:f5:3e:5f:82:63:5e:14:2c:
47:04:29:0d:60:1d:ec:ea:8d:3c:b6:37:f5:44:2a:
b3:0c:66:f2:5d:10:b3:c6:14:c0:93:5b:9f:d1:25:
55:f2:2b:0e:ae:18:ab:bf:87:ea:d1:8c:61:50:0a:
39:b7:3e:54:45:a6:78:59:9e:0d:07:d3:07:ff:34:
09:c9:37:50:74:5d:b7:01:bc:4d:3b:d2:1c:9b:c2:
0a:a2:23:c8:f7:9b:0d:8e:6b:59:90:3c:be:b4:16:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1D:A6:2F:2D:4E:2B:5E:DE:8F:1F:2D:C6:49:6B:A5:85:AB:57:1D
X509v3 Authority Key Identifier:
keyid:CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:14:cd:f4:31:8b:81:3e:7b:e2:3b:52:cc:f1:ce:a5:e5:87:
44:b1:60:1c:e3:e9:2c:d5:45:8b:31:71:31:e0:28:18:7c:32:
b7:87:a1:4e:a6:9f:a1:7b:10:18:ea:2c:93:7e:5c:2b:ab:f3:
07:5a:69:16:a6:a8:7c:e1:64:1b:10:07:ae:af:e6:fb:d3:32:
da:71:91:89:e1:ec:83:b0:95:dd:63:c2:03:bd:b9:fc:36:77:
e1:54:83:dc:43:5e:c9:f2:77:c1:e7:71:de:4a:59:45:f8:f0:
0d:ed:aa:f9:bd:06:c3:8a:f7:00:90:96:c0:b7:04:f8:6d:ac:
34:18:70:81:e5:3d:04:bd:55:b3:5f:41:40:07:74:4b:2b:9a:
a4:ca:e6:bb:82:28:ea:e8:9e:8f:81:99:63:55:ec:1f:94:2b:
b1:af:ae:41:a9:64:32:79:56:0c:1d:33:b3:cc:2e:ef:ab:8d:
26:c3:7e:9b:72:97:24:c3:f8:0b:64:ff:f0:dd:3d:e5:6e:cd:
6a:38:b5:21:aa:7e:7e:58:6f:ec:45:d0:d4:3a:64:37:76:29:
e3:c2:ad:dc:ac:04:2a:70:da:de:2b:53:9c:48:8d:1c:35:43:
d2:78:b3:59:b6:e2:de:e8:48:77:79:c2:36:24:89:50:b8:80:
65:61:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:02 2025 by rpki-client