Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
File: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft (raw, json)
Hash identifier: 6TvhQyD4loziA5uPVeGCsNcoK+kH3cVyxdUEht/qms0=
Subject key identifier: 34:52:48:C5:31:89:61:A6:6E:61:95:A2:C7:8D:79:4C:17:AC:56:85
Authority key identifier: 67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
Certificate issuer: /CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Certificate serial: 0194BC3CAE0EA83E7AE473300350BA8C1D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
Manifest number: 0AAB
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl (hash: CDRF9da7eSvTupAhxgWyNpwxKi9i1qZD5G8zfs0unyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ae:0e:a8:3e:7a:e4:73:30:03:50:ba:8c:1d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676fbb577c93dc45d48f0199b19d1ca7a2137c56
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=345248c5318961a66e6195a2c78d794c17ac5685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:15:59:ea:85:35:0c:3f:f6:7e:ae:a0:6e:
ab:96:41:c8:ea:7a:ea:8e:5e:7d:fa:8f:a3:dc:ef:
82:98:ce:57:ef:9e:5e:65:3f:4a:bc:b4:68:ba:eb:
39:18:de:1a:64:15:78:9d:d4:75:49:55:94:51:71:
71:c9:07:57:b5:3a:d5:64:a6:cb:8f:92:9f:be:e3:
3d:c5:3a:34:33:74:20:73:0e:ab:66:6c:2b:41:18:
f1:50:4d:1f:40:07:f5:45:43:15:d0:06:e3:e1:6a:
b2:0b:16:8e:49:fa:9e:ef:dd:9a:30:f0:51:21:e7:
70:7f:e8:d9:ca:99:e3:a1:26:cb:24:74:16:7c:8f:
f3:07:14:48:47:fb:43:db:c2:11:7b:9e:88:50:fe:
83:5e:c3:00:af:37:b0:9c:47:0f:3d:89:f4:e2:84:
18:a9:2e:90:2c:89:5b:eb:be:0b:71:5a:1d:67:04:
d3:f2:76:7b:71:37:84:5d:bf:07:61:76:3e:6d:8f:
f3:b1:b7:aa:ff:a4:ff:71:c6:ba:76:81:90:da:cd:
95:a8:68:0a:7a:d0:dc:a2:17:03:99:f6:28:17:bd:
a0:b1:9f:7c:1c:16:7e:74:97:07:fe:58:4e:fc:d4:
7f:2b:70:94:7f:0b:ec:37:9a:b5:c3:b3:24:f0:bd:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:52:48:C5:31:89:61:A6:6E:61:95:A2:C7:8D:79:4C:17:AC:56:85
X509v3 Authority Key Identifier:
keyid:67:6F:BB:57:7C:93:DC:45:D4:8F:01:99:B1:9D:1C:A7:A2:13:7C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/8a107e-ab8b-43e2-971f-1cde731e6fdf/1/Z2-7V3yT3EXUjwGZsZ0cp6ITfFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ea:6d:87:39:f4:fc:d3:7b:cf:67:b1:37:dd:74:20:ff:25:
34:ea:79:6d:16:05:38:ea:23:37:b4:10:3e:5c:26:7b:af:27:
01:b0:e8:75:ea:9f:80:09:63:93:aa:ff:91:5a:ec:e2:9a:e9:
a6:a4:43:c5:73:b5:63:df:b4:d0:b8:bc:5b:15:c9:f2:ba:b7:
59:b2:37:9d:b8:1b:74:a2:68:45:3c:dd:2e:8e:bc:29:68:1a:
2d:02:46:d0:34:76:4d:04:57:93:4e:62:b9:bd:ce:30:69:06:
1e:20:21:63:25:a9:aa:99:0d:eb:19:b2:dc:d8:39:ee:0f:6a:
11:1f:46:59:e1:ed:df:81:ec:e3:39:c5:4d:19:b1:82:32:38:
da:48:16:24:e7:6b:8d:4e:b8:64:01:20:d2:d1:00:85:54:ce:
e4:80:c1:35:26:79:9c:7f:b7:eb:45:fa:55:d3:22:9b:1b:27:
ae:82:ac:e3:bb:fc:b5:46:c5:ae:e0:a9:fe:13:84:d0:71:69:
2d:7a:6c:a9:00:1e:37:ed:53:d0:8e:ba:ef:19:bd:99:19:1a:
ae:51:06:e2:e0:3e:a7:8f:d3:18:70:d9:d0:12:9e:86:3a:5b:
80:e3:66:b6:65:9c:bf:99:7d:eb:32:59:8b:27:dd:bd:17:1d:
c8:f2:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:42 2025 by rpki-client