Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft
File: ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft (raw, json)
Hash identifier: 2sJd3ithHLTi741+KFQA8B1ePKow9/HW0U2LwwNcCeQ=
Subject key identifier: 6F:E2:B3:2B:3C:72:04:46:B8:F0:A7:9C:E4:4A:B5:DD:DA:39:E6:A2
Authority key identifier: 65:4D:69:21:60:DD:46:27:03:87:99:29:7D:47:75:14:80:D0:7F:16
Certificate issuer: /CN=654d692160dd4627038799297d47751480d07f16
Certificate serial: 0194BC72A62558A699D0B309B33140619FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU1pIWDdRicDh5kpfUd1FIDQfxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft
Manifest number: 1297
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: ZU1pIWDdRicDh5kpfUd1FIDQfxY.crl (hash: O9BqNHIqNDkJwMsGj41rvUcSUl63SgqXUvsB1zQ+784=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a6:25:58:a6:99:d0:b3:09:b3:31:40:61:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d692160dd4627038799297d47751480d07f16
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=6fe2b32b3c720446b8f0a79ce44ab5ddda39e6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:84:05:16:95:ec:d0:af:67:cb:8c:c6:f5:
8b:24:f3:c9:2e:be:dd:bb:31:8c:06:f6:5c:b7:33:
8e:17:71:38:eb:67:02:71:a9:de:9f:db:cd:51:41:
bf:da:00:e4:d2:bb:f5:47:f1:b8:03:39:25:1c:e7:
eb:9b:ee:76:20:74:ef:14:57:47:57:fe:98:19:ab:
7b:c7:fd:f3:2d:00:5d:17:4d:3f:8e:d4:d9:4a:9f:
e2:71:ab:c7:80:09:35:5f:90:92:fa:f3:07:05:88:
c3:45:7d:f5:00:11:89:ae:1d:e8:09:ca:b9:19:80:
f6:ac:96:17:99:9d:d1:9d:1a:32:9e:16:43:9a:56:
84:5b:89:91:c4:a5:c1:e5:45:50:3d:83:56:0d:85:
a9:8e:d9:0c:ac:dc:de:7a:d3:9b:7e:35:42:cb:fd:
84:18:07:60:03:2f:ef:74:9e:d4:e8:a2:f0:24:02:
2d:0e:32:3f:76:a2:a2:84:a4:a2:12:48:7c:0f:5c:
5e:df:0a:8e:65:0b:12:07:e4:52:4d:65:53:9f:4f:
a3:b0:02:b8:49:3a:2f:de:d8:68:a9:e9:de:83:8b:
d3:9b:11:29:ce:b6:9f:54:f7:66:a3:0c:57:06:38:
dc:36:24:76:7a:72:32:3d:5f:8b:07:f7:1a:72:b8:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:B3:2B:3C:72:04:46:B8:F0:A7:9C:E4:4A:B5:DD:DA:39:E6:A2
X509v3 Authority Key Identifier:
keyid:65:4D:69:21:60:DD:46:27:03:87:99:29:7D:47:75:14:80:D0:7F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU1pIWDdRicDh5kpfUd1FIDQfxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/399058-81c7-46d8-a8f4-61f1c1bcbecd/1/ZU1pIWDdRicDh5kpfUd1FIDQfxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a4:45:8f:56:3b:87:26:45:1f:c0:4b:5c:c8:09:6d:0b:77:
55:9c:e2:17:e2:43:0a:30:db:85:e9:5a:d2:dc:49:0b:29:2a:
6b:6a:9b:35:05:c4:3a:49:17:45:f1:a3:65:74:0f:73:54:79:
43:0d:65:86:4d:6e:34:db:51:00:17:4e:c3:28:c6:60:7c:d1:
c3:81:b8:b8:f8:25:81:fe:6a:68:cd:52:3a:95:44:8f:b4:8e:
cc:66:80:d2:5b:dc:ed:78:60:81:f5:d0:ef:ac:ec:4d:4e:cf:
ef:58:72:fa:19:a8:5e:ba:08:bf:63:d0:36:d0:90:45:ce:41:
72:ad:a4:f4:f4:81:1c:6d:5e:9f:35:e8:4d:94:fd:bf:03:15:
4f:9c:1d:88:f3:77:c2:c3:5e:62:88:63:6e:8d:05:af:ae:d5:
10:32:ee:10:3e:01:3a:46:e4:6e:0a:3f:73:60:77:e8:ec:a7:
79:21:90:71:63:66:77:03:35:87:a3:65:4a:55:b0:76:8d:a4:
d2:e8:1d:8a:e9:07:fc:06:b7:a1:6b:e8:7d:ab:b6:c3:12:2c:
d0:cd:b5:b1:fa:bd:e7:3d:02:9e:3a:5d:bd:f4:71:c2:ac:cb:
8e:54:a9:a1:86:a2:bc:ee:98:1f:8e:84:27:e5:84:5d:be:f5:
fd:6d:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:40 2025 by rpki-client