Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
File: Z3NwPrTqs2ernekaKsQe4yAUAw8.mft (raw, json)
Hash identifier: odZLS4tGoOORwMaLQ3kQ1JE1kj8nUk8hzcORFOOWKzU=
Subject key identifier: 5D:FC:AE:05:95:9F:E5:74:EB:C6:2C:64:81:5A:F5:A6:03:84:A6:B6
Authority key identifier: 67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F
Certificate issuer: /CN=6773703eb4eab367ab9de91a2ac41ee32014030f
Certificate serial: 0194BBCE8DDC37A5F4D782257123E28D258F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
Manifest number: 06F2
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: Z3NwPrTqs2ernekaKsQe4yAUAw8.crl (hash: hnAHXrCmPoZaQak4114YHgpURbuNPeNRE6/YjFDPs6I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8d:dc:37:a5:f4:d7:82:25:71:23:e2:8d:25:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6773703eb4eab367ab9de91a2ac41ee32014030f
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=5dfcae05959fe574ebc62c64815af5a60384a6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:fb:59:ec:d1:cc:68:89:0c:1c:4f:22:5a:
f0:43:6d:87:e0:d6:7a:f0:85:5e:67:f3:e9:cc:e6:
3e:96:93:e5:7c:04:fb:df:76:e8:84:02:c6:2c:e6:
fc:eb:ea:3f:40:2e:f1:55:a7:e0:6b:5e:c9:81:94:
0d:d7:5e:24:53:cb:94:9c:48:46:75:c4:45:4f:92:
e4:6e:53:34:df:20:c3:1f:05:ef:36:9d:3c:ae:24:
23:5d:b4:69:3f:ee:e5:41:1b:98:6a:20:cf:b5:0c:
48:31:6d:07:c9:31:ee:73:2e:d8:2d:b4:10:0f:b2:
94:f9:ab:a2:40:14:e9:34:59:60:e9:39:94:9a:d9:
cf:4b:0e:75:ed:c1:03:f0:00:76:00:48:72:11:b2:
40:eb:c9:11:be:19:d4:bd:74:54:dc:26:c2:4e:d7:
ce:e2:6c:87:da:00:a4:70:db:cd:ef:a5:44:8d:0f:
54:94:09:0f:1b:d2:0d:1e:4f:52:52:a3:6f:84:f7:
39:ed:61:9d:a7:ca:96:75:6a:11:ca:44:e7:c2:f4:
98:28:bf:5d:1f:c3:df:45:a1:73:1b:f7:e5:b0:04:
16:91:c4:d1:43:60:21:eb:07:8a:79:c8:b7:76:95:
7c:51:3c:da:fc:df:7d:21:3b:14:a1:5f:35:39:5e:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FC:AE:05:95:9F:E5:74:EB:C6:2C:64:81:5A:F5:A6:03:84:A6:B6
X509v3 Authority Key Identifier:
keyid:67:73:70:3E:B4:EA:B3:67:AB:9D:E9:1A:2A:C4:1E:E3:20:14:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3NwPrTqs2ernekaKsQe4yAUAw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8ca655-1e8c-4243-88df-47febb0ac259/1/Z3NwPrTqs2ernekaKsQe4yAUAw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2b:be:28:84:60:a6:f2:36:00:4f:77:9e:4c:ff:e5:20:c2:
50:6a:b8:03:72:b9:d7:23:fa:9f:4f:4f:1b:2f:7a:a2:d1:a8:
1b:cf:8d:43:a8:3a:94:43:df:98:80:61:c8:ff:39:86:31:3c:
33:c5:85:1b:13:e7:fd:c0:74:be:6f:e0:df:c4:0b:6c:6f:2d:
70:40:5c:a0:2f:c5:59:24:88:82:ea:d8:f9:6c:f4:16:d8:dc:
1d:5c:62:65:1e:66:9a:88:92:40:f8:51:40:99:37:ed:02:96:
48:8d:88:c2:a0:82:ac:c5:eb:c2:f2:e4:45:c8:1a:a4:fa:47:
cb:22:ca:72:ed:6a:83:12:5a:aa:1e:1d:b9:cd:d0:08:39:8c:
2e:d8:fa:c6:9e:c0:a3:dd:5f:22:79:fb:b3:bc:3e:4f:b7:52:
1a:b3:d0:53:65:cb:70:6d:8d:e1:7e:78:a5:d1:f4:59:cd:33:
2c:00:96:e7:a6:d7:4d:94:03:7b:ca:c5:81:aa:6a:93:d2:52:
54:56:56:77:bf:17:22:7a:5f:9c:1a:01:9d:42:bc:d9:97:54:
69:ba:69:df:dc:63:9f:f1:dd:63:34:84:90:fc:fd:02:bd:68:
73:fb:f8:79:0b:57:41:42:f5:89:f0:a1:b7:21:e0:3b:29:22:
d9:7f:be:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:21 2025 by rpki-client