Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: //BVLwlZkSjDQqQpRsDaF9ctvXF+H/N/wYSERS2RSeY=
Subject key identifier: 1B:04:10:34:83:AB:4F:5E:6D:45:E3:FE:09:6B:0A:B6:A1:83:34:8B
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 0194BD17D2A9FDE669068189E05EA9162CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 0D0E
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: 70Lpv34rZfXXRisgXBa/wAXwYPhbwQ8NuOqHEoAa3TE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:a9:fd:e6:69:06:81:89:e0:5e:a9:16:2c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=1b04103483ab4f5e6d45e3fe096b0ab6a183348b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:e2:ae:50:a1:1a:3a:0a:a6:b2:23:5e:9c:
b1:6d:bd:17:4f:11:a5:f0:68:a4:a5:89:f7:17:b9:
91:ce:a2:6f:e7:fe:f5:fc:b3:28:7b:88:8e:fc:ec:
66:61:5c:22:3f:86:1d:7f:c5:21:7d:80:c3:11:8a:
96:86:a1:75:3d:71:a7:c0:11:46:cd:a0:cd:85:bd:
9b:42:5c:78:96:05:9a:a8:78:c1:f5:c7:3b:07:99:
29:7b:d5:fc:ce:74:6e:ae:09:6b:c8:ff:42:93:b7:
ad:33:26:64:25:ef:a9:0c:d5:be:e7:21:dd:76:a8:
64:eb:47:04:5e:81:78:89:86:f0:98:98:4e:8f:d1:
aa:bd:8a:4a:c6:bd:a9:67:b4:52:4e:45:29:ce:7a:
5e:ff:54:ce:c8:86:9b:25:fe:5e:17:4c:1d:9c:d7:
f8:7b:7c:ac:9e:6a:a6:08:9b:0e:9a:05:2f:eb:19:
36:b4:29:38:29:fc:25:75:b1:a2:aa:98:39:b1:24:
5f:d0:02:c9:f3:6e:a2:e3:1d:a2:c2:6a:4f:72:b9:
b3:1b:0c:da:38:61:8d:da:30:cf:3e:91:68:b6:61:
ee:c5:22:6b:5b:58:d4:69:dd:d3:f1:b4:14:fb:70:
72:b0:70:2e:12:fd:22:be:96:ae:fb:11:6f:c4:ec:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:04:10:34:83:AB:4F:5E:6D:45:E3:FE:09:6B:0A:B6:A1:83:34:8B
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9d:df:ed:0d:96:db:7b:df:2e:2d:f1:13:3c:f7:29:cc:00:
2a:e2:9b:89:1e:bf:a4:74:cc:74:03:fb:56:2c:ae:73:9c:8d:
e9:aa:dc:e6:ab:aa:48:60:29:70:85:e5:1d:92:fe:6f:37:72:
cd:22:d7:52:fd:a4:4f:c8:fa:81:25:91:94:ad:ab:79:92:8b:
0e:03:01:21:ab:ac:87:22:41:88:48:69:2b:b2:d4:5c:63:e8:
f5:64:6e:b4:32:94:cc:80:42:3d:9b:b0:e2:cf:36:4b:51:bd:
28:8f:ca:26:ad:8b:9f:9e:d6:d9:20:09:d9:4f:24:5b:43:0c:
cc:33:8d:86:16:9d:2b:da:41:ba:30:95:64:ae:2b:29:05:a7:
12:95:f3:e5:0b:e8:3a:a3:ba:59:3d:c2:04:df:4f:77:e3:55:
75:24:92:37:ba:3c:ec:82:28:c6:46:cf:62:9e:fa:7f:b1:21:
53:ee:2f:ce:36:9c:13:e1:14:d5:f3:33:a2:7c:c8:43:92:16:
df:59:77:17:01:36:cd:59:b2:94:88:4c:e4:4f:18:d3:6a:bc:
ba:53:3a:ef:50:ee:28:ff:b8:44:c3:95:4d:64:03:c9:a5:46:
25:88:84:95:8b:c9:7c:b4:fb:d1:6f:fc:80:7d:ae:38:a2:3a:
43:4e:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:14 2025 by rpki-client