Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
File: zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft (raw, json)
Hash identifier: dR5KDLWOD0MqZIRgya1oaxw4BZIaSzA9GxqeyC91ftA=
Subject key identifier: 25:F1:AD:59:25:8B:27:10:FA:E9:B3:68:A0:15:F0:3D:99:DC:2A:C0
Authority key identifier: CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
Certificate issuer: /CN=cd35f6ff567bde93394fff282fad417da0b53614
Certificate serial: 0194BD17DE1D05D0A9A255B98CD82600036D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
Manifest number: 0B02
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl (hash: p5dWDB7r4ilXDi5dW7lOHj/kh2kVrF0f+7H122I9p78=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:de:1d:05:d0:a9:a2:55:b9:8c:d8:26:00:03:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd35f6ff567bde93394fff282fad417da0b53614
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=25f1ad59258b2710fae9b368a015f03d99dc2ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:b7:f8:5f:ee:92:f0:b3:ef:f0:e3:af:1c:
94:b4:3a:31:2a:a1:b2:f7:97:e4:d8:7f:8d:a8:3f:
98:ab:82:c7:2c:2f:0e:f3:d4:7b:7a:e4:63:85:2f:
42:1d:96:21:90:1f:a9:d5:47:9e:72:90:1f:bd:e2:
45:65:4e:8a:9f:71:6c:65:e9:f7:ab:79:02:3e:ae:
29:a1:d6:d8:39:e1:67:cf:08:30:06:4b:0b:d5:96:
dc:4f:d8:81:63:ea:71:a5:4a:85:a9:4d:f3:bd:6a:
c2:78:58:84:e6:65:4c:b3:78:04:50:d8:ff:96:bd:
7a:3e:85:17:97:b2:cb:33:51:81:2d:38:ad:71:73:
43:67:b4:ae:fa:60:99:06:09:df:80:e3:c5:17:05:
0e:95:e8:e9:db:8a:c9:62:a6:4c:0a:cc:0d:0c:13:
82:81:59:ae:45:41:63:74:11:db:88:32:19:5a:4e:
ab:49:bb:00:eb:ab:40:ff:5b:aa:30:d9:4e:c5:e4:
7d:df:00:7a:bf:ec:91:f9:70:ee:f4:c7:68:22:47:
1e:57:22:bd:4d:a4:6d:7b:7a:ba:1e:e8:93:5a:56:
89:12:ea:82:de:1a:b0:20:90:d8:1f:b8:69:a4:b0:
c6:01:6f:0a:bf:9a:16:1f:69:50:de:4e:86:fc:bd:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:AD:59:25:8B:27:10:FA:E9:B3:68:A0:15:F0:3D:99:DC:2A:C0
X509v3 Authority Key Identifier:
keyid:CD:35:F6:FF:56:7B:DE:93:39:4F:FF:28:2F:AD:41:7D:A0:B5:36:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTX2_1Z73pM5T_8oL61BfaC1NhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/09dddf-f83f-4650-a347-44a307545d74/1/zTX2_1Z73pM5T_8oL61BfaC1NhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3a:a9:d2:1f:3b:77:fa:3a:6d:a9:d6:b4:c7:53:64:cb:a5:
96:d2:6b:cc:a0:6f:eb:e1:72:09:b7:77:48:60:5d:22:33:fa:
71:39:10:41:f0:6c:c0:21:3d:a1:8f:cc:26:0f:a6:e6:85:9e:
8b:c7:e0:2e:1b:f6:78:68:4f:30:17:46:c1:a1:9c:46:ab:76:
30:b7:54:36:f1:af:14:41:ac:08:98:ee:47:d4:1c:c9:c3:9d:
12:6e:35:12:a9:cb:c8:85:46:b7:d6:04:9d:da:8d:10:b3:15:
26:e7:72:20:32:5e:fd:7e:26:0f:73:2a:3b:85:a6:07:c8:25:
86:eb:a4:1a:59:12:7b:07:0c:c8:f3:39:25:26:37:74:b0:31:
02:08:9a:5a:f9:79:fd:be:3d:a4:ef:d5:38:c3:0f:44:76:0b:
a6:77:3c:88:0b:25:db:36:a2:07:4e:fd:8b:c0:3c:0f:b3:e8:
6c:31:07:d2:d1:d3:eb:c7:38:44:16:77:32:2c:31:f3:a2:2c:
11:55:3c:4f:5e:bd:fb:6c:a7:7d:25:10:ab:ce:66:6a:46:f0:
05:a7:a2:9d:1d:50:81:40:0c:37:9a:4d:bf:8f:c6:1e:ac:42:
44:3a:55:21:fa:44:86:cf:87:68:a9:ee:23:f9:09:1b:41:07:
57:d6:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:35 2025 by rpki-client