Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: EkM4t2kOmJfbS36I/TVSkXlIRd3tUuxw+qBYlRoea9E=
Subject key identifier: C8:FA:DF:38:9F:09:95:B0:31:8E:74:87:83:B9:F5:46:3E:01:17:C6
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 0194BBCDF12B560B3080CF1408678810B191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 0C48
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: vr5uq8qiiX+Yh8OjujQn9ItOvZf8QcCngA+Si/Iyatk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f1:2b:56:0b:30:80:cf:14:08:67:88:10:b1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=c8fadf389f0995b0318e748783b9f5463e0117c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:ad:a7:ca:c2:ca:4c:42:2d:a1:72:fb:f8:
8e:e9:bc:f3:0e:37:94:dc:08:01:3b:92:28:06:bb:
17:6d:6c:84:90:37:da:c9:38:8a:f1:23:a5:05:a9:
9b:c2:78:2c:5f:d3:c8:5f:c5:40:22:40:8c:14:a9:
d6:a2:69:e2:8c:13:cf:51:00:47:47:2f:f9:8d:e8:
b1:54:41:66:15:d8:9f:2f:ca:0a:5f:88:46:ac:c3:
e1:c0:01:43:22:8a:65:3e:f7:9a:96:4e:71:69:71:
3a:56:75:68:10:ff:c3:8e:06:a5:cc:12:75:7a:ff:
3c:b3:8a:4a:31:0e:02:4e:94:fa:48:6b:c8:66:eb:
82:19:43:95:be:61:ea:0d:a5:66:72:81:89:62:ec:
51:ab:56:07:a1:a8:dd:8d:0d:12:8b:f8:51:ac:84:
59:2c:65:ab:25:6b:90:b5:e4:2e:0c:a9:ce:e3:09:
e7:05:b4:d4:50:4a:51:b2:44:4d:fc:ab:0c:fb:28:
89:eb:d7:a8:0d:f0:5c:4e:9a:21:ff:a8:09:c5:33:
7d:c3:9a:e8:74:ef:1e:93:ce:07:94:67:8a:5d:61:
b8:84:27:9e:7e:f2:e1:9e:32:c1:52:de:dc:cf:42:
f3:a2:8b:b4:81:87:f9:cf:37:c8:36:68:c1:09:0f:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:DF:38:9F:09:95:B0:31:8E:74:87:83:B9:F5:46:3E:01:17:C6
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0c:0d:2c:27:0a:57:a5:b1:3b:48:34:52:86:0e:ec:dd:90:
8e:53:03:60:61:58:f3:fb:96:5f:e7:ea:74:37:c4:f9:cf:19:
f9:d3:4f:fb:e3:3f:83:0d:82:54:d6:5b:71:56:db:1f:03:11:
f9:e8:5d:5c:76:ef:4c:6c:b6:26:4c:76:d2:3a:5d:6a:96:48:
59:37:90:df:ee:c5:5d:8b:a5:e6:d6:5b:de:4e:31:7a:91:1e:
b7:ae:00:2f:02:03:73:85:49:f7:d4:88:c2:ed:41:b8:a9:d5:
a1:2c:d5:20:60:12:7b:45:ff:4a:d8:be:33:0f:01:7d:46:30:
45:44:31:38:d1:83:81:b0:c3:ed:fd:0d:80:1f:3f:b0:5e:21:
50:e3:17:5a:53:9e:e7:31:d5:ef:d7:b2:68:a8:6d:fb:ca:5c:
1c:91:2b:05:44:81:9b:e9:ac:d0:f1:00:43:c6:d1:84:f5:9e:
c5:ac:9e:c0:be:aa:e0:99:74:08:48:33:be:83:15:b8:e8:f4:
7b:56:f7:cc:a2:a6:32:56:f4:d9:a1:b5:84:54:66:ed:ee:77:
7a:60:89:71:f8:43:53:be:7f:a5:e9:49:ca:18:0a:4e:e3:ae:
2c:d5:d3:cd:25:fc:9c:99:df:ea:fa:ee:34:3a:66:3b:2c:a6:
35:d1:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client