Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
File: RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json)
Hash identifier: ui0g8RxL5tEPU45zVUbQpOaoKH0n2lH8korz3LgKk3A=
Subject key identifier: 32:BB:6E:59:F0:E8:BA:46:4E:41:74:9E:88:5B:E4:28:6A:6A:B4:40
Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
Certificate issuer: /CN=459ccc1bb01160686806db35a93351b21b3e60dc
Certificate serial: 0194BD1788B4ECA68E4937074897C54E3718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
Manifest number: 11A0
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: XnhJvJPr2SsA8w+zEQgNNQr+aJ2FTRu3pUqJR1BDIFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:88:b4:ec:a6:8e:49:37:07:48:97:c5:4e:37:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=32bb6e59f0e8ba464e41749e885be4286a6ab440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:6a:4e:74:af:89:55:8a:54:21:0c:b4:23:
4c:09:c8:07:50:c9:08:6d:04:ed:8e:8f:92:16:43:
1b:97:f5:d4:81:df:13:69:9e:4c:48:96:af:be:1a:
b2:e8:01:8d:ff:0e:53:ec:39:11:4a:bb:e8:4d:6d:
ac:8d:ad:f9:67:c0:cc:21:06:bd:c2:83:e2:9a:94:
88:e4:1b:88:c3:58:41:2b:33:f9:28:60:42:1e:4b:
23:fa:eb:21:6e:00:40:8d:98:52:f9:6a:bf:cc:a7:
f6:16:11:39:11:08:a2:b8:cf:0a:ae:73:71:bf:b6:
bf:de:62:b2:7d:cb:6d:34:e2:e6:89:cc:48:a4:bb:
42:66:f5:27:60:55:ad:a2:fb:4d:23:61:43:36:49:
ea:bd:73:66:3e:8f:ac:f9:19:58:a4:b3:91:54:48:
f9:5f:ff:cf:45:61:7a:8a:bf:5e:51:b2:03:5c:01:
c7:82:d4:4d:8c:28:eb:e1:62:7e:0f:de:21:61:6a:
2e:20:fa:cb:93:d1:65:a8:82:9e:f4:03:a5:9f:74:
37:f1:43:d0:fa:36:46:c6:ce:dc:53:53:4c:34:56:
43:21:5f:8f:01:2c:d5:70:b5:b8:d9:f9:23:3c:ec:
b8:89:97:5f:94:e0:ad:20:29:06:8a:50:96:80:3f:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BB:6E:59:F0:E8:BA:46:4E:41:74:9E:88:5B:E4:28:6A:6A:B4:40
X509v3 Authority Key Identifier:
keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:24:11:4c:76:f4:7c:31:0a:ff:84:a8:8e:c9:63:94:02:0b:
b5:3c:fa:85:d9:90:b1:b6:c3:32:7e:34:9a:8b:53:3d:f9:11:
0b:7c:19:f8:49:d6:02:d0:f1:48:fe:c7:dc:80:21:e0:96:58:
2f:ff:47:27:5b:4b:0b:98:48:3d:86:08:06:ff:7a:65:ec:6d:
69:8d:bd:13:3e:87:fd:3c:14:f1:24:28:f0:00:0e:85:e7:d8:
eb:64:ac:5b:43:9f:14:b2:4b:71:1d:20:13:af:06:da:54:06:
06:24:ed:df:5a:8c:35:85:28:1a:dd:e9:83:05:c5:38:98:dd:
57:23:18:b5:c7:f7:af:1e:95:c7:7e:99:2a:3f:13:f7:45:f1:
6f:fa:e0:16:51:f2:49:22:cb:ab:f4:51:57:62:55:c5:f6:6e:
7d:e9:53:05:8b:ec:48:09:9f:aa:c0:54:74:98:96:dd:63:81:
93:ba:36:ae:ae:f4:77:8a:9b:05:01:0b:84:ac:15:d3:8a:34:
c4:f3:d3:e4:9d:ff:eb:1e:81:de:8c:d1:e3:ba:73:78:c6:25:
0e:14:04:e2:79:fa:01:0a:36:71:62:63:6b:f4:36:28:73:9a:
41:9a:55:0e:74:d8:40:59:d5:5b:56:48:a5:99:e1:04:6d:c7:
9e:59:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:42 2025 by rpki-client