Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File: cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier: 7pEaAHBF5HEaF3PkqWPt5NmilfTjOkpoZsHI8rbC+W4=
Subject key identifier: AB:F4:8F:35:02:6B:7F:A0:DF:14:81:6C:73:F0:39:BC:DB:8C:CB:78
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer: /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial: 0194BBCED5D75B6B29F96769EA408C02E3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number: 1079
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: uZCgtAYQdlNss1ekP2b+Gim1dTA7GZIjWYv2QBEy920=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d5:d7:5b:6b:29:f9:67:69:ea:40:8c:02:e3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=abf48f35026b7fa0df14816c73f039bcdb8ccb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:47:09:48:b4:d5:d5:e9:b9:7d:4b:57:d4:f1:
15:a7:84:8a:4a:24:3a:75:63:dd:82:ea:d2:1c:b3:
ff:9e:9e:fd:2a:a1:47:ac:d0:f5:98:27:c8:1d:1b:
73:48:ca:e2:b1:a5:1b:4b:6d:59:1e:fb:28:6a:4e:
3f:46:8d:fc:c2:0a:5f:47:49:35:9a:9b:1a:6d:01:
3c:28:45:f3:63:70:94:db:ad:29:f4:0d:08:00:c4:
56:35:1d:d0:0c:29:62:24:13:b4:7e:80:79:3f:32:
30:cb:dd:a0:0c:77:b1:d6:99:6b:2c:c3:78:95:03:
36:3a:04:07:a5:fc:68:8a:1c:37:99:28:a2:63:0f:
e5:b9:0b:42:40:6c:97:41:f9:cd:3c:0c:14:45:bd:
22:f1:07:37:f8:10:be:d1:23:81:d0:fd:71:d9:e8:
30:10:63:cb:e2:33:72:a2:b8:04:8b:58:0e:b0:ab:
a3:7c:e8:80:53:33:5c:7e:9c:90:c0:62:cf:68:38:
25:fe:0c:e4:03:c7:8b:dc:4f:6e:5f:82:fd:e9:3d:
dc:c3:f2:92:fc:5c:e8:59:60:38:73:20:29:ff:7d:
cb:04:ca:a2:79:20:81:f4:ea:4a:04:3b:0f:75:d8:
3d:a4:8f:08:1f:04:02:78:8f:46:c8:7f:e2:6e:dd:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F4:8F:35:02:6B:7F:A0:DF:14:81:6C:73:F0:39:BC:DB:8C:CB:78
X509v3 Authority Key Identifier:
keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:48:86:19:02:bf:72:a5:4b:26:27:19:78:68:ef:68:01:ca:
ad:23:84:a2:da:ca:11:95:73:f5:f6:ec:7f:fe:2a:e7:4e:82:
cb:1a:7b:42:a8:c0:0c:50:c0:2b:cc:66:cf:85:a5:04:6b:95:
56:96:a0:bf:ff:b8:d3:e9:d5:35:74:ec:c4:43:c9:26:77:a8:
23:f3:1a:0a:d3:67:d3:b1:f5:27:ac:a7:9b:65:05:70:59:6b:
b4:6b:63:ee:a3:f5:8b:bc:23:af:4b:cc:d5:3a:78:5f:e0:e4:
6f:74:2e:77:98:10:d5:bd:fc:a7:24:5a:73:fb:c8:58:98:15:
77:92:16:2a:93:5a:e2:a0:4a:c5:04:73:b0:c1:d5:70:cd:ba:
59:88:3f:81:b9:c9:f1:60:3c:8c:a0:ed:4a:69:cc:56:74:9f:
be:2b:b6:b8:c7:1e:cc:dd:7d:b3:dc:69:5e:ce:f2:3f:94:58:
94:da:ab:a3:1f:f9:8c:7b:d8:79:b8:82:19:5b:11:f6:8e:ae:
22:e4:77:34:bb:c1:5f:31:61:43:a1:24:27:c1:ca:a8:ed:34:
00:1b:2f:03:93:a1:8a:01:be:11:7a:57:e2:7d:8a:77:73:d8:
56:dd:bb:48:a1:98:17:b7:0d:98:53:fe:ce:5a:d6:da:3d:14:
b0:8c:a6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztXXW2sp+Wdp6kCMAuPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2RhNmE2YzRlOGIxYzRjZTNmMjA0YmI0YmZkOWQ4NmEw
ZjU2MWUwHhcNMjUwMTMxMTAwMTIxWhcNMjUwMjAxMTAwMTIxWjAzMTEwLwYDVQQD
EyhhYmY0OGYzNTAyNmI3ZmEwZGYxNDgxNmM3M2YwMzliY2RiOGNjYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80cJSLTV1em5fUtX1PEVp4SKSiQ6
dWPdgurSHLP/np79KqFHrND1mCfIHRtzSMrisaUbS21ZHvsoak4/Ro38wgpfR0k1
mpsabQE8KEXzY3CU260p9A0IAMRWNR3QDCliJBO0foB5PzIwy92gDHex1plrLMN4
lQM2OgQHpfxoihw3mSiiYw/luQtCQGyXQfnNPAwURb0i8Qc3+BC+0SOB0P1x2egw
EGPL4jNyorgEi1gOsKujfOiAUzNcfpyQwGLPaDgl/gzkA8eL3E9uX4L96T3cw/KS
/FzoWWA4cyAp/33LBMqieSCB9OpKBDsPddg9pI8IHwQCeI9GyH/ibt2VrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKv0jzUCa3+g3xSBbHPwObzbjMt4MB8GA1UdIwQY
MBaAFHM9pqbE6LHEzj8gS7S/2dhqD1YeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEt
MDE3ZTJiMjVkODg2LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEtMDE3ZTJiMjVkODg2
LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUiGGQK/
cqVLJicZeGjvaAHKrSOEotrKEZVz9fbsf/4q506Cyxp7QqjADFDAK8xmz4WlBGuV
Vpagv/+40+nVNXTsxEPJJneoI/MaCtNn07H1J6ynm2UFcFlrtGtj7qP1i7wjr0vM
1Tp4X+Dkb3Qud5gQ1b38pyRac/vIWJgVd5IWKpNa4qBKxQRzsMHVcM26WYg/gbnJ
8WA8jKDtSmnMVnSfviu2uMcezN19s9xpXs7yP5RYlNqrox/5jHvYebiCGVsR9o6u
IuR3NLvBXzFhQ6EkJ8HKqO00ABsvA5OhigG+EXpX4n2Kd3PYVt27SKGYF7cNmFP+
zlrW2j0UsIymbw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:22 2025 by rpki-client