Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
File: z4duDnrrYE0WMdSaAl4XitJ0qBI.mft (raw, json)
Hash identifier: WiZPTIjmR0duE5+csxlaFo0aFB33Pso/9kW4Q97/UhE=
Subject key identifier: CE:7F:36:A2:4E:C3:3C:D6:55:04:5D:37:F9:EB:F6:7B:7F:48:9D:72
Authority key identifier: CF:87:6E:0E:7A:EB:60:4D:16:31:D4:9A:02:5E:17:8A:D2:74:A8:12
Certificate issuer: /CN=cf876e0e7aeb604d1631d49a025e178ad274a812
Certificate serial: 0194BCA9D2E4DED58A207EB3D8829C52FEFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4duDnrrYE0WMdSaAl4XitJ0qBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: z4duDnrrYE0WMdSaAl4XitJ0qBI.crl (hash: TM2Hbk8rkKXKhw5Iduq4iSoavZmwuTqkoMmL0dYhd9g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:e4:de:d5:8a:20:7e:b3:d8:82:9c:52:fe:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf876e0e7aeb604d1631d49a025e178ad274a812
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=ce7f36a24ec33cd655045d37f9ebf67b7f489d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:29:4e:c5:69:0e:05:8f:14:42:1f:67:8e:
61:8c:83:9f:a9:78:7d:b0:be:38:5a:9a:88:1c:4e:
9d:cf:27:63:88:be:64:02:32:79:0c:43:f6:71:67:
15:d0:f8:2b:d0:e5:83:24:fb:02:03:5b:26:de:1d:
72:4c:f1:30:40:56:91:4a:6a:7c:36:dd:91:c0:7d:
d4:66:6f:a7:e3:66:e9:83:4d:1c:f5:2c:f6:b3:43:
5d:44:56:05:53:a1:cf:62:2c:30:d6:5d:72:35:c6:
2f:59:08:7f:82:b3:9c:2f:1c:ce:01:08:39:3b:32:
73:59:63:b7:ff:5b:46:56:df:7e:a2:29:82:6c:f1:
fc:53:9d:00:88:b1:44:b1:94:00:6e:3b:44:69:a1:
63:15:80:0a:df:b9:be:27:cc:f3:8c:99:b7:81:af:
5c:7c:f7:89:d5:eb:fd:18:1d:3a:7c:01:c3:33:ee:
ef:99:17:fa:50:87:6e:62:53:af:8b:20:89:11:06:
59:21:fb:f7:48:95:e7:e4:3a:c4:80:be:25:5e:63:
2e:2a:29:71:06:f0:10:1e:b7:4c:53:43:a1:0c:c5:
cb:bd:4e:f7:10:bb:46:63:1d:f1:83:08:a0:1f:7b:
16:63:83:82:6f:c8:05:4a:04:71:84:35:ed:30:1c:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:36:A2:4E:C3:3C:D6:55:04:5D:37:F9:EB:F6:7B:7F:48:9D:72
X509v3 Authority Key Identifier:
keyid:CF:87:6E:0E:7A:EB:60:4D:16:31:D4:9A:02:5E:17:8A:D2:74:A8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4duDnrrYE0WMdSaAl4XitJ0qBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a5bc8a-049d-4314-9b1a-29755a7c94fd/1/z4duDnrrYE0WMdSaAl4XitJ0qBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:60:f0:dc:1e:0f:14:b6:61:f7:e9:44:21:fc:7b:6d:4c:5d:
7c:2a:6f:52:04:8c:38:de:f8:9b:00:76:c1:f0:89:a8:02:30:
23:5c:c5:9a:9b:72:f2:5b:b4:7d:f6:15:bb:59:75:9d:38:65:
05:46:dc:db:d1:96:bd:55:2a:23:1a:c2:16:87:44:65:26:40:
09:9e:0a:ef:97:68:97:cc:a4:b3:59:87:25:dd:6d:28:4c:4b:
8e:38:8e:3f:27:e6:a0:52:ab:94:c1:a0:a0:25:b6:e4:ea:68:
b7:f0:93:d4:81:f8:bc:c2:02:7c:67:71:07:63:8e:d5:d9:c7:
e7:ad:e5:24:5f:69:30:67:8a:e7:4e:4f:dd:79:3f:ef:d1:58:
d7:3e:fc:66:bc:8c:77:af:6e:cf:7b:49:1a:47:85:e0:e1:3f:
2e:9d:05:a6:f5:15:89:44:54:ad:02:60:21:86:f1:4d:a4:48:
9a:d6:30:a9:a9:28:ee:a5:da:86:3a:62:0f:ee:e2:d2:c7:f9:
0b:29:28:f2:18:fa:3b:39:a6:53:a8:c0:84:fa:11:0c:96:3f:
e8:79:65:03:ca:cc:cb:12:2a:fd:79:6c:ea:c3:55:45:b0:ed:
22:a9:c0:5e:c8:4a:46:3d:f6:87:88:08:b7:55:ea:c6:17:86:
f3:48:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:43 2025 by rpki-client