Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
File: cZSy_8iUT-E1eWAoERzOc0cew38.mft (raw, json)
Hash identifier: rJcQEJFDkwGMvoNb/3rJvi/jvM8DPZDjUbIJ0+xzrNs=
Subject key identifier: 93:45:77:8C:B9:C0:58:BD:D5:F1:FA:D8:19:86:FA:64:78:44:48:67
Authority key identifier: 71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
Certificate issuer: /CN=7194b2ffc8944fe135796028111cce73471ec37f
Certificate serial: 0194BC3C96CBEF9D164FA586B09ED2737129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
Manifest number: 0324
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: cZSy_8iUT-E1eWAoERzOc0cew38.crl (hash: 7F6NEo1QEJeNX1wt5y7V7FEJxsKLr0Vonzi8j54+WrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:96:cb:ef:9d:16:4f:a5:86:b0:9e:d2:73:71:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7194b2ffc8944fe135796028111cce73471ec37f
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=9345778cb9c058bdd5f1fad81986fa6478444867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:d0:59:65:3e:08:74:a2:90:38:62:20:70:
5c:a0:70:50:bb:fb:7a:f5:40:7e:f4:94:ec:01:f2:
32:06:a7:2c:2a:1b:71:11:e9:cf:20:af:ee:29:f6:
70:ed:ab:94:3a:0d:52:53:1a:93:42:fe:44:37:59:
b0:7d:a3:98:ec:5d:32:92:30:2d:36:bd:fd:57:18:
c0:68:74:11:f9:4f:98:3e:86:71:18:fe:cb:72:47:
90:ed:66:0a:63:3b:3e:f7:2a:ef:9b:84:a1:8d:ef:
bf:25:c4:8e:14:c3:ed:f0:39:bc:5e:6a:55:88:6e:
69:77:c8:9a:44:e7:93:b8:b7:74:57:72:b9:82:47:
dd:8b:fa:af:75:f0:01:4b:fe:31:16:28:dd:09:5e:
7b:18:e0:16:fe:83:c6:4c:47:33:67:b5:72:91:d5:
0b:f4:56:a9:9f:02:c0:38:1f:87:f5:fa:e0:19:fa:
ae:24:4d:97:16:e6:71:bb:5e:e5:0d:c4:c2:6b:c0:
e4:67:e5:2f:a8:23:14:3f:2c:14:42:3b:d3:55:3c:
33:9c:19:08:71:27:cd:c4:2c:1d:de:ab:01:5b:cb:
09:12:f1:9e:4f:e6:26:2b:9d:c6:57:88:0c:a0:ae:
60:4d:3d:a5:ac:c8:1b:5b:f8:2e:aa:90:af:7e:b9:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:77:8C:B9:C0:58:BD:D5:F1:FA:D8:19:86:FA:64:78:44:48:67
X509v3 Authority Key Identifier:
keyid:71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:35:6f:c3:46:53:1d:c6:e3:93:2f:c6:4f:a8:9c:b6:d0:c1:
a2:79:83:80:fc:74:e4:31:11:cc:62:f8:5f:e7:27:a2:b0:18:
6a:ed:1b:01:29:bf:b8:aa:c7:04:4e:05:39:92:7d:18:32:e5:
80:67:43:6c:c4:c2:cd:a8:a9:33:7b:c8:26:72:92:f6:cb:d3:
ee:a6:78:8d:80:15:dd:41:b0:7d:c8:5e:60:47:de:ea:9f:94:
2d:14:37:4e:94:7c:fd:4c:b4:5e:2a:9f:9f:d0:2a:9b:8b:c4:
08:ab:f8:70:a8:c7:4e:df:7a:a5:ec:0f:33:8b:8f:45:68:4f:
43:6a:3b:90:a6:c2:29:ca:88:4d:1f:33:29:fa:60:1d:1c:95:
4c:71:75:f7:3a:79:44:02:e3:76:37:d8:3c:25:de:bf:8d:25:
91:37:a6:62:d0:fb:92:4a:63:4c:8d:82:9d:9e:02:87:39:5e:
a5:20:9f:74:3d:01:68:f4:ac:50:65:17:4a:27:3d:12:32:bf:
51:b3:81:4f:aa:b8:d8:f1:1d:9d:d8:b4:c8:a5:2b:52:36:25:
c6:ad:a5:d8:0a:5c:3d:45:76:53:81:53:e8:cd:e4:58:dd:51:
20:0d:c7:2b:6d:a4:29:7c:2b:5c:0d:bb:08:dc:71:c6:26:da:
4f:b9:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:25 2025 by rpki-client