Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: rutmXf9Pee4WlVJO9FKQll7tHHqctFZwKiWQ9u/5hLc=
Subject key identifier: FC:DD:D4:10:28:11:E2:6F:2E:85:E1:56:C2:25:69:4B:B2:B4:03:D3
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 0194BBCEAE1079D8AF649B65D2619B1A501D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0C27
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: cDqM5rMaqJy6otQXBl++Usq81GpBCsMfEnjTKjdEIug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:10:79:d8:af:64:9b:65:d2:61:9b:1a:50:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=fcddd4102811e26f2e85e156c225694bb2b403d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:08:67:98:eb:21:96:e3:f6:1b:b0:ee:07:
da:7a:89:f5:79:4b:09:f4:e8:5e:3d:e7:0a:54:02:
2f:6a:20:b2:40:b6:42:9d:1c:06:ae:ce:fe:43:38:
6b:c4:88:18:f2:0c:d2:2a:8b:41:1b:11:1e:de:21:
7a:17:c7:ef:7e:a8:f4:77:2f:9d:a6:22:55:05:6e:
67:0e:46:be:e1:89:db:9d:bb:12:e5:d8:71:3b:b8:
cd:f2:6a:56:88:88:2c:85:a1:64:d6:f4:3e:71:99:
22:40:f3:40:7b:b3:8c:70:34:81:99:c2:ac:ad:05:
a1:b2:3b:5f:83:21:55:03:ac:68:58:ff:d6:b4:05:
fb:91:d0:37:d8:ee:ef:36:f1:82:b5:7a:7f:f6:33:
36:b0:da:09:8e:bc:2a:d6:8f:71:09:9b:e0:0a:15:
b5:66:36:1a:e5:18:8f:4f:f4:ae:9c:17:05:ce:73:
31:bb:08:e1:25:43:71:d9:c2:9b:7c:b1:2e:36:6a:
01:79:f9:86:c6:6b:bc:06:44:06:ab:ee:aa:e6:5c:
89:cf:da:5b:77:1f:09:16:3d:8d:3e:46:a3:88:6c:
92:ad:68:20:6e:d8:5e:c5:53:3c:86:1d:ae:3d:0c:
12:a7:b7:b6:90:7b:f6:57:2c:3e:f6:09:e4:87:af:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DD:D4:10:28:11:E2:6F:2E:85:E1:56:C2:25:69:4B:B2:B4:03:D3
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:42:00:cb:fc:7a:c4:e3:5f:db:fa:b9:f1:f3:2a:00:c4:58:
16:c8:78:1f:28:1c:0f:94:90:52:44:ce:e4:18:bc:4d:5e:ad:
36:f1:04:db:82:28:b9:ac:9a:cb:43:5b:db:9b:70:26:e9:de:
a5:29:18:68:2f:77:55:22:31:8d:9d:8a:3f:38:9a:38:46:28:
75:6c:6c:14:ac:b7:ea:ee:ff:85:0d:2d:94:79:94:3f:0b:23:
a6:0c:ed:9d:1f:0a:f6:ea:cc:2f:26:89:df:50:91:93:ee:71:
49:aa:9d:cc:fe:1a:d6:00:1b:70:81:cb:cb:63:c4:1e:b7:ab:
0e:96:5f:d9:8f:e6:c8:72:6e:c0:e9:5e:5e:fb:5e:23:e5:fd:
39:a4:f9:aa:1d:83:7f:d7:0e:7b:fa:71:17:e5:71:1b:ca:30:
aa:cf:96:be:7f:1a:b2:2b:90:50:47:b2:4d:49:6d:84:fd:19:
b3:24:a8:65:a2:9c:74:ab:4e:e2:8c:9f:c8:c6:50:ed:e4:17:
f7:44:ff:42:12:09:37:1f:e0:ec:2c:a6:13:9b:59:f0:b2:e4:
93:9c:40:a8:13:30:8b:7e:01:5f:d5:37:f7:5f:2c:00:54:1a:
57:1f:34:e8:06:eb:87:76:bf:06:39:55:ce:21:01:b0:1a:dd:
e4:2c:fa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:24:26 2025 by rpki-client