Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
File: ZQXsmbwMbKl7--a9UkTeywKGbis.mft (raw, json)
Hash identifier: 61zhhgiFkpK9HUryFpc+UduuUP2TMmlqTIQB6lIK6Oc=
Subject key identifier: 37:20:16:42:98:3B:4F:B7:D7:28:ED:54:FF:23:1D:C7:74:67:00:8F
Authority key identifier: 65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
Certificate issuer: /CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Certificate serial: 0194BBCE14926CA50F413CE4EE121CA7C92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
Manifest number: 091E
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: ZQXsmbwMbKl7--a9UkTeywKGbis.crl (hash: Q1ePqUb4itlF5yvwuASltm6wDDxzBaWOV11F3rUjQlU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:14:92:6c:a5:0f:41:3c:e4:ee:12:1c:a7:c9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6505ec99bc0c6ca97bfbe6bd5244decb02866e2b
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=37201642983b4fb7d728ed54ff231dc77467008f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:2d:fa:3e:35:ac:15:8c:93:65:4e:7b:8d:
17:6a:d4:99:5c:b0:3c:eb:a0:59:b0:e2:88:08:79:
18:45:19:84:3b:8d:1e:58:c7:9d:55:f1:8d:39:3c:
68:b9:ad:8f:ac:ac:3e:81:8e:00:41:fc:34:74:44:
d2:80:47:7d:7a:63:59:38:82:72:31:08:7b:43:6a:
2c:16:62:54:da:b7:bc:76:5f:4b:a7:83:ea:9f:25:
19:76:e9:de:63:e4:7c:1c:77:ac:ac:9e:4f:e8:fe:
e5:10:06:d3:29:07:85:a5:85:70:ed:06:43:67:8e:
10:2a:8d:35:87:3f:65:79:3b:4d:c4:0f:73:c8:1b:
83:bf:5c:19:95:24:78:db:2e:d7:7f:4e:8f:cd:8d:
d6:87:73:8d:07:e7:11:0e:b8:1e:db:b1:c3:7c:c4:
e0:e5:96:d2:e2:ae:c9:4d:c1:ac:39:af:95:ae:5f:
20:37:87:88:c7:c0:fb:f7:07:a1:3b:75:5b:9b:e5:
30:12:1c:c5:98:69:1a:04:b2:83:3c:85:f2:89:c6:
24:fb:81:42:1a:e6:a2:ad:d9:56:13:82:d3:fc:dd:
d9:2c:f2:92:5e:f1:35:07:57:09:49:5e:5b:fd:d9:
1c:1e:ad:b8:b2:5a:6c:96:ce:ec:4d:a2:97:04:11:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:20:16:42:98:3B:4F:B7:D7:28:ED:54:FF:23:1D:C7:74:67:00:8F
X509v3 Authority Key Identifier:
keyid:65:05:EC:99:BC:0C:6C:A9:7B:FB:E6:BD:52:44:DE:CB:02:86:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQXsmbwMbKl7--a9UkTeywKGbis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/58314c-d2cf-48b8-b95a-fda5dd590f16/1/ZQXsmbwMbKl7--a9UkTeywKGbis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:13:c5:9f:06:cf:b6:07:dc:39:d4:7f:e6:d5:dc:ed:42:c1:
bf:1a:ae:09:63:36:e7:52:c3:4b:5c:11:02:24:3a:3c:a6:3d:
06:64:62:dc:ad:d6:5e:3e:ef:8a:a0:8d:14:27:60:26:b3:8f:
c5:c9:3a:3f:35:7b:21:6e:24:9f:d2:8a:bf:e0:20:00:26:85:
00:d9:17:8a:5e:4f:e2:d0:25:fe:09:91:00:0c:f4:35:44:b4:
5f:10:3b:b9:65:92:f8:69:8f:81:53:2f:5f:d8:44:75:18:1a:
18:90:de:25:70:30:fb:a2:66:bd:9b:a2:ff:75:48:26:f1:d2:
63:7e:9e:c8:c4:a4:1d:69:c7:cd:4b:43:bd:56:84:3c:d0:a4:
c5:0d:ae:0d:81:b5:d8:af:3b:ee:fd:f6:80:5d:b7:bf:db:bd:
31:1b:31:83:b8:f1:00:6d:13:82:02:f0:4c:51:4c:ef:31:61:
dc:9b:07:0b:d0:3f:f8:2c:c6:e5:36:62:03:c7:22:53:c1:9c:
84:26:a9:3c:76:b6:b8:93:de:e0:d6:92:3d:2d:cd:c0:30:1c:
d6:10:2a:17:81:3a:c9:55:13:0b:de:c4:b4:1e:b0:e0:11:53:
21:24:de:5a:c4:ea:45:13:46:86:d5:42:2e:d9:b2:e6:db:77:
15:f5:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:26 2025 by rpki-client