Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
File: z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft (raw, json)
Hash identifier: Z+a2kwlSdzo4OfoiC8yk4bVSNkGDPe8Dfm4vEZnS79M=
Subject key identifier: B5:52:B9:87:C5:19:16:13:AD:86:EF:19:AE:A4:26:66:78:71:FF:06
Authority key identifier: CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
Certificate issuer: /CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Certificate serial: 0194BBCE6F6A4B9BB9944D994848B2B9D382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl (hash: VqQiDIMYgKnvWYnlKTN5LLJcvrwGxwuuN6cHDkMVADQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6f:6a:4b:9b:b9:94:4d:99:48:48:b2:b9:d3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=b552b987c5191613ad86ef19aea426667871ff06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d8:24:e8:af:2c:77:b3:b6:93:4a:95:97:53:
85:d6:63:51:d4:63:15:b0:22:26:58:7d:93:49:a5:
b9:1c:c9:d4:e1:62:c9:fa:9f:62:b1:aa:06:6e:fa:
48:0d:f9:81:2d:06:e5:af:99:d3:83:78:59:59:ca:
05:5a:6a:ce:98:b4:e7:48:36:2e:b1:ca:3e:b1:c7:
7c:a0:28:65:ad:32:bb:79:29:5b:ac:11:08:7e:ad:
b6:85:12:68:72:b9:2e:60:83:41:38:1c:8f:f0:4c:
f8:02:51:70:05:b4:c5:8d:b6:9a:dd:f9:df:6a:17:
fa:ca:26:b8:51:60:aa:71:ed:6a:41:57:e9:cd:08:
36:d8:0f:0b:15:c8:e2:a3:2b:0b:70:a4:81:a5:2d:
0e:8b:ef:56:13:39:b1:69:3b:4a:93:b3:c6:eb:cb:
06:be:f8:5d:3d:12:ac:a7:d5:0b:32:b8:1c:4e:04:
be:d9:63:0f:2e:93:b9:7d:c0:bf:9a:3d:61:a8:f9:
da:4c:01:69:80:ed:6c:9a:71:a9:6a:2f:b4:7a:1f:
e9:29:c9:ce:8f:e9:18:2c:47:bc:90:f4:55:e0:cd:
53:73:31:df:53:6f:d8:c4:49:5b:b5:c9:2b:01:bb:
aa:da:be:17:74:67:51:7e:a8:0d:ae:b7:ba:78:a0:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:52:B9:87:C5:19:16:13:AD:86:EF:19:AE:A4:26:66:78:71:FF:06
X509v3 Authority Key Identifier:
keyid:CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:75:3f:50:8d:16:28:62:a5:fc:f9:10:b4:31:5a:6b:30:f2:
97:81:9c:f6:c3:a5:39:ac:33:fc:99:f9:f2:80:26:81:80:fa:
2d:0e:2e:ae:6d:1c:93:a6:bf:06:10:01:b6:3b:81:35:7d:e1:
ac:2f:a8:48:0c:87:16:b3:8c:d8:34:c9:97:32:58:f6:fd:7c:
2a:34:45:97:18:72:a6:30:8f:a8:4d:4c:14:67:08:61:3f:16:
ac:19:c2:74:c9:01:7e:27:7c:71:2b:0c:d5:15:8d:a4:0f:15:
24:37:2c:11:ef:f9:6b:82:ac:79:d8:86:82:87:78:ec:88:39:
fc:92:eb:9e:fa:57:62:4e:71:33:41:3a:92:52:97:cf:db:4b:
bd:d5:e0:fb:01:f3:ef:5d:7d:a2:38:a7:71:7e:70:af:24:59:
90:21:e4:d0:87:82:87:0e:18:61:02:5b:ae:58:45:5d:3a:b4:
26:35:ef:ce:4e:87:75:16:54:a1:90:b4:a0:68:2e:6d:fe:9d:
cc:d9:bb:1f:ef:a0:3e:3a:35:ab:3c:11:75:de:19:5b:c4:1f:
6d:e2:c1:f2:db:00:e4:d9:c5:d5:0c:c1:a4:90:19:33:f0:96:
66:3e:51:24:24:20:eb:42:77:8b:33:69:3d:cf:11:44:37:5f:
73:43:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:28 2025 by rpki-client