Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
File: zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft (raw, json)
Hash identifier: /i7JK7Klhbp0aKosdAkEp9YZmG9gjb8q7cxqXNoFxnA=
Subject key identifier: BC:2C:F3:7E:19:60:54:4E:BC:CD:C1:60:78:57:1E:BA:A6:0B:F3:52
Authority key identifier: CE:42:B4:38:5E:57:72:F5:1D:58:8E:2B:B7:21:9A:12:23:99:58:7A
Certificate issuer: /CN=ce42b4385e5772f51d588e2bb7219a122399587a
Certificate serial: 0194BC3C66D978B6C0A472F9B88D9717E9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
Manifest number: 084E
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: zkK0OF5XcvUdWI4rtyGaEiOZWHo.crl (hash: qihJoefx0leuXRxxD9h+UZdNe9ou5O3uNe65o3VlouA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:66:d9:78:b6:c0:a4:72:f9:b8:8d:97:17:e9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce42b4385e5772f51d588e2bb7219a122399587a
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=bc2cf37e1960544ebccdc16078571ebaa60bf352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:a6:9c:1b:56:ef:2b:26:39:d6:22:1b:f2:
32:bd:b9:91:1a:83:7a:e2:b2:ac:d5:e7:3e:a6:d3:
fe:b9:49:0a:d3:a2:9c:b7:49:50:ae:4b:74:6a:19:
37:e8:11:84:18:94:74:bd:93:ce:e2:4d:84:37:44:
55:f6:09:12:95:c2:89:e5:69:1a:90:0d:3e:20:65:
da:d7:ef:c0:c3:3b:49:bc:0b:2d:85:e8:29:9f:b6:
9c:96:7c:78:da:db:09:c5:cf:97:c4:b0:d7:8f:34:
1b:b1:7c:a4:d8:0d:ae:2d:ce:ac:90:39:a2:9e:53:
32:77:c9:88:fd:15:96:c2:db:6f:bf:8e:9c:e9:a6:
9f:fd:1d:75:6a:8c:80:97:0c:d5:c1:9f:e5:2c:3c:
13:73:97:36:5b:e3:50:4f:ca:97:f6:be:fa:fe:8a:
9d:b2:2e:0e:5d:f2:1c:04:4f:ea:52:08:bb:64:8e:
f8:cd:e5:b6:94:0a:98:d4:2e:f8:b2:b4:c8:29:df:
ad:23:c2:fe:4b:57:b3:c5:8f:bc:49:57:8b:7c:df:
51:b0:51:f2:02:d7:ae:a7:ce:30:46:b9:d8:fe:30:
92:74:9c:40:3b:e4:c5:df:02:dc:ce:35:66:d3:00:
fa:63:e8:99:e1:02:82:02:41:f2:ee:54:17:73:16:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2C:F3:7E:19:60:54:4E:BC:CD:C1:60:78:57:1E:BA:A6:0B:F3:52
X509v3 Authority Key Identifier:
keyid:CE:42:B4:38:5E:57:72:F5:1D:58:8E:2B:B7:21:9A:12:23:99:58:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkK0OF5XcvUdWI4rtyGaEiOZWHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b2e528-f1f5-4c05-93ee-ca15ebf37ec7/1/zkK0OF5XcvUdWI4rtyGaEiOZWHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:89:19:5c:25:43:83:be:55:41:4a:00:c9:92:6a:d5:b2:3a:
20:86:7c:03:d0:66:60:6a:9c:ad:72:ed:c8:e3:b9:4b:88:68:
da:53:d6:db:b5:2c:e6:7c:47:a6:f7:08:d9:28:19:9b:1e:0b:
26:a1:93:69:7b:18:f7:06:77:61:3e:79:b2:46:9f:8c:72:fe:
7e:64:5c:65:75:39:01:b1:67:d3:15:a2:2c:81:e1:12:1a:cc:
95:1a:46:e9:06:1f:65:0b:b0:f8:19:75:f9:8b:f9:5d:71:7a:
13:ed:e4:ef:48:8a:4b:28:c1:75:e3:bd:b0:97:95:1a:69:8c:
ec:cf:c6:40:06:9b:4d:cd:d0:d3:67:ad:8e:81:13:67:07:82:
d2:7a:a5:4d:e7:b7:03:ea:b9:0c:6e:c7:d7:b5:33:e2:04:f4:
27:40:74:4a:8f:5b:a8:a4:bb:74:c3:57:63:77:39:87:50:29:
f1:7a:d4:4e:2e:f5:e1:8a:8e:4f:2f:54:5f:3b:b1:cb:d6:48:
e4:d4:68:22:04:80:e3:56:24:3c:36:ad:bd:1c:b1:01:96:dd:
00:df:33:96:08:13:c5:d7:57:5b:e7:2a:af:8b:b9:1e:8a:0b:
6f:3e:b1:34:8b:eb:0a:66:f5:4a:b9:2d:a5:fa:32:3a:96:1e:
1e:cb:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:50 2025 by rpki-client