Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
File: ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft (raw, json)
Hash identifier: iBqYocNTZFCSsMbVpU+6rjt7Us/u4IJfJflZjQVpzmI=
Subject key identifier: F4:34:6A:06:05:E6:11:0A:69:61:E9:53:7C:38:89:3A:29:D5:C2:CE
Authority key identifier: 64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92
Certificate issuer: /CN=64b90f34525f80025ea77cb618e7519982ab8592
Certificate serial: 0194BBCEDF4435A195A9E4F65355EE9C9033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl (hash: HcqHI0NsM527TNtjPSS57OIiHrhTUsPoghdVVlQ1o/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:df:44:35:a1:95:a9:e4:f6:53:55:ee:9c:90:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b90f34525f80025ea77cb618e7519982ab8592
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=f4346a0605e6110a6961e9537c38893a29d5c2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:2c:97:a4:bf:49:de:55:d2:8f:4d:cf:92:
0e:9a:19:11:44:f8:49:e6:af:42:d1:19:9a:92:a9:
28:07:2c:58:23:79:ea:bf:f3:14:55:b7:e7:49:31:
6c:58:3c:e7:8f:ea:cc:12:29:be:f1:47:d6:1e:3d:
65:98:b1:fb:b9:fd:21:ce:2b:7b:02:1c:da:0e:54:
cc:d1:d6:42:2f:89:96:61:21:03:e8:28:3c:59:ec:
c3:be:28:cb:96:cc:b6:26:f4:d2:97:1f:6f:4b:04:
ba:88:2a:b4:df:76:48:81:3c:45:49:73:44:ed:ee:
c2:ee:dc:77:ee:58:19:bf:85:77:eb:bb:a0:4c:31:
a8:3e:c0:d4:1e:a7:d6:57:27:f0:d6:1f:bb:23:43:
b3:94:f8:ab:38:fb:fe:dc:ee:e0:92:7b:71:d3:3a:
38:7e:ba:ea:83:97:60:3d:87:79:a2:64:78:39:7e:
a4:14:b8:bd:11:47:90:fd:75:0a:9f:47:9b:c1:85:
5f:53:68:84:be:a9:da:71:ce:55:8c:00:8d:93:f3:
c7:fb:b0:4e:e0:92:47:f4:2e:3f:c9:cf:be:dc:2b:
01:b7:ba:16:ca:c8:25:c0:31:51:c9:2d:b9:82:75:
a2:55:66:f6:b0:c9:ef:f2:b4:04:e6:ac:d5:7b:df:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:6A:06:05:E6:11:0A:69:61:E9:53:7C:38:89:3A:29:D5:C2:CE
X509v3 Authority Key Identifier:
keyid:64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:bb:4e:81:e8:ef:77:0b:56:b4:aa:1d:3a:18:b8:31:3f:1f:
60:38:be:f4:7f:f2:df:2e:21:53:97:e6:9f:d4:8b:f1:41:6b:
1d:29:dc:68:14:9f:76:62:7b:4e:36:37:f8:d3:05:b2:8d:e0:
84:be:00:74:13:52:51:66:f4:2b:e3:8a:43:a8:b5:bf:e8:2a:
63:52:47:2c:9e:d2:93:7f:51:85:97:93:d5:d5:f1:55:e3:e5:
e4:1c:c4:29:50:e2:c9:4c:ee:8b:3e:d6:19:a6:5f:b5:05:1b:
29:d0:13:55:64:e9:04:83:5a:04:f4:86:9a:b7:c5:e2:26:ca:
1e:69:0c:3f:dd:d3:9d:d4:bf:cf:ec:d5:fb:62:f1:07:37:84:
88:56:47:f3:48:29:d9:46:69:cf:9c:92:c7:a3:b2:98:83:e6:
04:95:56:89:32:e8:a4:fb:e7:a9:bd:d2:57:8a:e6:f5:a3:2d:
af:89:ef:a6:91:63:5e:b3:9a:99:ae:18:6d:50:10:91:fd:8e:
ad:3f:03:8d:4d:41:cf:a9:80:3f:b4:ce:7c:f7:c7:46:5b:68:
eb:c6:c9:69:d4:d6:19:62:d7:75:95:e6:59:b4:e9:26:ec:ff:
4a:71:c9:17:37:29:b6:58:c9:02:df:c8:4a:80:26:d8:de:a4:
72:93:43:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:09 2025 by rpki-client