Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json)
Hash identifier: 92EZU/2irzuJeL6LshDqZ5MFjkDq7xSIN5F3cVGfGZE=
Subject key identifier: 17:72:B6:3D:9A:7B:D3:77:EE:A1:CF:60:EA:F3:DA:87:5A:39:13:5B
Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Certificate serial: 0194BC3C620B4CE4A315B2B305445EA6134C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
Manifest number: 10EA
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: 1ul+QoK9xpwUaiZ8OiDhpW6xvsVhAnXIfsuzOg6U6iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:0b:4c:e4:a3:15:b2:b3:05:44:5e:a6:13:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=1772b63d9a7bd377eea1cf60eaf3da875a39135b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:b7:49:d6:4b:6a:30:5b:99:2d:e4:f0:cd:
7f:0c:ed:74:c5:de:b7:36:a6:60:68:e4:55:79:94:
26:c0:c5:48:91:5a:0a:72:69:49:b5:41:c2:c7:81:
d7:68:22:96:67:38:ba:ce:e1:d3:c8:a3:65:35:91:
40:9b:84:cb:6b:26:89:07:5c:52:15:a0:39:c3:2f:
ee:20:4e:28:46:68:77:e9:55:e9:f5:a5:de:36:59:
f5:2c:0d:ae:d3:66:9c:cc:f5:4c:86:df:96:98:45:
d5:b2:ee:7c:fe:ca:f4:3a:9e:e6:77:02:39:72:50:
ba:b2:1b:79:9c:62:5a:b9:33:a9:60:60:98:f9:12:
5c:e6:8c:46:fe:2a:fb:93:0d:26:c4:27:30:52:ed:
3a:36:df:dc:68:9a:0f:5e:f7:9c:a6:f8:b4:d2:d3:
67:fa:2d:9b:f0:ac:77:be:20:dd:6a:5a:71:82:5a:
32:43:a2:36:fa:88:d2:a6:89:9a:57:d6:45:eb:d4:
86:d8:bf:70:b0:4c:f6:40:f9:0a:21:2f:20:c2:08:
3c:da:88:09:b6:9e:e2:e1:df:0c:3d:3f:a1:72:dd:
b0:87:ba:8a:a2:77:8a:a9:94:71:d0:f8:51:22:19:
a7:b1:fb:61:b8:7d:9e:8b:2f:c5:fc:fd:2f:a3:bf:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:72:B6:3D:9A:7B:D3:77:EE:A1:CF:60:EA:F3:DA:87:5A:39:13:5B
X509v3 Authority Key Identifier:
keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3e:30:96:02:87:dc:cc:f6:99:95:a6:2a:62:5f:b3:69:4d:
7c:d7:57:cb:b7:7a:c6:52:1e:f2:c1:25:48:84:5a:a2:d5:c5:
64:6f:74:72:3d:bb:13:af:42:09:88:4f:53:49:b4:dd:00:21:
15:b1:3a:f9:e8:c8:b7:d8:d2:26:ed:08:98:f0:fb:b7:5a:f2:
56:9c:8a:a5:57:10:23:ba:b1:f4:b8:39:5e:7b:7a:06:91:05:
23:42:7c:52:96:9f:ee:87:e6:77:09:3d:91:b9:38:17:a5:f0:
ce:d5:9b:67:3c:47:7f:f1:cb:bc:f1:b5:2d:f9:7c:70:2e:7a:
32:40:8d:c0:2f:51:2b:da:e5:98:62:b9:b6:38:b9:2f:ce:cf:
2e:92:ea:c9:55:3e:99:34:2e:e9:cf:b6:8d:7a:fb:db:a2:a0:
3c:ef:bd:26:d7:e5:36:b5:b7:15:eb:05:99:6a:75:51:e2:f8:
cb:a6:4e:cb:07:44:7d:fd:14:48:35:1c:f4:4e:80:86:09:23:
c1:53:e1:36:18:d0:18:6d:3a:d9:e3:be:4e:12:e0:8c:14:9b:
4a:eb:27:21:c9:2e:08:e7:df:a5:01:a1:a5:23:58:5a:eb:cc:
b6:d3:78:9f:f8:91:aa:22:a2:17:9b:20:64:a3:1a:f6:f4:c2:
f6:c1:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:52 2025 by rpki-client