Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
File: ZTwsX-3AjoxdH2VGksPkVkDIou0.mft (raw, json)
Hash identifier: +HtYx+1p9GbzqTJPGeWr4w1nwSUNEA86zzjAHWHBAH0=
Subject key identifier: F6:A3:10:F9:85:26:1E:61:AC:2C:34:A8:6C:C7:AB:1F:F6:D6:D3:F6
Authority key identifier: 65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED
Certificate issuer: /CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed
Certificate serial: 0194BBCEC7CC61C95D24C70EC8231201803C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
Manifest number: 092D
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: ZTwsX-3AjoxdH2VGksPkVkDIou0.crl (hash: xFYeiTT4UEsa2l2Cgg2/jOnkRL5HwrIvOc0YLxKi0bE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c7:cc:61:c9:5d:24:c7:0e:c8:23:12:01:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653c2c5fedc08e8c5d1f654692c3e45640c8a2ed
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=f6a310f985261e61ac2c34a86cc7ab1ff6d6d3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:aa:ef:80:aa:de:bd:18:88:a3:53:fb:3a:
c2:9e:85:05:83:69:01:e0:79:1f:d6:bf:e7:ee:84:
ea:c5:47:a5:a4:96:3b:18:8f:6e:08:59:36:b5:6c:
66:06:88:de:99:8f:dd:d4:fc:bc:a5:88:aa:72:49:
6a:28:c9:65:20:cb:a2:02:69:bd:7d:2e:f8:ba:8e:
74:06:2d:9b:81:9a:7a:6a:75:5b:83:cb:e0:f0:a2:
12:cd:bf:e0:76:ec:cf:f3:40:45:38:45:35:a8:75:
5f:c7:23:45:87:0d:e9:57:59:84:27:31:a3:57:10:
a8:c7:81:a5:f5:57:12:21:24:0f:7e:0c:da:a0:67:
02:29:11:4e:8c:ac:40:0e:30:aa:ac:c5:6c:1d:53:
5f:a2:73:38:64:9b:a7:12:69:bf:5d:15:96:af:33:
47:42:dd:90:82:8a:1e:a9:99:4d:4d:49:c6:75:e0:
bb:35:4c:c9:56:53:9a:93:9d:23:43:3f:ef:f6:6c:
2f:ed:b2:7f:8b:4a:8e:a7:23:ca:88:0a:46:c3:57:
29:13:40:91:42:05:56:49:3b:9e:4c:3b:e9:5d:7d:
85:29:44:e9:36:44:40:2f:4b:ff:41:bd:38:2a:0e:
13:b4:04:9f:0b:a4:ce:12:2a:c4:88:ec:20:ca:97:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A3:10:F9:85:26:1E:61:AC:2C:34:A8:6C:C7:AB:1F:F6:D6:D3:F6
X509v3 Authority Key Identifier:
keyid:65:3C:2C:5F:ED:C0:8E:8C:5D:1F:65:46:92:C3:E4:56:40:C8:A2:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTwsX-3AjoxdH2VGksPkVkDIou0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f152e0-a7fb-4afc-9c70-1ccb54f372aa/1/ZTwsX-3AjoxdH2VGksPkVkDIou0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:14:7e:5a:07:ea:56:73:2d:45:43:f8:00:81:7d:46:39:c3:
fe:5a:77:4a:57:e9:48:b7:ca:a7:c5:be:ac:7f:85:4f:39:ae:
c2:c1:1e:97:06:c8:14:db:7a:93:95:70:53:42:c1:79:bd:2d:
ea:3d:22:d6:ae:d7:5e:fc:e8:f8:da:6d:40:36:38:c3:ec:ec:
89:20:3d:04:bf:df:a0:25:1d:5f:2e:ab:c4:ef:ae:5f:e6:e0:
4c:4f:cf:bd:07:84:fe:1a:3f:f8:25:29:2c:d4:68:23:3c:04:
8c:88:c4:af:27:92:60:48:b6:3c:b7:84:46:0d:64:42:7e:5a:
c1:49:8e:3b:ab:3c:2d:dd:39:71:28:6b:52:77:8c:bb:c0:e6:
f2:c3:4e:83:af:00:fd:7a:eb:89:df:c3:ca:cd:8c:90:22:0c:
22:cc:6e:bb:8e:ed:96:e6:3d:76:c2:7e:92:bc:26:fa:5e:bc:
ce:c1:b5:81:6c:5e:88:9f:5f:a8:1d:84:6c:48:16:26:45:ed:
9f:36:ff:4a:c0:a1:8c:57:b8:7e:a3:21:3c:3e:c1:68:a7:77:
33:8a:6b:e1:90:2e:09:5b:39:aa:a7:fe:de:0a:f4:fb:a1:5c:
df:35:5d:58:bd:0b:8e:04:fe:a7:da:b3:f8:ac:f9:0e:38:d5:
f5:8f:1b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:24:52 2025 by rpki-client