Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
File: ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft (raw, json)
Hash identifier: NwFXOeFXCm2MrKsMxbMooum8bVIFYpx4UWV0Lv5PnnU=
Subject key identifier: 59:4C:F9:98:74:C9:9F:2C:B3:EB:40:43:37:6E:8F:73:19:3C:6F:B4
Authority key identifier: 65:D4:D9:22:28:6A:84:5F:46:1F:EF:1F:53:D3:20:CD:2E:EF:72:8A
Certificate issuer: /CN=65d4d922286a845f461fef1f53d320cd2eef728a
Certificate serial: 0194BD17B1D7188BC5195C0AD19E2A126A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
Manifest number: 0DF3
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl (hash: WF9wgqNcuZon6ezrNGyULKuAq7MaOY6fQg0A/iU5ZxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b1:d7:18:8b:c5:19:5c:0a:d1:9e:2a:12:6a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d4d922286a845f461fef1f53d320cd2eef728a
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=594cf99874c99f2cb3eb4043376e8f73193c6fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:15:34:bb:7d:b5:6d:7a:04:38:66:11:74:
d7:fb:44:12:3e:8c:81:2c:f7:f3:fe:02:2f:de:a2:
02:c6:d8:2b:da:e8:33:b7:ad:e2:19:b2:89:bd:af:
1d:aa:7c:2a:f6:ed:6a:6f:56:c1:15:26:62:33:40:
97:c7:db:45:af:57:d2:98:63:e4:4d:40:f1:c5:65:
ae:65:ba:e8:e3:4b:86:b1:b3:b8:b3:be:8f:bd:85:
8d:e7:9b:e7:37:05:f8:fa:f3:c0:3f:a7:78:1d:a2:
08:4b:c9:4f:01:40:00:3d:f9:83:9f:9f:10:d7:6b:
3e:f9:8d:33:a2:c5:49:88:55:f9:0c:59:46:c6:8b:
cf:d0:7c:45:6c:f0:d6:e0:31:29:f1:37:a2:a6:aa:
16:be:95:e1:16:ec:f4:90:93:c3:40:9c:f5:58:6d:
70:25:a4:f7:1e:2e:6c:f8:5b:4f:52:bf:0d:8a:9f:
4c:25:e5:d6:ec:d7:9b:0b:a3:d5:f3:b0:71:f6:27:
1f:10:10:06:1b:9a:85:2f:ba:33:6a:47:cd:4f:80:
62:a9:da:b4:d8:00:b1:c3:24:0f:e3:09:80:1a:a7:
3a:a3:1a:b7:c3:39:da:bd:0b:49:1d:96:c7:4b:78:
dd:2f:e2:b4:c6:4a:7e:af:e8:9d:8a:d6:af:9c:4d:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:F9:98:74:C9:9F:2C:B3:EB:40:43:37:6E:8F:73:19:3C:6F:B4
X509v3 Authority Key Identifier:
keyid:65:D4:D9:22:28:6A:84:5F:46:1F:EF:1F:53:D3:20:CD:2E:EF:72:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdTZIihqhF9GH-8fU9MgzS7vcoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6889b3-7227-41d4-90cd-64f70c103519/1/ZdTZIihqhF9GH-8fU9MgzS7vcoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e0:f8:1d:13:ec:4d:10:e7:38:03:b6:b3:81:44:a8:33:0d:
04:c2:cd:30:e0:71:5f:0d:f5:9e:a5:2c:76:0f:73:62:b6:b9:
38:60:66:4f:a4:39:84:85:29:c0:a0:ba:cc:6e:47:08:d6:04:
2b:01:92:5b:43:11:e4:19:44:dc:64:f2:3f:8c:23:b7:45:63:
9a:5a:0f:76:0d:41:85:5d:7b:41:8a:b5:f3:6a:cc:48:9b:f0:
98:5f:8a:be:ed:89:6f:e2:a8:b7:86:c8:c1:39:5b:61:5b:f2:
f0:c7:d4:ed:28:1e:4d:9e:0e:a1:b9:ba:a5:0d:da:43:f3:e4:
1b:2a:de:14:e8:a2:cd:53:6d:fe:78:64:ad:8a:4f:a9:e5:3a:
d0:65:6e:75:da:40:b5:b4:24:0b:43:36:6f:76:1c:5a:af:89:
60:b2:82:70:d7:b4:21:4f:cf:f0:4a:3d:53:56:62:ba:6b:e7:
2c:38:05:d9:84:4c:42:81:6a:68:ca:33:a4:70:01:b0:73:0f:
87:64:89:24:b4:86:cd:4c:08:2f:d4:25:08:b6:eb:3c:fa:a2:
6d:a2:0a:f6:fd:e0:63:c0:c2:e7:46:e9:17:dd:ea:3a:3c:f6:
49:49:83:c0:ef:1f:33:40:90:7b:83:fe:1c:72:65:56:21:8e:
05:98:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:15 2025 by rpki-client