Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
File: ZEXzBZOZaa2QDVjfmskeenW0MY4.mft (raw, json)
Hash identifier: ZHiaoYMmdwGCr2iSW3dRcKgaDl6+j1mOpt47/CgwvSE=
Subject key identifier: B8:65:0D:2B:A1:16:0D:16:39:3E:BC:4E:97:54:B7:E3:38:F6:2C:E1
Authority key identifier: 64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
Certificate issuer: /CN=6445f305939969ad900d58df9ac91e7a75b4318e
Certificate serial: 0194BBCDC0D61C964209D1C711B03989BE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
Manifest number: 0E84
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: ZEXzBZOZaa2QDVjfmskeenW0MY4.crl (hash: bCJfIkRdgZ7oECf1SqCox7QWCbU2INOuzzI9Tf7C89w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:d6:1c:96:42:09:d1:c7:11:b0:39:89:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6445f305939969ad900d58df9ac91e7a75b4318e
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=b8650d2ba1160d16393ebc4e9754b7e338f62ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:20:aa:33:88:15:ba:00:d7:fc:65:3d:d4:
7e:1a:05:14:f1:61:78:fb:6e:57:0f:65:27:ab:9d:
af:5a:49:13:64:f5:f2:81:2f:b6:30:fc:dc:fd:1c:
66:26:52:ef:1a:30:2e:a6:ca:28:51:46:7a:a2:65:
d5:98:b0:46:46:55:22:7d:04:73:34:57:78:5b:8e:
d8:e0:52:c8:93:af:a4:06:f1:2b:f1:35:55:20:eb:
50:04:9f:e7:f5:fb:24:c0:19:3e:37:09:e5:fb:ca:
d8:a5:3e:e8:5b:35:23:7b:cf:39:f8:83:95:a6:20:
e0:0c:80:0f:ce:4b:84:64:09:61:cf:45:08:9a:08:
61:43:84:dc:ad:23:c2:76:ff:39:df:d0:fa:9e:f7:
79:97:3d:b8:9e:17:5a:40:77:27:8f:70:01:52:a4:
df:56:a1:eb:19:31:58:dc:41:cd:a3:2f:a0:41:af:
cd:04:72:78:8e:d2:28:b7:19:8c:91:49:8c:cc:3d:
bc:0b:98:2b:cf:69:0a:19:7d:bc:8c:da:fc:0c:3e:
56:21:4e:d5:99:ce:18:88:1d:e9:a0:a2:c0:91:1c:
fd:e6:91:19:1f:40:7b:72:02:43:ad:6f:fb:0a:88:
c4:e1:57:e5:bb:33:cb:7d:24:48:64:4f:fa:ab:b6:
46:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:65:0D:2B:A1:16:0D:16:39:3E:BC:4E:97:54:B7:E3:38:F6:2C:E1
X509v3 Authority Key Identifier:
keyid:64:45:F3:05:93:99:69:AD:90:0D:58:DF:9A:C9:1E:7A:75:B4:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEXzBZOZaa2QDVjfmskeenW0MY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efa127-3629-4c5f-998f-ba2e2ece774d/1/ZEXzBZOZaa2QDVjfmskeenW0MY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fc:b3:40:e1:46:ec:fb:e4:4b:80:c5:81:6c:e3:2f:72:a7:
c1:97:b5:48:e4:d1:69:63:af:e5:73:80:c4:ad:3d:5b:ec:0c:
a8:ca:61:63:63:df:14:b9:78:4d:c9:26:59:ee:bb:32:96:6e:
e7:e6:7f:61:40:94:18:2d:cf:48:95:0f:39:f9:44:3e:cf:00:
27:9b:7d:f0:ce:16:1f:33:d0:4b:c4:da:42:2d:a6:fd:55:14:
b1:95:d3:56:0d:48:1f:0b:80:68:a3:4a:59:3b:6c:3d:92:3d:
63:ac:20:e0:e3:a4:e7:5c:c6:58:16:cd:56:ea:05:b3:6d:a2:
a9:40:3b:ce:73:2d:d4:93:9c:57:04:94:7d:58:5e:ec:66:ac:
31:f5:08:fe:86:93:8c:32:c7:5b:e5:38:c5:11:0c:8f:57:ed:
92:0f:b9:3a:fd:b4:58:eb:1f:d3:94:7d:7b:e8:51:37:4e:2b:
81:1b:0a:f9:33:82:a1:42:b9:56:9b:0c:bc:08:ce:3d:79:a5:
fd:7e:a5:35:93:27:e5:82:e2:7d:6a:79:f6:c3:70:7e:34:b3:
47:eb:e0:ae:62:02:d2:90:59:20:04:30:df:c4:c6:a1:f4:b9:
50:a5:c6:40:aa:0c:ce:05:a5:32:29:82:47:66:5b:db:2b:44:
51:a9:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:53 2025 by rpki-client