Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: nPVdU2DhbV+WqAGThpTBrc2xudstVR4nfwT14Q/vWbk=
Subject key identifier: 82:82:85:45:FB:A9:C0:00:08:10:35:35:86:FB:20:F1:E1:37:38:4D
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 0194BBCE5DEBB7BCB9EAC37DACFB48E05308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 0488
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: DNhTPqO8fSiXINILFTaLmtY1KM/TzBPjHz5BaYX/hgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5d:eb:b7:bc:b9:ea:c3:7d:ac:fb:48:e0:53:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=82828545fba9c0000810353586fb20f1e137384d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:13:54:d9:b3:b9:36:ce:f5:50:35:98:1b:3b:
01:c4:01:bd:01:b9:1d:1a:77:ea:32:4f:ce:90:45:
29:50:7c:aa:46:44:c6:c8:31:05:2b:5d:ed:44:17:
64:5c:a6:bc:b9:16:a0:1e:4d:3e:6e:a9:78:ac:72:
f9:e0:fd:51:d1:c7:67:f7:a2:4b:e2:29:27:ef:51:
26:b7:46:c6:7f:cd:3f:96:09:a8:2a:48:dd:e4:7e:
0e:4c:38:54:68:a5:d2:b2:4a:c8:0e:2f:57:23:e3:
82:98:1a:8c:d9:9d:68:56:d6:ec:63:59:27:b9:94:
cd:13:b1:70:93:0e:37:9f:9d:8f:bb:15:00:ce:fc:
8d:ed:e0:31:fa:8e:6b:df:dd:28:59:d7:c2:36:df:
31:00:4f:19:4c:71:37:95:f1:70:b4:6f:7a:22:aa:
de:9c:7e:6b:81:d1:12:2a:3f:10:ae:23:77:2b:f7:
82:a1:4f:57:53:85:7e:42:4e:7d:bf:74:85:5d:12:
24:c3:1f:29:fa:41:3f:f6:f8:bc:5b:90:ff:c0:fa:
ec:3a:dc:6e:3f:9d:c9:8d:8b:ff:17:c4:b0:fb:62:
47:10:88:85:e2:60:c2:34:ad:62:1c:96:ba:bc:b3:
af:c0:13:90:37:cf:11:2a:75:85:44:12:47:af:d1:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:85:45:FB:A9:C0:00:08:10:35:35:86:FB:20:F1:E1:37:38:4D
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:7c:54:24:7e:ec:c1:b9:d2:4b:fe:ba:74:5e:17:8f:fc:f1:
3d:18:e8:37:c8:8d:82:c8:b2:78:18:f5:95:da:2a:f4:98:9c:
43:9e:a0:62:ba:9a:51:a1:68:30:4e:76:f0:85:f1:e9:7d:8a:
02:63:28:05:e0:56:20:a0:42:97:1c:07:d0:09:a1:65:b9:8e:
42:7b:38:41:4a:d3:86:2c:4a:20:d0:81:15:08:b9:00:cb:12:
25:f2:4c:64:d7:2b:92:fa:99:a7:03:3b:77:60:e4:d7:01:e2:
a6:ee:7d:9f:08:7a:e3:e3:46:f4:28:51:76:7b:27:13:f6:fa:
0c:fd:80:8b:6d:50:9f:c7:66:2c:eb:59:df:61:7d:c1:34:f8:
37:1c:09:dd:95:5c:57:28:27:d8:2b:04:a6:bd:03:de:6d:a0:
d2:7e:07:23:b3:0f:b9:f4:04:99:d0:cf:2b:62:16:a7:92:16:
f7:27:3f:48:45:00:98:c8:aa:14:87:ab:c3:02:c5:70:7f:7e:
90:5b:a5:bb:5e:a0:d7:a1:1b:90:0a:dc:66:4d:07:c1:8c:da:
2d:92:53:5d:dc:6d:7b:2a:9d:9f:f1:34:84:fd:ad:5e:ad:c3:
36:17:e4:73:ac:68:fd:10:1c:ad:6e:b1:2d:50:ca:5a:db:ab:
1d:84:2e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:45:48 2025 by rpki-client