Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
File: ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft (raw, json)
Hash identifier: qKg69nJaCYtOY4Rqesh2NO2yap14BkoCDuYPBwIhkRk=
Subject key identifier: 09:8F:8D:8F:91:03:EC:7B:B8:E1:F3:2B:6E:ED:CC:7D:1D:2E:CC:49
Authority key identifier: 66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
Certificate issuer: /CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Certificate serial: 0194BC3C7C7478630C0AAA016309EC399E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
Manifest number: 0A77
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl (hash: PE4oI7KqF3XATh0ePqnoRnNHwx4+hXog0pDWQ2Gje7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7c:74:78:63:0c:0a:aa:01:63:09:ec:39:9e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1f8fb6add272b46c406b1885c93295b1f4b8c
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=098f8d8f9103ec7bb8e1f32b6eedcc7d1d2ecc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:e3:f1:da:96:7a:5f:57:ea:f3:86:52:97:
e6:8c:aa:72:97:9f:76:fa:69:73:e5:7e:26:35:f5:
95:0f:79:65:75:3e:bc:92:dc:e6:f5:93:55:2f:cd:
56:30:49:cc:b1:8d:77:9d:d6:2e:bf:c4:00:19:7e:
c8:91:9b:6a:aa:1b:ce:62:1b:36:fb:76:55:a5:0c:
fa:c8:82:6f:f8:29:fb:e4:36:d5:b5:dc:d1:f2:7c:
f0:d3:9f:d8:d6:84:d2:18:15:72:e4:c1:c2:da:55:
0b:60:df:b7:f7:73:fd:1c:ad:1d:eb:5a:f2:9d:b7:
ad:64:f3:17:12:b8:07:28:f9:d0:bf:47:44:cc:72:
92:a2:42:1e:05:65:2b:91:46:00:0c:24:e1:ec:af:
51:95:9e:de:05:d2:97:31:0c:de:13:95:c3:8e:1e:
63:32:3d:06:51:1e:2f:b7:f6:19:68:ee:58:24:a0:
ba:7a:66:d8:9c:79:7e:f9:b5:d5:86:2e:e4:39:a2:
b6:63:d0:d0:0f:66:f6:aa:34:dd:b4:5f:f6:49:e8:
bd:21:f8:29:9a:02:e9:6f:5e:93:e3:e5:cd:60:98:
5a:88:9e:1c:d0:5c:e0:ec:b2:79:72:8e:08:0a:92:
9a:11:59:ae:c2:8e:33:ae:86:af:82:a5:55:7f:89:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:8D:8F:91:03:EC:7B:B8:E1:F3:2B:6E:ED:CC:7D:1D:2E:CC:49
X509v3 Authority Key Identifier:
keyid:66:D1:F8:FB:6A:DD:27:2B:46:C4:06:B1:88:5C:93:29:5B:1F:4B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtH4-2rdJytGxAaxiFyTKVsfS4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a52f6f-14f8-419c-99d9-a59d1350deec/1/ZtH4-2rdJytGxAaxiFyTKVsfS4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:86:d6:5c:ee:33:b0:1e:34:8e:36:7e:f8:0b:86:30:1d:22:
c0:12:49:00:b7:3a:aa:75:80:a4:7a:bf:88:c6:dd:c0:90:02:
78:02:be:b7:6a:8c:be:6f:23:b1:be:c3:6a:3e:c8:0d:ee:74:
e7:bb:0c:cb:b1:f8:47:bc:62:d7:95:6a:12:15:36:a2:dd:8e:
be:7a:fd:b5:17:d3:71:96:88:3a:d3:09:d8:1c:00:99:51:fd:
c4:81:4f:6d:4c:b3:df:c5:f2:f5:2c:3c:46:09:20:32:4f:ca:
4f:41:cd:ce:32:44:9d:05:2e:ec:89:6b:9b:f8:8a:51:cf:dd:
c9:5c:48:45:7f:88:67:c8:f7:af:41:51:e8:e0:c3:66:92:ae:
6e:57:bd:47:44:80:ca:a3:17:5b:ae:d0:e7:2b:2a:b2:1f:c2:
db:83:96:81:a9:70:57:29:b4:ba:94:69:11:27:40:51:92:a5:
64:3e:f2:38:0e:80:d7:33:e6:62:1a:82:ff:48:2a:14:c8:b3:
d2:0e:76:1d:85:0b:ee:25:7c:f6:3d:5d:2e:33:2c:ec:a3:5f:
da:43:e6:ff:71:2f:5e:8d:2a:44:25:4c:91:b5:ae:60:1f:0e:
61:47:50:5d:a4:f6:02:1a:10:c1:0d:33:63:75:7b:6b:58:0c:
28:5b:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:37 2025 by rpki-client