Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
File: ZYzRSR-oTUghjThg8zI9ybhoV4w.mft (raw, json)
Hash identifier: w7nJFxdWIKL/Vvta8VCfhr8iARNoE0KKajjKB9HLk9E=
Subject key identifier: 43:B4:B6:A2:37:B8:6A:0A:44:07:F5:0A:42:13:65:6D:5E:D1:45:90
Authority key identifier: 65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
Certificate issuer: /CN=658cd1491fa84d48218d3860f3323dc9b868578c
Certificate serial: 0194BBCDCE05D8D346719F60DCE85DB2F101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
Manifest number: 0C92
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: ZYzRSR-oTUghjThg8zI9ybhoV4w.crl (hash: 3NAzKzbIpn1f0hV6Bp86SElt8PGvJdjV9RQ60vOWToY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ce:05:d8:d3:46:71:9f:60:dc:e8:5d:b2:f1:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658cd1491fa84d48218d3860f3323dc9b868578c
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=43b4b6a237b86a0a4407f50a4213656d5ed14590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:c6:60:2e:1c:9c:47:41:1e:60:aa:6c:82:
5c:ab:f3:ce:cc:6a:ef:d3:22:5d:a0:20:4b:97:51:
88:c2:b9:46:8e:70:b8:ce:0a:e3:ae:85:d6:cc:1b:
2c:7f:66:85:f1:8c:cb:5d:53:62:bc:b0:3d:d8:e8:
81:8d:41:d5:52:1a:8f:18:1f:9c:57:b6:7a:9d:be:
36:5b:58:81:a2:9f:2f:da:09:c6:fe:54:2f:d6:25:
e6:4d:20:25:1e:b5:e5:b2:0a:e3:15:33:4d:b8:a3:
b3:0b:29:28:70:69:27:4c:a8:3e:01:ca:11:09:f2:
39:2f:68:80:ea:47:32:26:c2:54:17:55:18:d4:40:
5b:f9:eb:74:0c:f2:c4:9d:e0:9f:a3:0f:3b:82:56:
88:69:8e:95:7d:4f:81:71:10:4e:72:24:a9:46:51:
c5:74:f1:fb:46:00:f6:aa:f7:94:bf:09:ab:45:8a:
8c:9e:a7:0e:f5:71:0b:27:77:ac:34:b9:cd:0d:d6:
d3:f1:8a:9f:14:47:a5:bb:8d:ff:14:de:eb:21:d3:
74:cb:b7:e2:48:a0:b7:c8:52:79:e3:ea:38:09:0c:
d6:0e:5c:ad:5c:40:cc:b1:ab:61:3c:1b:b4:55:91:
61:b3:2f:3b:84:90:9c:e1:c7:c4:f5:f1:d1:3e:08:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:B6:A2:37:B8:6A:0A:44:07:F5:0A:42:13:65:6D:5E:D1:45:90
X509v3 Authority Key Identifier:
keyid:65:8C:D1:49:1F:A8:4D:48:21:8D:38:60:F3:32:3D:C9:B8:68:57:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYzRSR-oTUghjThg8zI9ybhoV4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ad935-63a7-434f-b69d-40aa83486f8f/1/ZYzRSR-oTUghjThg8zI9ybhoV4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d6:03:a8:c2:93:c0:95:82:5b:71:2d:75:14:b4:be:02:34:
2a:e6:62:db:88:76:b6:3a:6e:bb:3e:46:20:ed:95:59:2f:16:
1a:9d:e9:3d:71:d3:a1:e5:49:22:de:92:04:d2:b3:f7:cb:31:
b7:5a:0d:30:6d:5d:99:3e:5a:2c:17:fd:83:82:ea:22:37:93:
fb:9b:cb:db:fd:60:bf:3c:1f:aa:3d:2e:4b:d7:1b:6c:6f:50:
95:c2:f5:c2:4b:61:92:52:7b:7b:c8:d5:56:7e:c6:3d:a6:39:
03:f8:8f:df:e0:5c:ea:15:d0:b0:c2:3e:dd:01:b8:ab:59:84:
e9:2e:81:da:4d:71:52:e3:52:3e:b0:d5:69:b3:1b:30:e1:38:
35:79:ab:d7:f9:4b:ac:8b:1f:f7:2e:eb:ed:83:0a:6a:be:0c:
ec:b5:af:59:e1:9d:e9:a3:09:a7:b8:cd:d2:44:9f:8d:2a:f8:
b9:78:88:5c:1f:9a:78:df:0b:20:11:cf:c2:25:f4:7e:ef:31:
5b:47:95:82:04:a2:16:98:e9:7a:3c:72:5f:3b:8d:8b:fc:d9:
44:16:99:9d:f6:0f:23:94:7a:fe:53:6f:02:b7:a0:75:9a:39:
f9:41:db:08:2c:6b:ca:53:dc:be:99:2d:93:22:2e:57:33:e2:
f3:20:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:48 2025 by rpki-client