Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: ZfpNTHuHrMZnoY+SSZe3/XmvJkiOO2Pfb2EtLnt/X00=
Subject key identifier: B5:EF:D5:33:80:A6:8A:11:76:89:8E:33:71:D3:FD:01:60:A3:94:3C
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 0194BD17C0174F0C67DE231F9FBC440DB49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 0ED8
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: Sm4QpcwoOiuAVdfOklrL1jtM2VwKWHsEy7F50RzR1Ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c0:17:4f:0c:67:de:23:1f:9f:bc:44:0d:b4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=b5efd53380a68a1176898e3371d3fd0160a3943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:80:e6:0e:52:d0:21:8d:53:e0:11:f3:53:
d9:40:40:9b:76:51:4b:13:a5:3d:5f:67:6a:c8:2c:
b3:56:eb:70:44:b6:f1:11:4f:6c:b4:a5:66:6e:e3:
11:59:8c:7f:55:d4:d7:12:3b:2e:dd:91:3b:24:4e:
5f:f1:84:d3:ce:04:8f:04:ca:e3:d1:4d:e4:98:29:
c3:a7:86:5a:24:d6:ca:93:e2:37:7c:da:a6:87:bc:
c1:ba:8c:a3:89:da:27:e3:ad:66:08:97:73:b1:03:
af:a7:ac:27:bd:7a:79:7d:c1:91:84:7c:8d:99:55:
7c:15:b2:c6:fa:b8:3d:a3:95:ec:63:b8:46:7e:52:
c5:0e:90:78:54:43:c0:29:49:b2:e1:94:6f:6c:6b:
85:16:6c:42:63:2d:42:fc:1e:91:9f:02:b5:68:88:
b1:aa:87:24:6e:36:59:47:45:f6:9c:72:25:0c:59:
75:3e:b0:d4:4c:0f:56:96:52:52:75:d8:4a:00:5e:
19:b0:8b:28:dd:a2:46:ce:52:de:66:67:80:9a:aa:
2e:c1:09:b0:26:90:bb:2b:dc:9d:2c:1f:0f:87:e5:
d8:26:96:ea:c5:af:6d:cb:02:6b:e2:22:5c:a3:23:
0a:a0:b8:92:19:87:4c:8d:bf:7d:a8:40:7f:cd:96:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:D5:33:80:A6:8A:11:76:89:8E:33:71:D3:FD:01:60:A3:94:3C
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ad:15:73:19:c6:f0:d4:6d:88:c5:69:9b:b3:0b:e1:98:4f:
d2:92:68:7b:6f:ff:a8:ac:21:e2:38:60:3d:b3:2b:fe:bd:99:
76:14:64:6e:7a:1a:64:7e:ce:e0:8b:30:60:16:61:6e:93:cd:
ef:f9:2e:7b:6b:9d:9b:4b:51:ed:f3:db:18:f2:a7:39:6b:25:
1c:c4:7c:29:54:2b:d6:e0:19:36:dd:61:64:07:03:80:1f:da:
72:0d:0e:46:12:b9:44:a1:b6:44:5d:6e:0f:c6:7e:00:19:74:
61:24:90:b5:78:bf:e4:65:f3:6f:8b:4b:f3:f9:1b:a3:25:3e:
d9:2c:af:8d:33:7f:6b:a1:22:8a:f5:cc:01:d7:8a:a0:f0:73:
69:17:20:59:8a:91:de:77:24:e8:64:83:2b:80:bc:96:a3:d2:
74:bc:56:2c:28:25:eb:87:31:35:70:33:0c:85:c1:d6:30:fd:
68:e5:66:69:20:d7:42:45:6b:d7:d2:ba:d4:c7:52:e2:af:fb:
27:a5:74:db:29:ff:de:75:47:c1:f7:4f:a0:5e:8a:a1:91:25:
5f:95:54:88:96:b1:ce:33:73:2c:94:a0:cb:8e:e2:a6:af:7a:
56:b4:97:05:07:ef:a7:67:ab:df:64:f4:92:2f:ba:f8:39:93:
e3:b6:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:52 2025 by rpki-client