Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: 9nFxQJzWZd8eIh3QbQVegPGrSZ5/rNNiM1VhgjRbeHc=
Subject key identifier: 52:1E:30:D7:00:98:96:7A:91:F0:88:F5:3B:A9:FC:18:49:AB:82:E9
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 0194BBCE3B2918598996F5AB38E13A5C2F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0D81
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: XLrKSLLiukvNoouaZP3ZLr3lXo88EZSJC+vq89c9+Mw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3b:29:18:59:89:96:f5:ab:38:e1:3a:5c:2f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=521e30d70098967a91f088f53ba9fc1849ab82e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:bd:eb:4a:13:b8:b8:b5:2d:19:2f:c5:5f:
c3:5e:99:c6:ec:b5:81:e6:21:f5:c6:e9:19:12:f3:
87:18:cd:f3:ce:39:81:91:fd:9a:26:d6:1b:76:8a:
f2:ad:7c:d1:28:ef:d3:1d:8c:1a:7d:da:12:4a:ef:
8a:c2:86:0b:47:07:3d:5d:98:87:b9:4c:41:0a:05:
57:c6:c7:e6:1a:49:fb:1b:b5:1b:b7:d0:8f:ea:0c:
50:74:fe:7b:97:ee:98:dd:76:1e:a4:9c:c2:49:21:
cc:af:08:12:a4:d8:e9:ad:6b:3c:8b:49:c1:7f:29:
2e:58:65:d9:b9:55:99:4c:1f:12:40:58:1e:57:a8:
27:6d:7a:f8:62:4a:fe:11:4d:23:08:11:23:26:75:
3d:13:25:ab:fb:d2:ea:6c:76:62:aa:5b:56:a6:b2:
eb:fe:ef:b2:ac:f8:58:49:e2:53:ee:c0:bd:7c:63:
2d:c9:3f:55:de:9e:0d:bb:78:7c:53:eb:76:46:dc:
26:c7:d1:1b:04:75:d7:1a:d0:11:ad:5c:a5:1f:a7:
fe:68:4e:d9:86:a8:79:a6:d2:52:a2:57:92:00:91:
fc:95:f7:d8:ae:77:59:f7:e8:b4:a0:ae:ba:2b:f6:
aa:5f:92:b6:f8:5a:fd:ac:94:b9:48:4a:d8:5a:38:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1E:30:D7:00:98:96:7A:91:F0:88:F5:3B:A9:FC:18:49:AB:82:E9
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:db:33:16:a3:eb:03:15:d8:18:5c:e3:73:18:07:31:6f:2d:
fd:33:23:e2:92:e7:13:22:34:ef:56:fe:60:48:59:97:3c:82:
50:79:56:d2:bb:60:ab:ff:f6:87:a9:f3:e9:cf:7f:13:1e:82:
fd:e6:76:e9:c5:d6:21:3e:09:90:d2:79:ee:9b:e0:fe:a9:a3:
20:28:87:a9:59:97:44:38:ae:5f:17:c9:bb:7f:f5:75:1b:1d:
36:d5:d2:9a:e1:1a:de:87:65:69:75:bc:42:96:f1:5a:af:5b:
ec:c3:e3:38:c5:fb:8c:a3:3e:eb:3b:84:93:94:70:28:a8:c4:
fe:a5:5c:53:b9:c5:13:5f:12:df:13:72:6f:0d:81:d1:8e:13:
2f:e6:d7:5f:e4:03:c7:f9:90:a8:08:41:d0:b6:86:e2:b1:63:
fc:90:c5:32:34:f6:33:be:a6:99:33:46:22:fd:36:2c:e6:fe:
4b:ac:86:ca:7d:bf:37:a3:0d:22:0a:fa:a9:94:c7:26:38:79:
4f:ac:ad:2b:5b:54:e4:27:9e:c2:aa:30:be:88:9a:fe:f2:1b:
dd:3f:3f:ce:82:cc:e2:91:f9:6d:f3:c9:be:bb:d0:d2:f9:3c:
28:fb:19:4b:df:1b:30:50:19:91:a4:88:4e:1a:d8:f2:54:bf:
d7:a1:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:37 2025 by rpki-client