Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/665cd3-2789-46e9-9f42-4b1e0f0c5644/1/ErZkZumSPA88MycasXt_j9DSSqs.mft
File: ErZkZumSPA88MycasXt_j9DSSqs.mft (raw, json)
Hash identifier: rwCwzKRXbxrTL081aI6/R8LWw01GMu5rfuNUVa9tcp0=
Subject key identifier: 4B:DD:F6:5F:4A:88:7C:03:C2:CD:EB:A5:A2:B7:B9:47:CC:4C:D4:4F
Authority key identifier: 12:B6:64:66:E9:92:3C:0F:3C:33:27:1A:B1:7B:7F:8F:D0:D2:4A:AB
Certificate issuer: /CN=12b66466e9923c0f3c33271ab17b7f8fd0d24aab
Certificate serial: 0194BD178DFFA3ED5811E75DCE7C4B33C5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErZkZumSPA88MycasXt_j9DSSqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/665cd3-2789-46e9-9f42-4b1e0f0c5644/1/ErZkZumSPA88MycasXt_j9DSSqs.mft
Manifest number: 0C57
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: ErZkZumSPA88MycasXt_j9DSSqs.crl (hash: zjYxhDwqKXlWqskKugcz95cnz8L8ZoVuZZT+PJydwN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:ff:a3:ed:58:11:e7:5d:ce:7c:4b:33:c5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b66466e9923c0f3c33271ab17b7f8fd0d24aab
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=4bddf65f4a887c03c2cdeba5a2b7b947cc4cd44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:83:4d:2a:ca:5c:ab:5b:48:60:d0:ed:e4:
cb:a8:c9:72:b9:c5:8c:a5:70:af:a2:6e:e3:b8:63:
42:7f:8f:24:9a:a1:ed:60:41:30:db:2a:50:a7:53:
c1:df:39:ce:b4:1f:6f:2a:f6:ff:44:ae:bb:72:00:
28:dd:45:c0:49:90:f5:24:61:b9:07:61:62:eb:b7:
36:0f:b6:82:b3:d0:67:36:66:e9:fa:83:26:7d:4a:
7a:9a:17:9c:4a:04:6a:96:6c:77:d0:1e:7a:16:8f:
30:bf:46:9c:d2:be:2e:a2:c0:75:35:1f:7e:27:4d:
85:62:4f:d2:38:55:e5:aa:7a:99:21:0e:f4:2b:ee:
ae:c3:31:5a:40:21:e8:68:ae:d4:af:13:d0:28:10:
10:56:f4:4a:fd:08:3a:99:48:58:ee:ef:95:7c:c5:
64:f5:26:43:fa:7b:39:73:f2:7a:76:eb:a0:37:bf:
23:32:0d:86:d0:79:bc:d9:39:09:ea:28:c3:45:10:
65:50:23:32:21:71:55:50:83:6b:20:34:d4:03:11:
50:ee:b7:80:ec:cd:d7:49:09:7f:48:84:5c:20:ad:
9b:59:b0:ef:8c:f4:27:83:19:81:3e:0e:1a:c3:ac:
80:34:fe:10:28:2e:44:2a:63:80:49:94:14:5d:c2:
ef:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:F6:5F:4A:88:7C:03:C2:CD:EB:A5:A2:B7:B9:47:CC:4C:D4:4F
X509v3 Authority Key Identifier:
keyid:12:B6:64:66:E9:92:3C:0F:3C:33:27:1A:B1:7B:7F:8F:D0:D2:4A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErZkZumSPA88MycasXt_j9DSSqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/665cd3-2789-46e9-9f42-4b1e0f0c5644/1/ErZkZumSPA88MycasXt_j9DSSqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/665cd3-2789-46e9-9f42-4b1e0f0c5644/1/ErZkZumSPA88MycasXt_j9DSSqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:90:02:cd:43:58:bd:d0:3a:ae:22:07:44:22:9e:19:cc:02:
0e:dd:ef:0f:b6:03:c7:0f:76:ad:cd:b3:ec:87:3f:c4:ae:f8:
c8:30:c2:f4:93:bc:76:b3:6d:44:88:b3:70:12:5e:40:08:6d:
38:c4:d4:e2:1e:4e:40:e3:3c:f1:79:24:d7:63:c8:28:40:85:
b6:93:94:60:69:58:fa:a4:e3:37:54:a5:96:35:e9:90:f8:05:
34:1a:46:12:3c:46:53:bb:36:06:4b:86:2b:d1:71:00:2b:bd:
37:3b:a3:79:28:92:77:9e:d7:6d:8c:1f:13:e8:1d:4f:18:4c:
00:35:38:45:5d:12:25:3f:c8:c0:16:87:c2:6a:ea:a2:fd:90:
3c:e5:72:7c:4f:45:e0:99:03:2b:8f:5f:5d:48:8d:d4:31:50:
b0:57:47:d0:db:c6:0f:99:af:ef:c2:4d:11:c3:50:a9:4e:0f:
54:4f:9e:b0:7a:c8:4c:0d:b7:4f:b3:a9:00:fc:e6:94:a2:15:
75:55:58:b1:a7:c3:6f:3b:32:19:dc:fc:a3:28:8f:16:d0:e8:
f0:89:90:08:77:3f:7e:f2:02:7d:22:7c:29:de:c9:ff:31:c2:
76:a1:31:90:79:6f:99:a6:af:d9:32:3a:3a:58:59:ef:33:0f:
22:2a:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:29 2025 by rpki-client