Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: +qgbxF2QOthRhc8huJYdcNsJ4RIXzsUxkU32n8q7QZM=
Subject key identifier: 06:08:2B:9E:BE:D0:1F:42:82:F8:19:94:57:36:7D:FD:23:ED:02:E3
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 0194BC3C3D288B15308C7A8BF6B3CA975F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: 3sOYKEN4Nf3DVcZvM1E1CObMHQdSBMNjTI3lvgRegSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:28:8b:15:30:8c:7a:8b:f6:b3:ca:97:5f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=06082b9ebed01f4282f8199457367dfd23ed02e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:40:e8:28:0e:7f:19:20:9d:97:51:0c:db:
de:c5:75:cd:85:69:e1:ca:66:07:86:df:74:27:48:
87:38:2f:a1:2b:47:ca:aa:ee:b6:c8:6e:91:c8:50:
37:d3:ef:b1:cb:8f:86:c4:78:3d:d0:b9:de:0b:9f:
ee:5e:65:8f:01:87:c7:1a:c1:d7:77:1b:58:b1:bd:
c7:8f:27:49:35:46:b8:f6:22:19:21:05:ce:83:28:
c1:36:be:d3:e1:67:7f:84:47:3f:21:42:52:a6:1f:
4d:85:ba:f1:12:60:e2:71:75:30:82:d8:22:6f:9e:
d4:43:8a:cc:a0:6c:b8:50:be:69:e9:52:56:88:ae:
7f:bd:01:99:33:12:60:57:7c:e3:3b:33:51:bf:bd:
cc:2a:43:9a:7e:d2:51:3f:eb:e1:63:e3:4a:cd:d8:
49:8f:6a:a9:70:e8:e5:41:e9:36:58:ed:f0:1b:15:
63:87:16:43:a7:6c:3c:be:31:8d:fd:40:01:be:43:
c6:7b:bb:8d:10:72:e0:c8:43:0f:f9:38:50:7e:05:
e6:c9:bc:1a:5c:32:09:5e:60:62:88:ab:1d:d3:20:
45:a4:f5:f7:c5:29:87:f0:dd:72:02:65:e8:83:56:
08:10:5c:fd:17:7e:ff:f4:5a:ca:db:ab:6a:a4:78:
17:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:2B:9E:BE:D0:1F:42:82:F8:19:94:57:36:7D:FD:23:ED:02:E3
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:a1:f8:90:7e:83:5f:a5:0e:12:8f:da:7a:e3:b3:90:1a:
a4:70:d6:41:23:b1:71:ef:29:8e:4b:41:d2:f6:84:5b:1f:a8:
b6:e9:37:24:b8:6c:20:31:72:be:1d:9a:c5:99:98:77:40:62:
2a:dc:51:40:46:31:6e:f3:92:56:0c:89:8d:13:de:cb:4e:4a:
b9:bd:1e:e8:01:30:f7:24:7e:ab:76:d0:84:6d:74:b7:9f:d3:
c8:73:2a:e4:ab:83:e4:4d:7b:77:2f:a1:93:67:91:e0:f6:d8:
6f:c8:2f:2d:f3:3c:1b:8f:92:3f:70:1e:af:14:f3:6d:08:d9:
9a:8c:96:e0:e7:a9:ac:86:e2:6e:68:54:5d:2c:f2:e3:f0:38:
4c:26:8e:ae:48:77:8e:b1:bb:2f:65:6d:28:49:d4:cc:c2:82:
01:c2:5c:50:b7:f6:64:4a:ff:14:e7:cc:7c:24:65:d6:15:98:
eb:e4:96:52:38:b5:4a:8f:31:be:e9:12:6c:e7:30:69:47:b6:
0a:ad:6e:fa:79:a2:3e:75:3e:06:2d:28:ec:2c:93:1a:bc:c8:
2a:1f:aa:47:8a:0f:c4:bd:40:fe:fc:cf:ec:4e:ff:06:04:4f:
70:93:3a:48:8d:0b:c0:88:a9:dd:f3:11:7c:d4:f7:44:fb:bc:
79:a7:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:17 2025 by rpki-client