Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json)
Hash identifier: h9ObgqBsi1ziyYNVaMCMc27TvOVXs3b+73G5Qlh0nbk=
Subject key identifier: A4:6D:1C:AE:B0:7F:50:F4:5C:A9:B6:2D:3B:C2:41:7E:59:54:07:F3
Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Certificate serial: 0194BCE0CF0D5E8E2548DC6E9D05D0DFD7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
Manifest number: 03B1
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: QCDEjiJME7gcUPIgjMTm1qG+7S4amPI//IYGgHRlfyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cf:0d:5e:8e:25:48:dc:6e:9d:05:d0:df:d7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=a46d1caeb07f50f45ca9b62d3bc2417e595407f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:a9:80:81:94:a8:9c:11:05:d2:89:0e:7b:
58:41:a1:3d:a3:28:a2:74:2f:8c:93:6f:6d:41:75:
ab:27:5b:c7:7a:6b:b5:44:d0:7b:bd:6d:bc:4f:61:
8f:df:32:52:9a:c6:e7:11:dd:c8:fc:f1:8b:f1:45:
20:3d:a6:90:af:98:a3:83:5e:5f:f9:a2:ba:7f:f7:
87:e3:a5:0f:3d:45:65:b6:de:28:4a:83:35:c4:f5:
49:16:0e:78:e0:f9:63:35:23:b7:85:b5:b0:08:e3:
d8:8e:d1:98:7e:b0:ea:72:3c:89:b1:0b:57:44:29:
72:7f:19:ba:fe:77:f2:0b:90:23:f2:a2:2a:f6:0f:
1e:39:38:84:48:52:68:c3:2c:b5:6a:ca:71:84:21:
43:a2:11:44:33:5d:c1:18:c1:10:e3:bd:4e:16:8e:
a7:12:26:80:88:38:51:05:88:0e:f9:43:fb:96:df:
41:d1:6b:48:4c:7d:d7:4b:28:8c:19:24:7b:35:1b:
56:31:6b:53:39:68:9a:57:03:6a:f6:02:b1:6e:c8:
9b:7c:b3:08:48:ca:42:7c:78:fd:bc:e8:8f:f6:6d:
26:ee:4e:be:c9:64:78:73:e4:aa:21:63:a2:c8:11:
d1:0b:33:41:5e:57:97:9a:f2:00:55:26:86:f0:ef:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:1C:AE:B0:7F:50:F4:5C:A9:B6:2D:3B:C2:41:7E:59:54:07:F3
X509v3 Authority Key Identifier:
keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:44:24:41:19:f6:1b:a0:02:b1:77:b0:ef:7b:e5:a2:e1:3c:
ac:47:b5:53:f0:da:00:3f:78:cb:c4:0e:5a:52:ab:d8:5d:8d:
33:29:02:61:c2:04:84:b1:61:a9:f4:bc:0a:69:17:d1:79:45:
d3:af:5d:bf:66:38:79:57:3f:3d:c4:b7:a7:98:f0:38:bb:3e:
cf:8e:56:b3:21:62:65:42:55:cf:c9:cb:57:c5:82:9f:74:0e:
70:3b:de:27:0b:00:4b:5b:c9:2c:4e:04:79:51:32:7b:69:9e:
43:64:e2:ea:8f:c5:80:66:36:53:ad:64:64:2a:ea:28:29:a5:
30:71:90:e9:2e:c0:d5:b0:75:24:3e:9e:e2:65:a9:9e:52:8f:
65:28:84:e8:ed:7e:5b:68:64:19:91:74:fc:7a:25:c1:be:28:
81:da:9f:da:a3:f8:1c:cd:e0:1f:ba:ad:59:10:63:d2:67:39:
43:9b:51:06:2d:dd:52:1f:4e:ce:7a:8a:82:3b:0a:9a:b6:11:
39:e3:04:c1:39:e1:9a:67:4a:bf:d9:d9:44:c1:a3:bb:b6:9b:
42:0d:48:ca:b0:42:ba:41:d9:6a:7d:7f:de:ad:1b:93:a2:1a:
2b:b1:94:38:c5:92:c6:e8:9b:62:6d:57:3f:be:0e:48:7e:f0:
05:6d:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:38 2025 by rpki-client