Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
File: zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json)
Hash identifier: YhXWDCrzUtoBf3W3UhITbqSl7gYYDL2EOesaM5UgO2I=
Subject key identifier: B6:60:AD:55:AC:1D:70:6E:D4:86:9E:FB:20:55:88:FF:55:AC:B5:C9
Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
Certificate issuer: /CN=cdd0ae41cdab559862964178bfeae368496b07d7
Certificate serial: 0194BD17E6AC26E8AE515CB2DA9BA12DD5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: uSM5gqwbduZqBVtmHaDSWtKGtGtg9d0cbf/CrD4AeZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e6:ac:26:e8:ae:51:5c:b2:da:9b:a1:2d:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=b660ad55ac1d706ed4869efb205588ff55acb5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:cf:ed:8d:66:19:f7:7a:97:c3:4b:53:c7:
94:e5:dd:53:7b:11:14:55:0a:ea:d3:ee:4f:5c:1c:
a3:f5:91:c9:2b:85:59:e6:c8:57:8e:40:10:5c:9b:
d0:79:53:33:91:01:87:d6:97:1b:77:e1:c5:dc:d6:
41:9f:39:a0:c8:ea:86:5a:0d:11:53:a9:e4:a0:6f:
89:f4:7e:c0:0c:31:f4:7d:e0:3d:7c:d8:be:03:7c:
88:d3:e7:39:03:2d:3a:56:2e:0a:8e:ac:d9:9a:62:
fd:b6:f5:cc:8b:c7:b9:11:78:b8:5e:b2:8e:ab:b5:
c0:62:2d:e3:ba:23:02:69:eb:97:29:2a:59:36:bf:
f5:63:f7:26:7c:33:b7:ee:bb:d4:64:a3:7d:8d:8d:
e5:b3:05:e4:8a:c3:99:ad:0b:8e:cd:dd:8e:fd:96:
f0:f0:44:4b:f4:54:36:56:3c:d8:a3:0c:dc:bd:fa:
bb:b6:97:1c:bf:cb:65:24:9b:c7:4d:0f:76:22:25:
6c:b6:b3:35:ac:60:e1:df:95:b3:85:1a:b9:e8:c9:
c3:e4:65:39:e7:62:b5:97:80:f2:ae:ad:59:54:a5:
9a:23:0b:ea:f4:ea:9c:85:a4:fd:5b:ca:c9:60:4d:
ea:01:87:48:4a:dd:d5:61:b5:63:f2:d9:85:41:89:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:60:AD:55:AC:1D:70:6E:D4:86:9E:FB:20:55:88:FF:55:AC:B5:C9
X509v3 Authority Key Identifier:
keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f4:df:1f:8f:e1:c4:7c:e2:f7:ec:b8:ef:3d:75:e8:e5:70:
44:39:5d:ed:4a:e9:11:4a:12:b6:c9:bc:66:66:62:44:6c:e7:
0d:59:1c:6d:dc:1c:c7:ed:2a:25:ac:01:12:ba:dc:6a:0e:2b:
ab:bc:23:ad:ec:ce:4c:8a:29:ad:44:87:ef:29:ad:bc:6f:d3:
42:15:82:1e:d5:da:6e:cd:f1:16:af:ab:e5:ae:fa:d3:10:03:
2d:32:26:1f:4b:8a:79:85:6e:7c:10:6f:74:09:4b:f3:bc:32:
6b:61:04:64:97:ea:4d:8d:48:dd:c7:43:58:3b:f9:b3:cf:89:
94:35:50:4c:f0:66:d0:6c:40:cd:0d:97:ce:5c:d9:37:26:13:
36:4d:92:47:90:ef:5b:4e:6e:c0:35:bc:d2:20:23:47:3d:a1:
7e:5d:33:22:c1:67:1e:4b:1a:dc:16:61:80:04:03:ba:4d:ee:
11:80:fb:3c:e9:83:ec:a1:26:43:26:ec:50:51:42:82:fd:27:
ab:83:64:aa:e1:6f:64:3c:a3:10:53:71:0c:2b:94:3b:a0:ff:
5a:cd:db:21:1e:9b:66:bd:58:1a:95:67:ff:35:50:b0:26:93:
f2:91:78:17:f0:1c:b8:ea:2e:79:0a:be:53:34:3e:ba:5f:d3:
e7:9e:2e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:05 2025 by rpki-client