Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json)
Hash identifier: +sa4+UEAPHvpa29c1z4D2fMImXSJ2TtsRo1Y3hv07lA=
Subject key identifier: 54:D8:F2:59:7B:6E:57:A8:21:BF:A5:0C:03:8B:18:3D:1C:BC:BE:D4
Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Certificate serial: 0194BC3C31749AC077527FDF03C50BA25E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
Manifest number: 07ED
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: q49Pt6eFLHWsIhTZCNRqvP7XcMFWO92v22KleJm41F4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:74:9a:c0:77:52:7f:df:03:c5:0b:a2:5e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=54d8f2597b6e57a821bfa50c038b183d1cbcbed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:42:2c:32:2c:15:96:e9:a6:67:02:8e:f7:
99:25:42:f6:f8:6c:39:56:92:71:2d:d6:58:60:38:
a4:bf:a7:22:f4:47:b2:5c:3c:0d:b9:18:8c:22:0d:
d5:a3:6d:de:de:35:12:db:e2:74:58:2b:20:7b:7d:
11:cc:53:2d:23:25:d3:01:39:61:94:64:22:c4:b5:
9d:0f:f0:af:62:74:8c:54:c3:ec:dc:72:7e:c2:04:
8d:7a:12:44:a3:86:f6:b5:65:e7:ad:cd:9e:dc:8b:
86:5b:93:53:fd:3d:2b:92:4c:ab:65:2f:da:2f:a1:
00:6f:20:af:b3:2a:10:03:16:3c:b8:be:63:22:e9:
ae:9e:4b:ed:a7:5b:cf:d9:a3:2e:7f:61:68:ff:01:
b0:d5:38:d5:e6:6f:f4:2d:eb:db:5f:af:c0:ba:b5:
01:e2:4d:5a:b6:79:8f:8e:a5:50:65:0a:13:a1:3f:
30:4a:f2:08:70:cb:33:59:6b:75:a5:db:3c:98:1e:
35:f7:84:32:fa:e4:5b:7a:eb:f7:9a:ad:7c:86:74:
4a:fa:14:d3:c1:f5:11:61:7e:0f:0f:c8:c1:f2:82:
bc:d6:c3:c5:04:ca:52:c0:40:b7:c7:72:11:a9:7f:
cc:67:86:52:5a:88:e5:f2:e0:17:54:80:14:95:f8:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D8:F2:59:7B:6E:57:A8:21:BF:A5:0C:03:8B:18:3D:1C:BC:BE:D4
X509v3 Authority Key Identifier:
keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0f:bd:f4:ad:c2:a4:00:da:0e:d0:bf:ce:90:ec:6d:30:fa:
00:c9:ac:f2:d4:8e:8d:a8:d5:5a:aa:cd:4b:40:47:41:e3:91:
50:62:e9:3a:63:f7:79:1e:df:06:27:5b:39:8b:20:d7:b7:77:
76:02:e9:50:89:8f:7a:b3:2f:5c:29:d0:b5:6e:f4:da:2b:9a:
9d:97:f7:c1:40:82:ba:7c:8f:27:02:c3:c4:df:27:28:ba:9e:
3b:eb:0e:36:8f:ee:c3:4f:2e:d0:4e:80:cd:39:bf:6d:6e:59:
64:d9:28:90:fc:0b:c1:d6:25:aa:92:72:32:cc:86:a0:9d:b1:
5c:c5:a9:d1:35:db:0a:94:29:97:b6:23:67:7b:d0:2e:5e:78:
10:9b:21:69:09:2e:09:7d:b5:f5:b1:f2:2f:bc:16:2b:ec:44:
66:ce:06:c1:2a:c6:4f:e6:56:5d:d5:5c:83:e4:6f:55:47:1f:
0d:3a:11:67:ed:34:f1:a6:4a:1b:bb:ba:56:ea:7f:05:60:ca:
9e:06:06:9f:7b:e3:3c:cd:0c:09:ab:66:c5:63:ab:01:01:a5:
1e:8f:b9:d1:be:02:34:15:2b:22:e7:b3:0d:c0:e5:68:70:30:
15:85:76:9d:d9:13:21:20:bc:93:cc:2a:f0:70:56:b3:8b:be:
ab:f3:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:04 2025 by rpki-client