Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
File: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft (raw, json)
Hash identifier: RbfXQd85hBnCFCxIXMN2RXIlT7k5g86qS/oA0nlb/tg=
Subject key identifier: FC:41:98:EE:9A:DF:09:1E:F0:4B:2B:08:14:F9:07:44:67:3B:17:55
Authority key identifier: 65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
Certificate issuer: /CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Certificate serial: 0194BC3C98E6E902B73D41C1F41274471E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
Manifest number: 0408
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl (hash: E1e3uB2tA7oLPVe/eu5boQ2v+NpiUq15n7HJv3CLyuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:98:e6:e9:02:b7:3d:41:c1:f4:12:74:47:1e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6536b9b3d471f93f8ea9fed0c4514c2c374d23f6
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=fc4198ee9adf091ef04b2b0814f90744673b1755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:b7:7a:fe:1f:0c:6d:62:91:60:57:77:c3:
88:8e:96:37:ee:43:aa:c9:5d:11:5f:79:aa:cf:80:
67:a4:7c:3c:9a:e2:59:51:60:33:f1:b7:4e:8e:0a:
e8:aa:59:48:17:39:58:65:5f:64:04:22:26:90:62:
a4:da:11:64:61:db:6a:6b:20:99:ee:9b:4f:cf:a8:
ea:35:8c:30:15:11:35:a3:01:a2:4a:69:85:04:77:
c1:7b:57:70:88:15:02:4c:40:c0:99:50:7e:6e:f4:
f4:55:8e:b2:39:2e:a7:6f:82:16:fc:89:c0:79:ac:
39:ff:fd:d9:f8:1f:cb:c8:55:06:2f:67:48:07:2f:
2a:07:87:79:f7:6e:07:2c:c9:40:40:e2:34:c6:1b:
4a:2b:ff:5c:c1:83:e1:48:92:92:01:37:b2:29:df:
87:b1:f0:ac:5e:f0:e8:39:aa:df:35:f2:18:02:5d:
4a:4d:ee:3c:c5:9e:5a:0c:6d:93:5c:aa:27:38:fa:
50:e4:f8:2f:d8:4c:d9:0b:dc:35:02:bb:e5:f3:72:
c3:55:0a:5b:6f:33:be:7f:93:17:42:b1:75:b3:24:
bc:8c:a4:31:80:82:6c:f4:78:e8:a2:fe:19:c9:71:
59:47:a4:8f:7c:54:10:83:d9:36:61:b7:8b:5d:94:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:98:EE:9A:DF:09:1E:F0:4B:2B:08:14:F9:07:44:67:3B:17:55
X509v3 Authority Key Identifier:
keyid:65:36:B9:B3:D4:71:F9:3F:8E:A9:FE:D0:C4:51:4C:2C:37:4D:23:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e78a76-7c40-4084-a13b-15992b2c54ca/1/ZTa5s9Rx-T-Oqf7QxFFMLDdNI_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:d2:2e:e7:f9:f2:2c:d6:01:98:06:c6:7e:ce:dd:84:34:
64:16:18:b6:5e:ed:df:a0:30:21:45:f9:09:2e:de:c2:90:a2:
54:96:f7:14:eb:10:26:35:8e:7a:5d:7a:cc:22:b7:35:fb:cb:
e5:6e:86:75:64:dc:ed:e0:79:09:94:b9:15:d2:ac:9b:c9:0f:
8c:e1:99:2b:40:a0:4f:30:98:a6:58:0c:b1:8b:8b:cd:82:21:
6a:5c:de:fa:67:68:e0:cb:39:d9:b1:db:a3:2d:fc:79:3d:9a:
3a:4f:f5:ba:1c:ef:42:c8:05:02:e3:be:cc:71:3a:9d:c2:43:
a9:23:2a:8b:b6:6c:3e:8b:16:f0:e1:f6:c5:a0:7d:79:6c:a0:
17:e9:94:d8:48:4e:b2:ad:fb:3f:11:b5:65:b7:fb:ce:7c:6d:
dd:ba:cf:f5:94:43:eb:75:71:4e:37:ab:de:5f:b3:eb:7b:22:
23:3c:b4:77:d4:9f:80:a5:92:35:27:6f:50:84:22:05:11:33:
d6:e5:ab:2a:c0:89:6d:43:30:76:c9:d9:b3:59:e8:01:ae:ff:
04:b7:c3:95:aa:a0:d8:08:fe:49:d6:e4:59:70:7c:07:a0:23:
36:3a:8d:da:6b:cb:79:85:c8:41:09:a0:da:81:a1:38:ef:41:
da:09:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:49:36 2025 by rpki-client