Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File: KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier: Mf1G2rP4sZufs+mOGL5e1gGoiSpuMrNpyTQSPCFvQK0=
Subject key identifier: 5F:ED:45:3E:A8:92:7E:B0:3A:F4:96:EE:58:03:F2:67:C0:2B:05:E9
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer: /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial: 0194BD17ACE6BCF9E0034DCD9915AC413DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number: 07E5
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: aAsPWqheLN/yq7jyoXiICROrhOwzXF4XUkI6rl8WfQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ac:e6:bc:f9:e0:03:4d:cd:99:15:ac:41:3d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=5fed453ea8927eb03af496ee5803f267c02b05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:9f:ec:f5:51:75:f1:11:66:c9:6d:e8:15:
a7:d4:8c:87:d9:0b:25:94:c7:0a:c8:42:5b:45:fe:
44:66:58:5a:a2:0a:99:ed:67:3c:05:ce:18:37:f6:
a2:cd:2d:06:28:c9:b3:39:b1:48:a7:ac:5c:1d:10:
dc:1b:b8:58:53:03:49:13:8c:7c:c5:af:9a:0d:e7:
b5:48:ea:c5:20:54:32:f5:98:27:4d:bd:c0:b4:2f:
ff:e7:d4:13:75:e1:6d:71:fb:09:78:d8:44:6a:3c:
d0:a4:74:17:30:7c:79:06:56:01:21:c5:bf:50:ce:
3c:e1:6a:b1:12:2a:08:39:94:67:ef:a6:df:de:03:
89:ec:14:8e:b1:c8:01:73:95:32:55:67:69:b5:59:
bb:94:6f:e6:2d:e9:6d:e0:bd:9a:99:e5:89:5f:69:
8b:ea:59:aa:d3:5b:0e:36:6c:88:58:f4:4d:d2:3a:
d4:ca:c8:65:38:0c:ba:ec:08:84:e1:fd:eb:2d:fc:
23:c2:98:aa:a8:4b:39:e8:8a:76:1f:7b:d4:01:ef:
6b:31:0c:97:9c:51:08:14:c8:a6:7a:b2:23:0c:51:
d9:0f:76:ab:d5:8c:d7:95:c2:e4:c2:d9:ea:6d:3b:
e3:72:53:b3:76:28:b4:4b:c2:c7:44:8e:1b:2d:c3:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:45:3E:A8:92:7E:B0:3A:F4:96:EE:58:03:F2:67:C0:2B:05:E9
X509v3 Authority Key Identifier:
keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:af:ad:99:bd:c2:6c:16:22:2d:32:93:8d:a5:1e:1a:31:d6:
eb:65:e2:c9:4a:a5:77:66:fc:db:06:1a:5a:6f:dc:7e:6f:55:
e5:68:da:4f:3e:2d:d1:36:7d:dc:49:1e:8d:74:05:c1:c8:3a:
2f:bb:d5:f3:fd:ee:65:d7:4a:19:33:56:2a:80:e3:ba:01:d0:
5f:cc:2a:1e:55:c4:91:ec:d4:37:b3:16:57:97:25:0a:c6:de:
62:84:56:70:5f:6f:33:6d:18:0c:1d:8c:0a:49:d9:b5:3b:f9:
b4:78:b0:12:3e:af:c0:85:2f:9a:cd:f9:5d:e3:42:46:c1:49:
49:78:f5:06:18:8e:6d:4e:49:89:28:85:0b:9a:6b:9c:87:a2:
d8:d6:ad:2d:e1:42:df:01:5c:89:bf:72:32:10:f9:d8:ae:d8:
86:1b:55:03:cf:ef:05:ee:86:1b:99:f9:4b:7a:6c:54:a4:f1:
85:b5:51:6a:ad:6f:bb:b3:76:13:d5:c7:eb:bf:c9:41:d8:d0:
91:63:4b:ac:88:7e:dd:bf:ba:06:6f:0c:3a:34:91:65:ef:57:
be:10:9a:c5:80:07:d4:29:08:39:25:79:1d:12:04:77:d8:c6:
a4:b6:aa:3e:00:d5:67:a7:2a:a4:5b:bf:0b:e0:61:11:31:e4:
ef:7d:a6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:21 2025 by rpki-client