Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
File: zltbNMXCbMP9SuDC5VH3ks7LbFM.mft (raw, json)
Hash identifier: KKK7asWI2sZql7CKnmL/DqF//I3KtcgxVjnRSenqGac=
Subject key identifier: 51:5F:B4:C0:D8:67:57:B4:73:7C:67:05:C0:5A:59:28:C6:B9:90:D6
Authority key identifier: CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
Certificate issuer: /CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Certificate serial: 0194BBCDC789CA803E49E1A47A37304A005D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
Manifest number: 0C46
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: zltbNMXCbMP9SuDC5VH3ks7LbFM.crl (hash: FaXOzbgMo0vnS7LJSyfica8JMsyGb0D/wMtmAKw5W54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:89:ca:80:3e:49:e1:a4:7a:37:30:4a:00:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5b5b34c5c26cc3fd4ae0c2e551f792cecb6c53
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=515fb4c0d86757b4737c6705c05a5928c6b990d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:ab:e4:c1:9c:2e:b8:0c:11:c0:b9:b8:f0:
4b:13:78:dc:a8:ab:68:61:de:f7:9c:f6:33:91:95:
51:e5:9d:be:b7:df:2e:3b:f8:d7:68:2e:77:30:f8:
f3:68:ed:e2:5b:55:8a:6e:d1:d0:28:71:53:7f:1a:
ce:97:95:9f:8b:a4:49:3b:d5:bb:b7:6a:3c:a0:a1:
75:a8:86:7c:95:e1:75:9d:b5:b1:74:dd:58:08:4e:
b8:80:a3:d7:ab:b8:05:87:12:39:ae:b7:67:64:cc:
3a:92:9b:4f:53:26:de:fa:a4:44:6d:7d:29:98:71:
a7:b1:e7:96:60:16:bc:e6:55:bc:df:d9:73:fc:9a:
bc:17:1c:9d:8c:bd:7b:e2:fb:f2:86:6c:8a:f6:46:
3b:22:ba:78:c7:ac:2f:9d:08:8e:23:6a:44:ad:0f:
1c:aa:99:90:13:70:36:4e:9d:c8:ec:78:d6:40:43:
16:ac:ab:69:a3:a8:19:19:71:ce:2c:dc:8f:ae:ee:
a7:f7:13:27:4e:89:72:a8:05:6f:da:84:ce:a4:45:
ab:a7:c6:b5:92:34:26:e0:0a:59:46:f4:52:a4:f2:
27:48:95:a0:71:ae:a4:8f:54:90:99:b7:8e:77:eb:
71:ce:63:16:9a:56:f7:aa:8f:f6:60:ba:0c:f6:1d:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:B4:C0:D8:67:57:B4:73:7C:67:05:C0:5A:59:28:C6:B9:90:D6
X509v3 Authority Key Identifier:
keyid:CE:5B:5B:34:C5:C2:6C:C3:FD:4A:E0:C2:E5:51:F7:92:CE:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltbNMXCbMP9SuDC5VH3ks7LbFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e53aa0-5048-408f-a3a8-09cbf7b242c3/1/zltbNMXCbMP9SuDC5VH3ks7LbFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e3:11:16:ef:41:94:d7:14:08:ca:b9:3b:95:6f:b5:66:c0:
11:dd:67:b5:52:b4:8d:36:f8:69:8e:2e:1d:d2:0b:85:8e:72:
2d:61:ca:1d:99:9b:0e:43:02:e0:18:4d:c6:77:09:f8:11:11:
a6:3b:90:92:47:70:40:24:af:58:ba:e9:05:e8:74:f1:49:93:
bb:65:ac:06:b0:31:9f:f2:46:fb:c0:0d:b6:ca:8e:f9:0b:c7:
a1:5c:bc:71:66:1f:9b:70:39:fe:de:01:d3:fa:31:74:a1:41:
c1:d5:ee:fc:07:18:95:69:5a:39:b7:9b:d6:e8:ad:97:84:92:
b5:cc:98:1c:b6:25:d5:00:56:2d:97:38:39:c2:44:0c:87:42:
dc:e5:60:3e:c2:16:26:3b:bc:e4:af:5d:e4:76:05:71:58:11:
f0:dd:06:c8:07:37:9f:01:35:d7:6a:fb:a6:23:44:ac:14:c3:
ec:09:de:36:9b:e1:c1:09:6c:58:ce:a9:69:d4:da:84:86:28:
fe:fe:60:95:8c:29:95:51:c9:95:9f:d0:29:1f:db:c6:78:44:
47:dc:6a:55:cb:29:03:12:c2:fb:a9:1a:b4:64:0d:bc:1a:5c:
98:ab:19:32:53:ce:98:3a:f0:84:34:3a:6e:3c:98:2a:06:0e:
45:f5:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:19 2025 by rpki-client