
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
File: z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json)
Hash identifier: FVy7Wb+t3i4a6+VruViH/XIOJQ2bVn6aTOkXDRd5ggE=
Subject key identifier: CE:51:13:44:35:14:B8:D9:8C:EF:C4:98:49:1D:12:A1:13:C0:DF:64
Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
Certificate issuer: /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Certificate serial: 0194BCA9D62CE8F979201DFF78DE227149D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
Manifest number: 02C9
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: EEmaxEx4ehPuVrPXfwbe6CKKgQtWqutVx+mopOIx1EY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d6:2c:e8:f9:79:20:1d:ff:78:de:22:71:49:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=ce5113443514b8d98cefc498491d12a113c0df64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:67:2c:b6:8f:28:96:fe:ec:54:cf:5d:3c:
8a:7e:26:3b:8c:50:d9:a3:c6:ce:f8:f6:9f:a4:0e:
d3:40:88:ba:60:8b:8d:f4:1b:08:52:f9:8b:0b:67:
ed:0b:dc:62:89:81:de:4e:fe:e2:38:97:d3:ee:a5:
a3:cf:7e:7a:fd:83:1e:22:0b:03:7c:3c:b5:be:e6:
95:eb:95:0d:da:2a:80:0d:ce:e6:fb:1d:7f:c1:35:
64:ae:02:ad:e9:15:40:38:cb:80:c6:a2:5f:91:d2:
28:f0:2a:98:5b:93:fe:d0:d7:8a:7a:3b:26:54:5a:
ae:41:f6:b9:4f:11:23:49:79:ae:9c:60:23:a0:15:
fe:6a:8a:14:60:37:fb:fd:09:b6:10:ad:50:30:e7:
31:f4:3a:8d:a9:34:ac:c2:5e:50:12:aa:09:8e:40:
8b:22:31:3a:34:e0:ec:8f:f5:01:71:2b:e6:79:b5:
18:67:49:ff:af:d1:b1:53:35:c6:aa:3d:9b:e7:14:
5d:f2:52:4c:6f:1a:65:e2:eb:e6:2b:1e:b1:28:28:
dc:dd:73:1b:4c:7f:77:84:e8:0b:7b:cc:f2:75:7a:
a2:ef:84:f4:e5:02:2b:4a:c7:38:6e:8e:ab:83:50:
17:67:46:32:ee:ba:a1:68:83:ca:c3:43:4f:d1:30:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:13:44:35:14:B8:D9:8C:EF:C4:98:49:1D:12:A1:13:C0:DF:64
X509v3 Authority Key Identifier:
keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:62:26:2c:82:dd:dd:1d:ed:82:70:bb:c7:f8:be:eb:2f:
05:22:e8:03:dc:5e:a3:d7:3d:15:9a:47:46:0f:97:13:27:7c:
1a:65:14:32:01:a9:92:a6:a1:ec:4f:41:86:42:c1:1c:52:31:
2b:c6:68:2e:3a:30:d9:13:f5:94:88:8a:2b:4a:3d:58:11:2f:
b4:51:dd:eb:23:8c:3a:19:38:00:13:2c:c2:b0:83:fd:b9:dc:
b7:d4:e4:d3:db:7e:7e:fe:5d:af:52:2f:cc:c2:b8:52:98:a2:
a7:b9:4b:b5:8e:da:23:58:aa:7d:26:65:00:39:46:e1:3c:15:
ea:90:95:c0:17:68:9a:4d:2f:62:9c:5a:67:15:4f:b5:8d:18:
8b:fd:20:3a:bc:2c:72:b7:3a:f5:21:fd:83:d8:12:0a:9b:9e:
2a:83:a2:06:a8:5e:b0:ca:de:e2:4f:93:a4:96:0d:b6:40:63:
fe:92:90:ce:19:9f:ac:75:67:ac:f6:dc:a3:bb:5e:84:30:57:
c2:a9:43:7a:f5:ec:93:1e:96:2c:03:c1:d3:50:6f:bb:29:b6:
f4:b3:c7:ec:ff:21:6b:ca:8c:dd:53:28:2a:60:c4:dc:97:64:
b8:07:b0:66:70:52:90:38:5d:02:90:77:7e:37:c8:7c:1c:a9:
a5:ab:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:43:22 2025 by rpki-client