Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: Y/hTZZWHbA+IW9DtdtdQ4dQ8iCHV1Uxk0nTbXdFB2ME=
Subject key identifier: 2A:94:66:24:C1:98:74:03:FB:DC:FF:E9:A5:23:48:2D:7C:18:DB:22
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 0194BD1797AD98BF7B2CEA09C21B722171A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 09C3
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: MOfCto3Awgj66yMhVSxp01EqJ5wFz95rwjFC85tFm7A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:97:ad:98:bf:7b:2c:ea:09:c2:1b:72:21:71:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=2a946624c1987403fbdcffe9a523482d7c18db22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:63:1c:c3:56:cc:c6:2c:a2:78:94:f1:71:
21:22:6a:7c:3c:77:d6:ff:2c:ff:6c:a4:87:c9:11:
61:1b:81:96:a9:5d:73:b5:23:dc:af:6f:e7:d0:ec:
7e:26:00:33:6c:da:0d:ac:13:d8:39:e7:a0:be:50:
e0:03:8f:02:a2:6d:17:3f:51:53:6d:81:3e:12:2b:
65:aa:c3:01:46:2d:15:3a:36:3a:42:92:eb:83:61:
f1:61:35:fb:16:f4:c1:e4:68:82:79:c5:c6:ca:c4:
dc:aa:a4:6a:bf:f1:79:0d:c1:9f:66:cf:be:d9:35:
47:2d:ca:b4:10:c1:af:ec:cc:6f:16:5c:ff:06:22:
5b:09:d5:d0:ad:fd:d5:c6:8b:7e:61:fd:36:a7:29:
1f:e7:70:dd:fc:f2:dc:52:02:c6:24:0c:31:e0:53:
90:7e:d4:22:70:33:bb:24:af:f6:5e:05:c1:f8:6e:
db:df:17:fe:55:b2:b3:ed:aa:23:22:a1:40:37:e3:
01:f5:aa:a5:30:f5:21:86:f7:1e:31:14:63:be:37:
f7:1e:bb:34:cf:4e:58:68:fc:3b:72:1d:18:97:b1:
85:9f:b0:ef:69:f7:cd:ec:98:bc:42:d7:36:aa:26:
e6:48:6b:5a:cd:dd:21:4d:5d:80:96:e7:d9:ef:3b:
1a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:66:24:C1:98:74:03:FB:DC:FF:E9:A5:23:48:2D:7C:18:DB:22
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:81:e9:f9:e1:7b:8b:ad:82:40:f0:53:11:e3:e8:6a:6b:d0:
bd:0b:05:bd:d4:b8:48:a6:02:c3:c9:1b:9d:0f:f7:cf:16:d3:
da:5b:ca:7e:68:7a:5e:79:13:78:6f:d3:5a:e5:a2:41:12:59:
60:3b:1b:1f:fa:3b:0c:e0:1f:30:34:80:58:af:ba:b9:2e:a3:
07:3b:a4:75:3a:74:b7:db:93:15:aa:f9:f2:49:eb:ca:3e:91:
dc:a8:4d:a6:62:43:44:07:b6:6e:de:60:57:38:6c:fe:44:20:
ed:8d:c6:c4:94:d7:c7:77:88:5f:94:a9:03:21:84:42:c5:24:
a8:0f:4c:f9:5a:40:81:e5:13:8d:a9:51:0d:57:d2:b0:1b:73:
20:15:32:b7:2b:08:a9:1f:a4:f3:96:bb:06:10:7e:5b:44:1f:
48:10:79:8e:b7:d3:97:bb:3b:d8:2c:78:67:dd:07:36:92:f3:
10:55:d1:7b:70:df:ee:44:25:10:24:73:66:5e:cd:81:4e:f4:
4c:c6:d7:14:c0:1d:a4:fd:68:bf:56:05:78:a2:48:1a:7a:c4:
7a:90:90:4c:60:fa:80:a8:b6:2e:d3:13:e6:83:0d:dd:7f:39:
9a:4d:e3:92:1b:8a:53:02:29:34:03:4e:69:ad:05:de:c3:31:
1b:fc:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:35 2025 by rpki-client