Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
File: zRvlrhITa5bNnXilwkykct6Ixlg.mft (raw, json)
Hash identifier: 6pClVZsETyAphLqzexhHp1RRkpr4NC213ICzQbu33o4=
Subject key identifier: 40:9D:89:24:75:AA:2C:D6:E1:70:94:EF:E5:76:8B:3A:CA:BC:20:4C
Authority key identifier: CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
Certificate issuer: /CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Certificate serial: 0194BC72D065BE598DBEEF2F04BA88199C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
Manifest number: 065D
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: zRvlrhITa5bNnXilwkykct6Ixlg.crl (hash: zFEDunyNCZsvtUbdWsWLAaLvr698iRnrM0+IpkaXRr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d0:65:be:59:8d:be:ef:2f:04:ba:88:19:9c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=409d892475aa2cd6e17094efe5768b3acabc204c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:bb:3e:6c:57:8e:c2:7f:b8:e3:d2:b5:24:
6b:54:87:5b:00:6d:4e:3e:28:55:d9:16:d3:30:de:
2f:07:4c:98:d4:75:83:54:02:a2:2a:f3:73:50:28:
68:d0:ca:53:7b:06:3a:91:fb:7d:a7:7a:d2:76:c3:
8a:aa:0e:85:d4:a2:e2:bb:03:42:4f:b6:22:1a:60:
37:02:e8:28:25:3b:88:76:13:29:45:26:c2:b6:8f:
51:c3:a4:d2:ef:8e:18:45:dc:e0:3b:3d:28:96:87:
1a:cc:f2:aa:0b:d0:30:50:eb:2f:28:7b:85:c9:6a:
7e:ec:d4:9e:69:47:fb:4a:d2:f3:61:91:20:84:34:
da:16:95:86:8f:48:bf:9f:a7:16:53:db:38:44:80:
57:7a:13:81:a8:87:0d:d7:3a:e9:51:0d:6a:f5:22:
52:a8:00:25:a5:b9:ff:9c:f7:b5:b9:73:f1:5e:84:
3b:45:79:1e:1c:51:24:00:2b:b1:54:4e:b8:f7:e8:
8a:03:3f:99:99:c6:83:25:65:8f:d0:00:e7:e8:6c:
78:90:e6:9c:49:f0:8c:49:b0:21:12:cf:89:d7:61:
0e:cd:a7:d2:b8:f5:59:60:ad:97:84:ca:7f:56:52:
a9:3e:7b:9c:d4:5f:b2:8a:1a:80:bc:44:52:13:e4:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9D:89:24:75:AA:2C:D6:E1:70:94:EF:E5:76:8B:3A:CA:BC:20:4C
X509v3 Authority Key Identifier:
keyid:CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:18:1c:c0:58:59:cc:60:29:6b:13:15:62:51:5e:09:bd:f7:
11:7a:ab:3b:37:83:f1:9b:a1:3f:79:69:96:2a:98:f4:89:7d:
68:29:94:aa:b9:de:37:88:9c:3d:10:43:f7:72:7c:60:e5:85:
bd:ca:5a:4d:7d:e1:7b:34:13:b9:25:3a:24:97:46:7d:e0:15:
57:25:1d:f8:66:74:9d:0d:c9:7f:8d:98:55:2a:f0:a9:48:d9:
70:0f:3d:ab:5c:2e:5e:8a:ee:31:35:20:a2:6f:00:07:b1:4b:
97:c7:81:09:cb:90:9d:35:8a:a0:ed:1d:12:27:52:92:15:b3:
d7:74:12:1c:7c:86:cc:76:1a:f7:8b:84:eb:f2:98:2e:64:7b:
0f:e2:2f:44:ff:27:b0:73:c1:71:19:f7:e6:12:a4:94:83:77:
ee:7a:39:60:37:e1:56:ec:a8:e7:8f:61:06:31:95:7a:f1:67:
9b:49:7d:d1:24:fe:2f:3e:66:1c:0b:dd:9f:79:c6:a4:2f:47:
a3:fb:0c:e6:a2:6e:da:50:f1:6b:76:04:e4:9f:fa:73:74:36:
76:96:b5:8f:99:ff:0c:cb:8d:0a:c6:aa:2a:6b:07:4d:e3:c6:
3a:ec:8b:86:3d:1b:9f:3f:1d:00:b5:54:3d:53:03:e4:78:e5:
84:20:d1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:14 2025 by rpki-client