Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: 2HjiKc7LzNpCgShfgJt7UCh4FPQYpgAl88OLS0p8acU=
Subject key identifier: 1C:47:8D:24:0A:6B:F8:FF:A1:6A:3F:15:5D:4C:1F:F1:96:E6:A8:88
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 0194BD1772C42346A61C20F39A073DF19D59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 0D3C
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: lFLV9/qQDFh5Y9efyNuDtta7p3X4I8ZGKuRmQWVs6rI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:c4:23:46:a6:1c:20:f3:9a:07:3d:f1:9d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=1c478d240a6bf8ffa16a3f155d4c1ff196e6a888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:46:5d:73:dd:33:ae:75:f8:d3:66:8e:17:
48:16:a2:1c:3a:db:87:14:3a:31:fe:26:ab:9f:6b:
5d:d2:fe:41:ff:aa:2a:f2:71:bc:4b:e1:e9:a7:6f:
21:f2:bc:23:94:85:79:bd:03:b0:5b:1c:17:d0:41:
b2:14:04:56:8d:df:24:dc:ef:49:13:fd:95:a3:a9:
66:b3:7e:67:3c:f4:9a:b1:11:4c:b4:7d:aa:00:b2:
11:56:44:22:af:01:45:19:cb:25:ef:04:87:7d:12:
91:79:23:11:44:bf:35:6e:82:ad:13:2d:a1:88:ba:
d2:20:2c:46:62:31:56:90:e0:00:f3:5d:72:ef:93:
6a:be:87:0d:88:90:dd:a6:b4:60:2f:ad:bf:e1:ca:
af:cf:ce:01:a3:f3:ca:b8:44:f5:8d:6d:20:4b:8b:
27:c0:f3:86:56:29:f8:37:5c:92:d4:20:3f:9e:8c:
9c:21:78:08:16:2a:98:0d:9e:97:08:b4:db:6f:dc:
6e:c0:92:5f:ca:1b:9a:1b:b1:bd:c8:39:e7:ce:4b:
3d:d3:08:89:dd:f7:2a:f4:d7:83:43:ac:2c:c2:4f:
3c:5d:c4:13:b3:42:d3:51:5b:6b:ff:52:88:fe:de:
25:c7:f9:d2:39:76:9e:a2:f6:e7:2c:35:4f:2f:48:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:47:8D:24:0A:6B:F8:FF:A1:6A:3F:15:5D:4C:1F:F1:96:E6:A8:88
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:83:da:e0:56:6b:92:e8:be:3d:0f:4c:22:9d:ab:56:69:6d:
3c:17:c3:1c:c0:c1:b9:be:bb:94:2d:9f:be:54:d9:0e:0a:57:
a2:e5:57:62:7c:d6:fa:ec:e4:fc:4c:5c:40:66:f5:3d:b5:d6:
49:b5:08:0a:86:25:e7:36:7a:3c:2a:be:1a:2c:1c:ef:af:ec:
64:72:76:7e:a4:93:70:bb:39:85:50:fb:78:1e:bd:d2:4e:7e:
00:f6:1f:05:11:cf:97:d3:6d:30:bd:2a:82:b2:0f:6b:23:ff:
83:26:ec:2f:c5:31:4c:1c:36:81:78:75:9e:72:a6:ea:ea:4d:
bc:98:cc:ca:c9:4e:ea:c0:c2:8c:c5:fa:4e:0a:8f:00:23:1c:
37:7c:a3:30:0d:e3:53:d6:e3:16:24:e0:e0:ef:ac:cb:c8:18:
78:d1:89:1a:4d:d1:62:a8:e9:6b:f1:af:82:41:37:fa:ed:2c:
5f:6c:fb:95:62:2f:2b:0e:e0:4c:99:03:9a:1e:d7:23:a8:3f:
19:4e:5e:83:82:5d:9f:42:1c:e5:04:bf:2f:21:34:ad:74:40:
72:44:c8:97:f0:c0:8e:ef:07:dd:5e:a4:23:79:3d:ac:4d:c5:
5d:28:64:6c:46:83:00:80:f0:2c:3d:22:07:c1:3a:3e:17:9c:
69:f6:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:44 2025 by rpki-client