Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
File: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft (raw, json)
Hash identifier: SDF/8VMby64Za5FpwxTsS0khQa9lxs1GCa3XfqwLGSU=
Subject key identifier: A7:1C:0E:0A:16:8C:B5:E9:04:E6:C0:14:A6:71:21:E6:73:73:DE:AE
Authority key identifier: D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
Certificate issuer: /CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Certificate serial: 0194BBCDE6A11D52CCF44A1A56BAD5428A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
Manifest number: 0EC5
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl (hash: 3iDPvoeH3bS5I3nqiBZakq2whZI4HocMuGaL/+3VO38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e6:a1:1d:52:cc:f4:4a:1a:56:ba:d5:42:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=a71c0e0a168cb5e904e6c014a67121e67373deae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:f3:58:68:32:c8:a8:82:c7:37:c5:2c:da:
16:18:ab:96:bf:4c:7d:ae:a9:85:7d:60:b5:de:f6:
a6:ad:70:1b:e0:8e:9c:68:45:bc:0d:91:44:c5:ab:
14:1a:58:53:79:7f:bd:2d:60:77:82:17:d9:68:21:
ca:38:f0:e6:53:5c:0e:1a:3a:89:ed:ca:fb:a0:ca:
5d:e7:c9:fa:29:1d:9d:2c:aa:b4:a0:93:a0:e3:7a:
b7:12:85:b9:76:13:83:ba:6e:09:d8:8b:00:d5:2e:
e3:06:2c:9e:a0:75:18:47:5b:5f:e2:ea:44:e7:49:
76:f7:0c:06:73:fc:70:3f:52:07:d0:3b:9d:9f:38:
3e:40:06:08:3a:e1:71:79:5e:d8:40:f0:2a:b1:e2:
f1:f5:12:63:f8:ea:79:e2:ae:bd:08:8d:d7:79:93:
c3:14:a3:91:9f:3f:80:ee:54:2f:ba:b2:ed:15:bb:
38:eb:40:6c:7b:fb:c5:13:0d:1a:a3:e4:5e:a6:0f:
39:39:df:f2:0c:84:dd:34:bc:4e:ed:6f:28:6d:30:
a9:8d:f2:99:15:59:d9:f6:7a:60:32:41:92:8b:44:
48:dd:4f:20:0d:61:29:9a:af:46:f3:e8:b4:06:83:
68:b5:47:05:99:47:e8:53:45:34:2b:f7:07:ee:68:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:0E:0A:16:8C:B5:E9:04:E6:C0:14:A6:71:21:E6:73:73:DE:AE
X509v3 Authority Key Identifier:
keyid:D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:5a:f0:ac:41:a2:4c:5f:de:07:dd:3f:1a:3b:09:b6:f6:
ba:6c:e4:34:d9:4e:40:d5:fd:d0:c4:4b:76:6f:be:14:a3:ed:
2a:20:04:b1:60:11:1c:fb:74:c6:e5:ed:09:87:77:ee:ba:a0:
99:70:16:33:32:a2:c4:ae:8b:79:fe:35:bb:89:2a:41:f1:9c:
39:63:70:f8:77:b3:83:a0:f3:49:75:60:fb:ae:a3:8a:0e:3f:
d3:08:bf:46:6d:42:88:b2:15:b5:0e:8c:4e:bf:df:ff:a3:4c:
66:8e:4e:57:5f:a6:92:4d:0a:c1:f9:90:25:ed:2c:dd:b5:2d:
79:03:ec:a3:89:97:43:19:ef:87:65:02:5b:0f:3a:a9:34:c6:
ed:7c:25:05:bf:2c:fe:5f:73:70:2c:40:e0:df:1a:dd:7e:42:
7c:db:ce:ea:a2:d0:e3:ef:ea:57:55:f4:c1:a7:8b:ec:ed:fa:
2e:f6:e2:bf:b3:0c:21:59:40:d9:62:8d:73:46:99:87:91:c2:
f0:22:cb:6c:0d:9f:75:f0:49:05:1b:d7:6e:3a:e6:c0:e6:e9:
5e:ad:e5:a0:17:53:a5:4c:92:64:24:92:61:42:0a:43:f9:5b:
cd:92:ac:0b:99:ed:b8:1f:ca:22:b4:f5:26:ba:2d:f6:47:6b:
48:a4:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:49:33 2025 by rpki-client