Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: AP4y5ClWOLPLul5rzehNmpQ8pJyGc2daz5VuzTT+kk8=
Subject key identifier: 91:F0:A6:86:95:2E:0C:60:1E:7D:4E:54:5C:17:EE:1B:96:6B:E3:08
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 0194BCA9AF2B2554E5593666459C6F0CD3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 07A9
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: 5LPz8VXlhLPfe4eG0oVqJxPCnaaEua7Vs+YpyYb6b2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:af:2b:25:54:e5:59:36:66:45:9c:6f:0c:d3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=91f0a686952e0c601e7d4e545c17ee1b966be308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:d1:28:1b:62:05:ad:88:ee:40:bf:8e:d9:
95:16:0a:e2:0e:3e:61:f0:75:72:46:6a:5c:72:ed:
4d:a3:66:c4:c9:eb:0b:1b:5e:a8:af:c3:8b:8a:29:
34:8d:d9:48:19:cc:da:d8:9a:0b:60:91:ad:1d:73:
9c:34:1b:a7:e7:39:c0:91:6b:69:69:47:a5:11:d8:
d5:f4:81:e3:56:59:fb:c2:2a:2a:07:29:8f:45:1e:
11:1c:0d:ad:f5:45:2c:a8:11:fa:fe:9e:99:c5:db:
ed:50:a0:ac:75:e6:96:7b:65:6d:3f:9c:97:5d:2f:
10:32:85:bd:c3:38:a6:50:8f:bf:0f:3b:8c:75:9d:
f2:db:13:6d:7b:66:dc:01:c7:1b:55:65:72:8b:69:
ec:1e:ab:2e:9e:93:03:c3:83:19:9c:11:7e:88:f5:
ae:00:d6:b5:af:90:5e:0b:96:3d:32:ba:90:85:e3:
6d:95:43:71:4e:01:ab:0d:ae:00:c0:cb:d2:e0:a5:
87:9e:dc:65:a3:b2:c1:c7:a1:94:ea:f8:52:2e:ea:
27:ac:5a:06:3e:f1:c1:89:9d:ea:42:75:3f:5a:47:
ca:9f:47:78:5e:f1:ca:11:56:2e:2a:bf:64:90:4e:
86:8d:da:5e:19:63:1d:59:d7:92:8d:58:f9:cd:9c:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:A6:86:95:2E:0C:60:1E:7D:4E:54:5C:17:EE:1B:96:6B:E3:08
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b1:46:c9:0f:c7:97:2c:5f:71:13:97:04:88:7c:68:12:96:
07:ce:46:19:f5:9e:30:ed:40:fe:6e:0b:6f:4f:ea:ff:f7:3c:
8e:cc:1d:29:9d:81:5a:70:fa:80:b2:99:de:cb:33:08:46:ad:
f6:45:97:90:08:cb:1a:32:6f:98:dd:df:8a:4d:66:d4:b9:53:
12:44:1a:57:82:1e:96:98:26:8b:8e:0e:89:bf:23:31:e1:9b:
a7:85:78:5c:bc:79:b2:01:4e:ef:4b:38:22:24:c1:16:84:c8:
35:2b:0b:aa:c8:5e:dc:4b:50:a6:55:eb:9a:10:5c:18:e2:2d:
c3:1e:41:b5:fc:2b:93:ce:78:bf:b3:8e:05:77:05:25:dd:b3:
58:56:bb:86:f0:d8:9e:12:40:8e:0d:cd:36:73:9d:3d:f7:6c:
9b:72:03:e9:88:4e:f7:03:68:5f:9f:4a:3d:57:29:9a:ed:21:
4f:4b:10:b5:a4:5b:4b:31:1c:4b:25:f1:59:75:1c:72:2b:1f:
3a:f9:61:e6:54:c2:e4:44:11:31:e0:7e:34:41:d0:31:51:a7:
9d:34:5e:e9:7f:49:88:dd:a7:d8:a6:28:36:45:95:8f:42:6c:
b4:bb:2d:f3:cd:64:8c:50:62:54:39:ed:5b:50:8a:16:c7:6d:
4e:17:7d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:17 2025 by rpki-client