Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: bLhyGnzE2uRRXGRdYgeUB7WMwE80O2wpOJGm8CKEdGs=
Subject key identifier: B8:00:AC:0F:CD:89:FB:9E:B1:A7:73:F1:99:E3:95:BB:05:FB:6C:A5
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 0194BC3C4F389A525A865579E50FAAB79FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: 8fFhT2kTClSawe9fpcni6Py4c8doGVHoByS6WBEWzQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4f:38:9a:52:5a:86:55:79:e5:0f:aa:b7:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=b800ac0fcd89fb9eb1a773f199e395bb05fb6ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:69:2e:56:82:39:b8:88:20:8c:7f:dc:2f:
e4:6b:cd:fc:67:9f:70:86:f3:27:b2:14:29:f5:10:
25:3b:6f:55:ba:0a:d5:cf:da:93:aa:41:b0:4c:ae:
ca:70:f5:c4:7f:0b:91:ac:b1:02:50:e3:c9:77:1d:
bf:96:54:fd:c1:bd:0c:4f:bd:44:07:d3:0e:a9:e1:
d8:2a:98:4c:52:df:67:72:3b:3c:7c:50:53:ad:07:
c6:e7:e2:4f:8e:fc:62:00:27:9e:d1:04:69:c4:3f:
f3:6b:48:91:04:51:ce:79:7d:94:da:08:81:20:e9:
26:1d:3f:c7:6d:51:d1:0d:aa:14:6a:f0:f3:09:a4:
5d:01:82:54:72:7d:62:3a:ca:ea:a4:4a:19:de:91:
ff:16:70:2e:eb:97:38:c5:94:ef:3d:23:90:96:97:
c0:51:91:ac:a6:02:76:e1:15:2b:c0:65:53:dd:c6:
36:2a:97:59:cb:49:28:6c:e4:97:d1:48:08:28:f1:
23:c7:9d:97:11:d2:f0:c0:81:de:4e:bc:85:dd:54:
1a:e6:cc:b2:d6:75:a7:c2:dc:a5:45:c3:c4:f0:46:
b8:b6:f9:b7:4a:2a:d7:9f:83:1b:5d:77:9a:9b:17:
66:04:5c:bc:6c:07:31:89:4f:79:29:f5:4b:53:1b:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:00:AC:0F:CD:89:FB:9E:B1:A7:73:F1:99:E3:95:BB:05:FB:6C:A5
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:81:0e:c6:9d:89:8b:67:e5:a5:9b:69:e1:06:de:8d:54:fb:
af:dc:68:7a:dc:a8:2a:dd:e0:0d:4a:cb:84:34:f3:8e:32:17:
91:aa:7a:65:4d:76:59:92:8e:39:60:ce:78:65:86:29:66:51:
3e:f4:79:95:d9:3f:c1:4f:93:b7:10:98:dc:2e:39:20:08:87:
30:d7:d5:88:fc:35:41:92:09:e8:39:34:15:38:fa:ef:c1:eb:
57:a7:14:1d:90:8a:6a:b7:fa:09:95:ff:05:27:46:b6:37:ca:
3d:b5:d0:d2:37:65:e8:1c:97:52:54:10:95:a3:f6:d6:96:90:
a6:a3:e8:ef:68:9c:2a:12:26:c7:56:15:90:d7:6e:0c:6d:db:
c7:6c:01:89:95:9f:33:87:67:76:57:dc:e4:ab:03:c7:5a:62:
6e:84:82:6d:44:df:35:77:ef:00:95:25:ae:79:1e:63:75:45:
68:db:75:cf:e5:d4:0c:54:72:75:d3:26:6c:64:15:9b:32:cc:
ba:3b:7b:4f:68:d3:43:6a:2a:13:79:ee:35:36:cd:7e:57:b9:
79:27:ac:28:5b:e8:15:45:8d:b0:a7:44:0f:4f:23:99:94:15:
ac:65:1c:cf:93:d7:2a:89:bf:3c:a9:be:39:e2:27:84:7b:af:
c9:8e:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:55 2025 by rpki-client