Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
File: zEH27mce6lNY5xzn_BHJNsw3bGE.mft (raw, json)
Hash identifier: ZHMWzhfWSOOIpDDGzAAKEeZ8bzM8QV4efb4PcbQvQ5I=
Subject key identifier: 03:8F:64:F5:B3:4C:60:94:75:68:F1:45:1B:FE:60:64:E1:AD:0F:CF
Authority key identifier: CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
Certificate issuer: /CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Certificate serial: 0194BD17B5CF60A04E03DF05BEF27866DBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
Manifest number: 0E57
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: zEH27mce6lNY5xzn_BHJNsw3bGE.crl (hash: +cz3z2Mgyn1zBcEMb6GVhcWxjK3zlFacb/DSXLorPkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b5:cf:60:a0:4e:03:df:05:be:f2:78:66:db:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41f6ee671eea5358e71ce7fc11c936cc376c61
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=038f64f5b34c60947568f1451bfe6064e1ad0fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:b0:ee:d8:7f:d1:bd:2e:51:63:c0:bf:8d:
c2:e6:06:cb:df:fb:78:5e:74:ce:1e:27:dd:4e:f5:
d2:9c:c4:40:75:b1:8e:ff:3f:78:c8:7e:35:8c:c6:
2f:cd:d2:af:da:30:35:55:5e:b4:12:44:01:11:0b:
9b:13:62:86:43:aa:4c:00:ba:f1:6b:7d:11:ef:3c:
02:6a:52:d9:94:37:08:53:56:09:7e:5c:e0:d7:bd:
2c:73:0a:f8:d8:77:5b:04:6d:d3:b2:3e:40:9f:92:
0a:9a:13:35:f1:ef:56:63:5d:66:70:03:63:47:fe:
c3:5c:22:68:a7:09:02:8e:49:72:b7:27:2a:61:8c:
9f:bf:e4:1c:38:e9:a0:f0:f9:b7:b2:20:7a:5d:38:
26:3d:ce:33:99:c5:4d:e7:e1:8b:fc:68:22:95:f2:
85:de:9c:38:5c:ff:40:16:ba:1c:6c:1d:8d:ba:45:
64:47:f4:fc:38:1e:da:47:6e:4f:e8:e9:aa:25:1a:
fb:f9:85:69:33:7f:b2:ab:d5:f4:3f:78:bc:c4:9d:
19:fd:1e:28:ef:93:51:7b:e1:19:31:0d:95:18:a0:
f3:6c:a1:7d:bf:47:56:d8:e6:4d:99:11:8b:7e:5e:
ec:9c:45:b6:4f:3d:a0:16:94:a2:6c:a6:d7:d2:f0:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:64:F5:B3:4C:60:94:75:68:F1:45:1B:FE:60:64:E1:AD:0F:CF
X509v3 Authority Key Identifier:
keyid:CC:41:F6:EE:67:1E:EA:53:58:E7:1C:E7:FC:11:C9:36:CC:37:6C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEH27mce6lNY5xzn_BHJNsw3bGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8857a3-da1e-4549-aec0-6f2e79d827e0/1/zEH27mce6lNY5xzn_BHJNsw3bGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d8:95:39:ae:44:a0:32:d0:d5:81:9a:a1:0e:5f:18:15:2a:
46:5d:82:1d:b6:8e:03:85:20:0b:c6:c1:8d:fe:ec:03:30:ce:
35:92:e6:56:b2:c0:ac:87:02:92:90:63:81:e1:5e:84:3f:9a:
98:34:a1:21:16:22:50:db:ff:db:48:ca:46:70:95:de:18:f0:
c4:e0:4d:f6:aa:b1:ee:cd:12:c7:50:70:0e:3a:d7:0a:d3:04:
4d:a0:6d:5b:0a:11:5f:c9:7b:4c:6c:78:a9:bc:9e:3a:bd:e1:
72:71:57:28:22:c0:63:07:e9:b5:77:94:63:b6:ad:98:55:0b:
eb:85:42:92:7e:54:b4:b3:b8:4b:be:66:01:f2:7b:2e:c3:1d:
c4:16:1a:20:31:86:e1:ce:9c:b8:4a:d5:51:03:bf:d3:73:87:
d0:d5:5d:d3:95:46:4c:08:e8:3e:a2:e3:93:e2:52:db:4f:20:
0d:68:64:c9:dd:44:27:68:d4:1a:ee:56:cf:02:14:02:cc:7d:
36:ad:8d:cf:78:c5:be:88:82:70:f0:fe:54:04:b1:83:73:16:
bc:af:e8:04:0c:a2:09:a6:ca:8d:62:26:93:33:c3:a1:80:4d:
39:13:8f:e6:61:e8:b2:2f:26:15:69:93:44:78:4a:55:97:80:
b6:a1:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:17 2025 by rpki-client