Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: qA5MP/OiQUS/89ETGkGA+YwkQ11nulQ1bev78fCrZ5k=
Subject key identifier: CC:CB:15:93:E7:8A:F7:55:81:99:B7:55:F1:61:EC:EA:D1:6F:37:57
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 0194BD17CDC1F8639E2C4191AC834C13AEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 1344
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: c2Y+CSxeaq+I18XOMQZ5/OQcvifDK+LOfyJFg0eoHi8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cd:c1:f8:63:9e:2c:41:91:ac:83:4c:13:ae:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=cccb1593e78af7558199b755f161ecead16f3757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:03:9e:44:64:41:b6:8c:1d:d7:75:69:3f:
2d:6d:fa:23:07:28:87:bf:55:1c:c8:7b:cc:2c:c9:
d8:42:2d:c5:03:40:27:d1:24:ca:71:00:65:42:9d:
66:d7:c8:ba:d1:73:18:92:7d:cd:e1:08:fa:28:95:
9a:01:e3:84:8b:8b:62:b2:e6:8f:fd:53:9e:8d:a6:
de:a4:16:3a:67:a1:f6:e4:40:4b:23:54:5f:a7:2d:
9e:fd:1b:85:f4:7b:3e:57:70:e6:b7:7d:c3:e7:15:
79:a5:e3:5e:ee:00:a4:5f:3e:80:e6:0f:1b:d8:29:
b1:48:56:0a:c8:21:c3:84:e6:6a:76:85:c4:d2:63:
47:d4:0c:25:d0:84:bb:a8:32:2b:54:6f:3e:71:7d:
16:5e:f6:23:3d:c4:8c:a7:4e:41:4d:d2:3a:1e:9d:
43:d3:80:22:aa:b7:08:80:a9:2e:7d:2d:8b:58:27:
cf:23:ad:54:35:8a:a8:43:d5:c6:43:95:57:a5:e4:
a9:2e:3a:76:84:a1:eb:17:22:76:ba:1b:c1:03:9b:
0a:31:2e:00:6a:a8:9f:ae:63:bb:e7:3b:41:4a:ec:
69:93:d9:14:7e:5b:9d:6d:ed:3f:3e:c4:64:1f:04:
17:b1:92:76:9c:2f:c9:82:92:cb:5d:76:9d:29:81:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:15:93:E7:8A:F7:55:81:99:B7:55:F1:61:EC:EA:D1:6F:37:57
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:05:95:cc:19:fd:fa:c2:83:3a:02:1b:e2:5d:99:79:d6:71:
17:2f:86:ec:82:ec:2b:0f:af:2e:8a:d4:fc:06:c8:5b:bc:ea:
7b:fc:65:50:c4:81:56:46:c0:19:f2:bf:02:d9:3f:b1:30:53:
b4:1e:9a:4b:47:a9:3a:5b:f8:09:81:1b:f2:7b:65:10:29:81:
dc:c5:5a:34:0a:34:ab:83:20:a4:d9:df:aa:54:ff:3d:24:05:
a2:ad:1b:59:61:b0:df:90:25:e4:0d:7a:03:ea:89:bd:a4:a2:
f2:b8:18:0e:6f:d5:75:0d:5c:bb:99:8c:c1:94:b7:39:69:ee:
9d:1a:0e:b1:47:f4:c6:68:e2:e3:e0:b5:36:e8:77:20:29:81:
0a:97:92:bf:b8:e0:c9:f3:3d:f9:82:ad:ce:70:dd:bb:8b:04:
62:cb:32:8f:e2:3a:c5:40:05:10:cf:cd:23:c6:63:10:0b:8e:
6c:63:d9:87:83:77:ca:22:e4:4e:c6:97:30:4a:dd:59:8f:eb:
5b:6a:9d:6d:80:12:d4:e9:93:e3:2e:06:59:7d:41:fb:63:9b:
7f:46:b2:7c:06:69:3d:6e:8a:a8:2c:31:31:8e:28:f3:77:ce:
db:19:de:6b:9b:fd:89:95:26:f2:16:d4:44:39:60:0c:48:7a:
55:18:54:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:48 2025 by rpki-client