Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
File: zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft (raw, json)
Hash identifier: fQ2Ltnum8d8DTO9pyckCghctuCN8fXUMCfX6WhrbsBQ=
Subject key identifier: 6C:D2:08:E3:D2:CD:F3:95:8E:27:F5:85:7A:8A:48:92:9E:72:19:8F
Authority key identifier: CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
Certificate issuer: /CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Certificate serial: 0194BCA9E26818E23F768931A159AD75441C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl (hash: nTjLqBsnNTl3SkldBV7a2AN8kz3UMIOphF7pOjFJOP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e2:68:18:e2:3f:76:89:31:a1:59:ad:75:44:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc84082be96e609d9de9808fbc37866feb4c54b
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=6cd208e3d2cdf3958e27f5857a8a48929e72198f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:2a:dc:02:96:9c:dd:fc:ec:57:02:78:62:
a8:e5:2c:1a:83:d3:91:5e:cc:e8:50:28:10:20:60:
84:25:35:3c:bc:97:fc:03:a2:18:f4:43:80:d0:52:
e6:10:b6:27:3c:1e:4f:65:e7:c6:4b:36:dc:71:4f:
8b:fe:a9:95:1f:d3:5d:d8:a5:53:85:13:fc:0e:ee:
8a:fc:b4:1d:49:56:98:f0:ac:0e:73:fd:b3:29:69:
06:4d:d0:d4:67:4f:9a:f5:3e:66:7d:31:79:41:4d:
98:2a:87:68:c8:7c:ce:c7:e9:0b:51:bb:15:db:c7:
cd:69:a6:c9:cd:dd:01:15:95:da:73:1b:3c:d7:59:
bb:be:dd:e3:14:11:d0:bf:1e:6f:c3:ef:01:36:eb:
ad:61:a9:75:be:5a:7e:5e:c6:25:80:e9:34:77:ce:
75:d1:4e:46:7a:2e:a1:d4:03:0d:d2:4c:b9:60:5d:
d6:f2:bf:9e:b0:fb:b2:99:ca:4d:06:82:eb:5e:2d:
55:12:00:22:a0:f6:31:12:9f:9c:a5:87:0f:43:51:
04:69:76:90:62:66:8e:75:0e:4a:78:b3:c0:a0:0b:
04:09:31:6a:eb:b9:aa:8d:70:94:8a:11:40:5a:75:
ee:51:60:7b:10:01:a5:6c:14:55:96:4c:53:23:62:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D2:08:E3:D2:CD:F3:95:8E:27:F5:85:7A:8A:48:92:9E:72:19:8F
X509v3 Authority Key Identifier:
keyid:CD:C8:40:82:BE:96:E6:09:D9:DE:98:08:FB:C3:78:66:FE:B4:C5:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zchAgr6W5gnZ3pgI-8N4Zv60xUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b7bf94-377b-4400-8b9c-cbf164e8be01/1/zchAgr6W5gnZ3pgI-8N4Zv60xUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:64:74:3e:1e:79:89:2e:3e:55:6e:08:fb:7a:f5:c5:2c:a5:
b6:c4:8e:a0:4b:fb:72:f4:17:60:99:ed:1b:4c:10:b1:45:f5:
b9:65:11:7c:a7:25:d4:50:35:65:f0:b9:60:03:dd:1d:8b:0f:
8b:10:96:68:85:5a:5d:7c:39:1c:33:42:fb:7d:8a:b9:99:88:
c2:9d:e3:9b:f5:59:ec:28:07:64:43:97:d8:f9:61:83:02:07:
5e:7e:8d:54:1a:72:ed:71:73:b7:58:fd:e7:01:21:5a:4f:b4:
5b:69:2d:cf:fa:f2:3b:ba:78:c0:57:05:6f:d2:82:0d:f3:28:
b2:1e:39:47:84:83:32:39:f9:93:98:f2:1c:f3:29:75:ce:07:
d0:13:6f:ee:40:f0:aa:ca:ee:ca:e9:3e:34:cd:0e:f1:a0:0b:
cb:67:33:d5:57:79:2c:79:b4:76:2f:94:0d:91:c7:53:b2:5d:
af:80:69:d9:13:f4:b5:29:a9:5f:92:8f:92:97:7f:80:8b:da:
4d:3b:84:13:a6:9d:5c:d4:f4:5e:ed:9d:54:88:f6:e5:af:e8:
43:a5:78:71:ff:cb:82:f8:16:9f:dd:6a:54:d1:38:8e:ee:79:
97:bb:93:05:34:dc:38:47:37:28:c8:58:10:f1:47:1c:1d:19:
7f:c2:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:28 2025 by rpki-client