Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
File: zZ2srF97QCrwm1L-aJFlS5NJmsU.mft (raw, json)
Hash identifier: RTezYGG3/yY1Ht/wJZeJNjhZcg+tZe0KAN1SF70ZreU=
Subject key identifier: 19:27:B6:05:B6:13:D5:61:98:2A:36:90:F9:D4:06:09:63:92:F3:A6
Authority key identifier: CD:9D:AC:AC:5F:7B:40:2A:F0:9B:52:FE:68:91:65:4B:93:49:9A:C5
Certificate issuer: /CN=cd9dacac5f7b402af09b52fe6891654b93499ac5
Certificate serial: 0194BC727EF662B18D8D295F425F7D03C7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
Manifest number: 073F
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: zZ2srF97QCrwm1L-aJFlS5NJmsU.crl (hash: hXmUZWxY8HmG4JARk/hQwivEplNX2ypiWLDlZLlFcyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7e:f6:62:b1:8d:8d:29:5f:42:5f:7d:03:c7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9dacac5f7b402af09b52fe6891654b93499ac5
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=1927b605b613d561982a3690f9d406096392f3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c2:35:b9:b9:ff:64:a8:e4:b5:b1:e2:f2:1b:
30:4e:67:8e:b2:e0:71:1f:06:62:8e:d1:fb:95:23:
2c:94:dc:f9:2d:af:e3:e0:af:3b:3b:1d:49:3a:68:
03:ce:6c:d1:46:f7:04:20:4b:74:2c:58:39:4e:92:
be:5e:01:d3:a3:92:d2:64:ab:ee:df:24:e8:b4:91:
33:c3:de:fd:73:18:2c:d8:64:64:79:36:58:b1:b1:
93:92:57:35:38:99:68:b9:5e:5d:4a:8c:d7:ce:cd:
d3:05:25:2e:96:5d:65:4e:fb:67:0f:aa:ae:39:a4:
49:a5:2d:07:d7:d3:da:6b:96:0c:04:e2:d1:ab:82:
38:c4:4e:b6:67:cc:4a:0e:e5:d2:27:b2:a9:12:7d:
d1:67:74:b7:11:8a:2b:3e:55:31:5c:82:0f:22:93:
96:55:73:b2:28:11:26:1b:1d:63:61:ee:1f:bd:91:
3b:20:9c:3b:63:21:6d:66:bd:35:28:76:fe:5b:47:
f2:d5:26:6d:8c:84:e7:e3:d4:12:ee:eb:c2:79:2d:
f7:2d:27:48:35:e5:e5:28:47:6b:28:f7:d7:d0:9a:
bb:ee:59:74:c5:a4:f7:79:9b:e2:be:d2:ac:87:20:
fb:f6:5c:a4:f6:a4:2d:57:9c:dd:3e:81:6b:37:00:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:27:B6:05:B6:13:D5:61:98:2A:36:90:F9:D4:06:09:63:92:F3:A6
X509v3 Authority Key Identifier:
keyid:CD:9D:AC:AC:5F:7B:40:2A:F0:9B:52:FE:68:91:65:4B:93:49:9A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ2srF97QCrwm1L-aJFlS5NJmsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/27789c-f506-4d47-ba86-fb70217fe603/1/zZ2srF97QCrwm1L-aJFlS5NJmsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:01:74:95:38:54:39:dd:40:ae:5f:58:92:34:12:e6:ed:b4:
fa:d9:ea:2f:4b:37:b9:d9:2f:fe:47:76:5a:30:3e:1a:90:8c:
bd:3b:c1:a5:a1:84:de:95:6e:74:94:52:38:e7:be:2a:83:b4:
8c:35:da:d8:6a:6c:a4:d3:c6:0e:98:95:31:35:9e:21:97:6f:
99:b5:2d:f0:f6:f6:59:bd:d0:81:37:ba:98:74:e4:30:ff:5e:
23:e8:31:0d:dc:32:a8:66:e0:5a:48:bc:4e:ef:ee:40:02:43:
27:44:88:e4:21:27:95:8a:57:23:d3:cb:c5:b0:90:4a:0a:31:
9b:7a:87:be:8c:55:ac:40:03:94:6d:54:b6:72:87:59:25:2f:
53:58:a1:8a:75:34:ef:71:d5:e8:75:e6:b1:71:de:8a:01:30:
d8:36:12:63:8a:a8:e0:f5:55:aa:2c:15:5c:00:d6:8d:e4:86:
0e:c3:75:2b:41:cf:03:02:9c:30:76:dd:bb:f6:e0:18:83:db:
20:3e:90:55:a1:17:4b:7c:6e:0e:b5:71:ad:32:11:c0:c8:fc:
16:3d:a8:d0:37:19:92:03:11:91:c6:d4:ec:c1:1b:13:f5:19:
92:84:7f:58:10:6d:88:d8:8c:63:48:1e:f7:20:1d:62:70:31:
7b:c2:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:58:52 2025 by rpki-client