Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
File: zkyVbVLdh2NjwhME-cAl8H1fJjE.mft (raw, json)
Hash identifier: ewgu67bHg7KeSJ6Y4bRhQRx0gKXL29inWHmTbRecgCw=
Subject key identifier: 08:0B:2E:88:68:A2:CA:E1:A5:A6:02:CB:B1:C0:96:96:1D:00:A1:A0
Authority key identifier: CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
Certificate issuer: /CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Certificate serial: 0194BBCE696A5021A988E35D5A1857A0A892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
Manifest number: 03A3
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: zkyVbVLdh2NjwhME-cAl8H1fJjE.crl (hash: RAd2mjxUg46X/9YJKPs7tbxpQEIzTAbgK6kIbC0GxaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:69:6a:50:21:a9:88:e3:5d:5a:18:57:a0:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=080b2e8868a2cae1a5a602cbb1c096961d00a1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:39:91:f8:24:7e:4c:8a:bf:28:82:4f:68:
8c:53:9b:43:1f:0d:e7:d1:66:1e:35:83:b9:7e:a2:
31:86:95:4b:ee:00:81:aa:59:17:a4:27:ab:1b:fe:
c6:37:76:17:eb:5c:a5:8b:3f:a3:e2:48:dd:29:eb:
b9:d6:3f:12:49:9d:8f:1a:1c:ba:6a:74:5e:7f:68:
4a:b2:4c:82:20:67:53:54:09:46:59:cc:8e:75:aa:
e3:21:6e:5f:44:dd:2c:c2:8c:23:cd:8e:6d:9c:17:
01:74:6c:4e:ae:7f:1c:f1:40:16:9d:8a:f2:dc:5c:
c6:16:c0:c9:27:2c:a0:11:db:74:ed:ff:07:23:53:
ae:cc:75:e7:7f:79:1b:eb:a3:6e:7d:13:fd:79:75:
cb:9a:39:12:48:40:51:a3:6a:f3:cf:ec:3e:08:27:
78:c2:65:9a:67:63:d8:56:38:a2:07:2d:5b:9e:18:
72:be:f4:b1:2d:3e:07:6d:0a:79:78:f8:7e:26:a9:
f7:d5:5b:93:10:a0:a7:ae:b1:fd:27:89:d2:b9:87:
9b:16:6e:a0:e9:3a:e5:ce:6c:2e:f3:16:6c:e5:9b:
75:c7:33:19:66:0d:39:b0:dd:81:e1:55:6d:89:ed:
74:29:36:61:0a:70:5c:04:f4:1f:3a:33:9c:8e:40:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0B:2E:88:68:A2:CA:E1:A5:A6:02:CB:B1:C0:96:96:1D:00:A1:A0
X509v3 Authority Key Identifier:
keyid:CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:69:3e:10:ae:91:96:50:24:70:8b:9a:b5:99:85:3b:24:69:
d4:13:70:23:f4:6a:2b:00:7a:34:5c:75:86:e7:36:7d:f1:f4:
88:d9:2a:6b:3f:5f:97:f7:15:b6:0e:5c:4a:33:6c:eb:78:24:
d6:a7:d7:4f:02:db:c6:fb:1d:6d:6a:bf:42:ef:73:c5:05:00:
ab:d2:ec:53:f2:56:00:a9:f7:fa:00:8c:e6:c5:4a:70:9a:69:
02:ad:c7:2b:b8:3d:2d:f1:28:6d:34:9d:55:b8:25:59:e6:89:
0d:1d:f6:e6:37:05:7d:d6:97:27:e7:30:9f:6b:8f:88:ca:c8:
b8:96:93:a6:ca:6c:b9:c4:04:4c:08:57:23:e1:b5:09:be:ae:
96:6e:45:5c:e7:ea:43:90:08:e6:95:ce:d5:fe:13:e7:98:40:
7c:18:5f:fa:9e:b7:61:a4:04:7d:b0:cf:7b:dc:0d:9c:45:c9:
c3:a7:50:2b:ff:6c:ef:0e:2f:47:89:f4:dd:81:0b:34:5e:32:
96:32:c3:4b:6b:46:ed:40:bc:11:26:d1:56:4e:9e:d3:45:1a:
2b:27:63:28:f5:25:c6:36:ac:c0:fe:ef:9c:38:db:58:9f:ea:
b1:62:c7:5c:26:c2:30:a6:b9:08:f9:31:4d:ea:67:62:36:7b:
d3:64:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:42 2025 by rpki-client