Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: lbiR33slIXtPC+efT7Fzz0umsu9hsn6jUnMWq5gNmFg=
Subject key identifier: 53:6F:C6:65:D2:89:1B:9C:A0:5E:6E:3E:59:CC:37:40:AA:79:04:2C
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 0194BD1746BD8D35C3A0421ED1ABC289A02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: ZWVC3lkszRf+24jW9e2MaFjoLZ+jL0fr5vjiTBgvHXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:46:bd:8d:35:c3:a0:42:1e:d1:ab:c2:89:a0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=536fc665d2891b9ca05e6e3e59cc3740aa79042c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:01:4b:fd:72:9a:45:1f:6e:e9:43:02:99:
af:81:11:59:dd:85:61:58:c3:1c:6e:7c:d0:4e:0a:
20:a3:1e:f5:58:7f:7c:03:26:5e:7b:5f:52:62:b1:
19:f0:8b:45:33:57:8d:be:c2:c8:bb:be:2d:50:41:
2b:c8:95:a9:b3:fb:5f:4c:73:29:85:48:8c:43:87:
e6:df:fc:04:75:54:d7:9c:56:11:d6:ac:c2:21:02:
79:5f:0c:33:d5:75:43:a0:cf:ac:e5:d2:df:f8:55:
53:fd:97:b3:27:9c:73:d8:ec:18:51:f7:84:7e:d2:
7e:d2:e9:fc:82:55:67:8d:42:f4:dd:ae:f4:7e:82:
e6:0f:1e:3b:76:0b:dc:78:ef:86:68:ae:38:83:9f:
6b:df:7a:e0:67:b0:e1:84:b2:d8:22:c6:a0:b3:33:
c5:53:75:a5:0a:84:a2:97:c7:cc:fb:c8:c7:75:c7:
8f:7e:a2:8c:d5:e9:0d:76:89:6a:4f:07:37:a0:89:
8b:86:75:ff:32:6d:3c:16:43:9d:44:3a:59:93:c8:
14:ab:33:9a:ae:98:16:cb:53:f9:d6:fe:94:d4:43:
e1:af:9d:5f:b3:e9:10:6e:d8:76:26:c4:eb:b7:6d:
ce:78:18:d0:bc:f5:cf:0b:fa:c4:ef:ee:1c:79:65:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:C6:65:D2:89:1B:9C:A0:5E:6E:3E:59:CC:37:40:AA:79:04:2C
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:34:5f:8e:94:5e:6d:bc:4f:18:d0:1c:4a:91:da:af:3c:af:
ca:c2:55:81:f1:38:ec:a7:cc:95:81:7f:33:05:e5:ef:9a:b7:
1e:e7:e8:1f:6f:9c:33:33:36:f8:5f:9b:be:6c:46:00:cf:ae:
5d:57:35:6c:03:62:45:ce:09:86:e4:a1:56:83:36:fe:3c:b6:
8c:3d:4d:77:0e:49:6d:83:54:c3:e6:4c:f9:85:cf:e9:58:b4:
e7:77:df:4d:5f:3f:a1:4a:3c:0f:7f:fd:ca:4c:dc:61:0b:6b:
ce:b9:8e:46:01:c7:aa:59:92:aa:31:0b:aa:19:24:c5:9e:51:
78:99:15:be:c6:33:31:5d:f8:cc:42:20:00:b6:aa:b1:b8:71:
9c:39:9e:05:09:5d:5b:41:44:de:95:e7:0c:db:ba:28:1e:4c:
bf:d1:f1:dd:8c:5e:3c:aa:06:31:13:14:dc:2a:5e:d6:64:be:
93:c5:fe:40:4f:e7:10:54:5a:31:01:00:fb:26:b3:fd:43:48:
95:7f:ec:ec:c3:de:4e:0a:71:e3:53:3e:7a:eb:d7:72:59:14:
08:9a:bb:09:ca:66:e4:88:45:e5:2b:db:d7:22:96:6f:cd:0e:
5c:3a:31:38:57:33:fc:93:53:2c:f0:cd:b5:f0:42:15:b2:b2:
27:00:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:32 2025 by rpki-client