Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5813e4-4861-4630-bfdb-37f999cece23/1/ZFOB6enwr6NsKmagd8odV50ikr8.mft
File: ZFOB6enwr6NsKmagd8odV50ikr8.mft (raw, json)
Hash identifier: Lw49lKAxWHGIvZPsPoG8Td0Z1vdgZ9ylY+UaUfvHcf0=
Subject key identifier: FC:36:8B:EC:11:E9:6B:4A:D3:09:51:28:B0:74:2B:13:3D:9B:B2:92
Authority key identifier: 64:53:81:E9:E9:F0:AF:A3:6C:2A:66:A0:77:CA:1D:57:9D:22:92:BF
Certificate issuer: /CN=645381e9e9f0afa36c2a66a077ca1d579d2292bf
Certificate serial: 0194BBCEE4BDE0FA71FC53757CF68D381963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFOB6enwr6NsKmagd8odV50ikr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5813e4-4861-4630-bfdb-37f999cece23/1/ZFOB6enwr6NsKmagd8odV50ikr8.mft
Manifest number: 1245
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: ZFOB6enwr6NsKmagd8odV50ikr8.crl (hash: 6JA+O61dpPlRNj7kMLsF7wx7LgvWv9TYGRukIlQE7eQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e4:bd:e0:fa:71:fc:53:75:7c:f6:8d:38:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=645381e9e9f0afa36c2a66a077ca1d579d2292bf
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=fc368bec11e96b4ad3095128b0742b133d9bb292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:3d:20:72:5d:35:57:69:1c:f9:7f:a3:1c:
f8:ef:29:3c:89:2e:60:5f:ed:4d:23:cc:53:a6:63:
d6:21:be:60:f2:4d:fc:b5:b1:ac:b3:3c:4b:19:7a:
99:47:42:38:59:cf:dc:d2:0d:1f:68:a9:cc:9f:bc:
c2:d8:a6:83:a8:b7:b2:b9:45:95:a3:fc:b0:ce:b3:
e3:2e:5e:a3:e2:b0:a4:5b:0d:98:d2:58:47:54:eb:
c2:35:c2:d4:ee:dc:b0:02:4e:36:d1:2b:16:60:f9:
2a:99:08:a1:0f:6f:f2:3d:0c:89:95:a4:f8:11:f6:
38:80:41:f6:38:cd:8f:df:46:f5:95:62:b0:96:c8:
e7:93:f5:19:05:89:43:86:e6:75:23:e6:dc:45:1a:
9d:21:54:2c:94:b0:5c:1c:a9:ef:8a:5f:69:0d:ae:
71:b3:58:f0:ba:b0:e3:ed:3e:85:bb:be:f7:f3:fb:
20:f9:93:e5:82:c0:d5:80:98:80:c6:06:db:6e:84:
86:a2:27:da:a9:be:49:16:ce:15:9c:14:2b:2e:d7:
80:f8:89:6f:69:3f:3f:e9:3b:4f:ae:e3:30:bf:79:
8a:4f:9d:1b:5a:24:ff:e6:a3:67:d0:ee:19:c3:17:
bf:fd:fa:d9:b4:9c:b7:0f:22:cf:ae:2b:78:30:8b:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:36:8B:EC:11:E9:6B:4A:D3:09:51:28:B0:74:2B:13:3D:9B:B2:92
X509v3 Authority Key Identifier:
keyid:64:53:81:E9:E9:F0:AF:A3:6C:2A:66:A0:77:CA:1D:57:9D:22:92:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFOB6enwr6NsKmagd8odV50ikr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5813e4-4861-4630-bfdb-37f999cece23/1/ZFOB6enwr6NsKmagd8odV50ikr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5813e4-4861-4630-bfdb-37f999cece23/1/ZFOB6enwr6NsKmagd8odV50ikr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b4:72:a9:d8:20:7d:1e:4d:40:d2:0d:a7:8d:f4:58:1d:6c:
45:c8:96:3c:3a:43:18:31:10:80:fb:60:10:6d:29:07:7e:cc:
7d:f7:f9:f8:41:36:53:4e:2f:8c:ea:05:5f:8f:f8:ee:17:a9:
81:0e:fa:e0:f0:05:c9:a0:d3:37:75:0b:10:81:cb:66:fb:f8:
da:5b:ee:04:8e:2f:9c:1d:af:ac:5c:b8:59:d4:51:c7:1e:92:
d4:00:36:5a:19:15:94:d5:f4:43:bc:d7:ce:dd:39:0e:fb:48:
c4:dc:a3:5d:1a:12:78:5b:bd:57:2d:e4:23:cf:0b:71:00:43:
f6:02:d7:3b:33:6c:d9:ee:8b:ae:e0:1b:8e:92:8c:95:0e:bc:
9a:92:58:02:11:3c:b4:49:ed:c7:48:b4:a5:a6:e6:3c:0a:e5:
c6:1b:dd:ec:22:65:e5:4e:fd:79:35:8b:1c:49:a3:af:36:4e:
ce:3f:81:47:cb:15:0f:81:d2:10:f6:ef:63:26:4f:76:0e:90:
38:ee:ce:f6:d7:f1:81:e2:ac:bd:e6:0e:bd:87:71:c5:8e:5e:
fa:57:a8:10:ce:1a:f5:f0:0e:ce:ef:61:52:9c:a9:07:6b:1c:
b3:a7:ca:b6:f8:8b:e3:77:20:a0:5a:2e:bf:0d:e5:7b:be:84:
cf:0a:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:18:34 2025 by rpki-client