Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File: zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier: DRbUme6EYt3wkoIyoCUGU0PnbhDmSCJDW+k5esXkfnQ=
Subject key identifier: 3C:B0:69:F2:2F:4A:6C:BD:36:80:33:AF:5A:AF:89:FB:56:28:34:C2
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer: /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial: 0194BBCE7E65EF28268C252636B7159AF4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number: 0BC3
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: mezYXH3sUIF6w4owJtd11D1voeGeFfnHb/uPLFV+wDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7e:65:ef:28:26:8c:25:26:36:b7:15:9a:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=3cb069f22f4a6cbd368033af5aaf89fb562834c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:e6:61:12:e1:6e:59:32:6b:ed:37:d1:69:
79:71:c7:93:29:06:f9:c6:b9:f0:5c:f2:ee:8e:b5:
3b:3a:37:fc:99:58:17:b7:e4:98:18:fd:db:ef:3e:
bb:8d:f6:b5:dd:d1:01:ae:4d:e0:f7:3b:0e:92:40:
06:09:3e:0a:74:50:cc:7d:33:63:34:d8:1d:1d:39:
da:f2:bd:97:e3:06:c5:ac:85:b9:91:1f:9f:46:59:
51:97:4a:0c:71:d8:6f:5d:c8:6f:12:8a:b4:30:e2:
e6:d1:c1:78:19:e2:8a:91:d7:15:37:71:fb:b2:e4:
a4:03:4d:51:33:7d:74:d5:45:97:07:05:88:69:97:
f8:3d:b7:52:27:2e:d8:91:fb:b9:63:95:80:b2:89:
c5:91:04:90:40:da:4c:2f:63:08:91:00:b2:b8:5f:
a5:47:9c:29:05:91:59:5b:02:06:19:9f:b2:15:29:
e8:e2:21:67:ed:96:e4:b2:14:33:18:bd:a8:7b:dc:
64:14:68:dd:a6:21:76:d6:f3:e7:2b:c5:52:80:ab:
74:34:96:96:a8:f9:6c:36:12:a0:7f:15:f7:e4:ea:
9b:84:14:52:91:ee:93:fc:0b:65:d7:c2:9e:bf:f5:
e3:1d:99:fa:0e:c2:70:b1:ac:be:b7:07:b4:3d:7c:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B0:69:F2:2F:4A:6C:BD:36:80:33:AF:5A:AF:89:FB:56:28:34:C2
X509v3 Authority Key Identifier:
keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8f:cd:e7:68:c6:60:ab:fe:e4:a1:32:e1:e3:fa:81:49:40:
5f:c8:6e:ad:e4:28:a8:65:ed:58:d1:47:f9:f0:89:d6:2b:1d:
28:89:cc:75:8b:56:33:18:cc:14:44:04:d7:dc:87:4d:62:15:
6d:61:9e:fb:0d:49:54:86:0e:34:6c:36:02:05:8e:f2:f8:6f:
15:93:32:d4:f4:01:d6:35:35:f3:e7:29:21:9d:e2:8e:32:ee:
1e:a9:65:54:77:ed:65:dd:c1:c1:96:aa:79:23:ad:12:9b:8b:
bb:35:df:0b:63:7f:33:02:45:30:0e:f9:12:99:ec:87:cf:72:
33:cd:d6:af:53:42:fc:7f:c1:40:48:5d:6f:c4:7f:f8:5e:cb:
d0:0a:cb:91:c8:89:02:47:10:f3:40:f0:31:80:cc:05:39:6e:
ae:5f:7e:9f:a8:ef:3c:39:4a:f2:5b:77:5e:c3:2a:25:15:42:
f3:7c:a6:86:d2:3b:dd:7d:16:20:86:bd:62:b1:87:fa:51:5a:
f9:08:dd:d0:d7:35:5a:8d:c9:34:66:2a:e9:4c:0e:ae:f1:22:
a7:f4:0a:5d:a5:4f:38:53:bc:81:b3:a3:f9:2f:97:a0:d1:d8:
d5:b3:9b:18:05:f3:56:9d:b3:07:b7:00:91:6c:b2:14:ce:38:
3f:e9:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:05 2025 by rpki-client