Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: MruzjEdWqmmcdc6Do6ufs1FdFhMr/d1A9UIWlhr7TY4=
Subject key identifier: B4:94:73:E5:1E:67:78:2F:47:58:10:F8:0F:AD:A9:A6:72:93:7E:9E
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 0194BBCDE63F3A807AAC25F7E91863F36007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: IpGUILcHaqgnwawa8UfvFqRH2UGKP/rIFq0FgSwWEbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e6:3f:3a:80:7a:ac:25:f7:e9:18:63:f3:60:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=b49473e51e67782f475810f80fada9a672937e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:c3:d6:38:02:4c:53:3c:02:90:38:8a:b0:
42:13:f3:6e:ee:ab:32:75:e6:71:8c:62:3c:a4:c4:
1a:36:b1:a5:30:48:d6:0a:36:75:a0:60:cb:45:35:
fa:c6:9c:90:43:93:70:d3:10:65:3c:01:9d:e0:d4:
3c:53:c2:0a:4c:3d:01:4c:60:02:92:2f:84:c7:c8:
af:96:bc:91:16:af:64:23:32:a2:e6:cf:36:86:ad:
1e:f8:ad:dc:94:4d:2b:67:12:3b:14:9c:af:25:3d:
65:c5:bb:1f:02:ed:d5:ef:7e:2a:46:fa:4b:98:db:
c6:e7:c1:83:d9:13:4a:0e:13:1c:12:97:57:49:a1:
8f:35:c9:14:71:45:14:51:a0:3c:95:a5:70:44:92:
07:a6:5f:0a:f8:88:f6:ca:78:b6:b7:87:83:54:43:
52:6f:67:ff:12:f4:ea:c4:98:ac:1d:26:3b:ff:65:
14:52:75:f7:7b:02:50:43:6b:a0:d0:d6:60:b6:f5:
82:03:b4:66:7e:8a:14:9d:6e:39:ea:84:8c:ae:6a:
22:f5:69:6f:6f:38:e6:0a:f5:b0:99:50:f3:5a:b6:
60:33:f9:90:00:62:f5:fc:24:f8:63:26:d6:af:a5:
e2:60:5a:67:27:17:68:20:21:a6:8f:17:d6:8a:0a:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:73:E5:1E:67:78:2F:47:58:10:F8:0F:AD:A9:A6:72:93:7E:9E
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f9:34:0f:b3:ff:29:64:bf:ef:d4:af:2c:a7:3d:e8:ed:d7:
35:ed:17:f9:91:93:97:3f:05:75:0b:b8:da:5b:93:0d:75:c4:
e3:c0:fa:41:60:b7:a1:b8:65:4d:a8:d6:bd:ea:6a:fd:2f:de:
d0:31:61:da:7f:10:7b:7b:24:d8:bb:09:5e:8f:4e:1b:c0:e3:
79:b3:ff:f0:04:73:bc:e7:b1:aa:17:ee:f7:58:45:11:03:57:
4a:d3:b7:3a:67:6a:8e:4c:38:a9:36:d3:ef:3d:7c:56:05:12:
8e:d5:28:6a:6a:b6:98:a5:85:ea:55:9d:21:16:34:ae:9b:37:
2a:8b:5c:51:cc:e5:9c:0a:2f:b7:a0:c4:15:67:7b:17:d1:b3:
2c:f4:c8:c4:87:cd:39:ee:48:58:ab:00:2f:80:62:7e:51:23:
2d:49:2a:29:e2:60:2b:b8:93:2b:04:1e:04:b6:e1:54:32:4f:
11:b8:83:7f:ac:40:36:4f:9a:9d:1c:ee:f6:27:54:8d:f5:74:
9e:fe:37:65:33:e3:66:64:4f:f2:d8:2b:b8:d6:da:1b:a9:b2:
f0:f6:57:e1:91:c3:f6:86:7b:95:2c:3a:01:8e:8f:eb:cb:35:
69:e2:0c:56:99:fb:e2:77:68:12:02:07:05:90:37:af:eb:77:
3c:eb:c4:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeY/OoB6rCX36Rhj82AHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjdmM2Y4MjVmOGU4YzI1NjVlYWVmYjY2ZTc3NDRjOTI5
NWRjYzkwHhcNMjUwMTMxMTAwMDIwWhcNMjUwMjAxMTAwMDIwWjAzMTEwLwYDVQQD
EyhiNDk0NzNlNTFlNjc3ODJmNDc1ODEwZjgwZmFkYTlhNjcyOTM3ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU3D1jgCTFM8ApA4irBCE/Nu7qsy
deZxjGI8pMQaNrGlMEjWCjZ1oGDLRTX6xpyQQ5Nw0xBlPAGd4NQ8U8IKTD0BTGAC
ki+Ex8ivlryRFq9kIzKi5s82hq0e+K3clE0rZxI7FJyvJT1lxbsfAu3V734qRvpL
mNvG58GD2RNKDhMcEpdXSaGPNckUcUUUUaA8laVwRJIHpl8K+Ij2yni2t4eDVENS
b2f/EvTqxJisHSY7/2UUUnX3ewJQQ2ug0NZgtvWCA7RmfooUnW456oSMrmoi9Wlv
bzjmCvWwmVDzWrZgM/mQAGL1/CT4YybWr6XiYFpnJxdoICGmjxfWigpFXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSUc+UeZ3gvR1gQ+A+tqaZyk36eMB8GA1UdIwQY
MBaAFKP38/gl+OjCVl6u+2bndEySldzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAt
YjBhYTdmZDYyMTliLzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAtYjBhYTdmZDYyMTli
LzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfk0D7P/
KWS/79SvLKc96O3XNe0X+ZGTlz8FdQu42luTDXXE48D6QWC3obhlTajWvepq/S/e
0DFh2n8Qe3sk2LsJXo9OG8DjebP/8ARzvOexqhfu91hFEQNXStO3Omdqjkw4qTbT
7z18VgUSjtUoamq2mKWF6lWdIRY0rps3KotcUczlnAovt6DEFWd7F9GzLPTIxIfN
Oe5IWKsAL4BiflEjLUkqKeJgK7iTKwQeBLbhVDJPEbiDf6xANk+anRzu9idUjfV0
nv43ZTPjZmRP8tgruNbaG6my8PZX4ZHD9oZ7lSw6AY6P68s1aeIMVpn74ndoEgIH
BZA3r+t3POvEBA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:48 2025 by rpki-client