Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: I3auxco379K6gWPicpWFkFF3Pt2XPMwUlDocNNGaL6c=
Subject key identifier: DF:53:E5:43:45:C1:5A:73:C0:1A:BC:FF:1B:C4:43:BC:8B:A6:99:3F
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 0194BD17AC70F8EEE970958CA664E403EFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: mZpOvtf4HZ9Y8eg6gU0EvuxyLiO5AYrDy7H3Oqr5k7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ac:70:f8:ee:e9:70:95:8c:a6:64:e4:03:ef:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=df53e54345c15a73c01abcff1bc443bc8ba6993f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:d6:09:41:f6:89:d8:06:f0:98:c2:1e:bf:
a9:2a:a7:2e:fe:9b:20:07:bd:52:3f:9f:07:f6:c4:
1c:1a:3a:8d:cf:65:26:a4:db:34:12:d0:ec:32:8b:
b6:7f:d9:2d:5b:57:e9:de:65:f7:ff:71:df:8a:a8:
ae:9d:91:84:ed:81:09:f6:d2:3a:40:b3:ff:84:67:
21:4e:4f:9e:bc:c9:a2:a9:73:89:fc:d9:9b:2e:91:
de:f0:e6:95:11:ab:b4:e2:eb:e8:61:ed:03:7e:f7:
41:b7:37:56:ff:da:06:0f:d1:97:97:64:ec:7b:86:
83:90:f5:db:0f:18:bf:45:1a:35:92:c1:a3:1b:fa:
54:84:bb:65:bf:bc:52:a4:cc:23:06:7f:05:27:21:
00:6f:41:53:6f:60:10:d5:a5:18:0f:5e:5b:9b:a4:
91:17:42:7f:f8:8f:cb:ec:c9:51:14:64:63:1e:fb:
91:97:04:3d:5e:9e:de:d9:5a:45:d0:bd:0f:7b:37:
b3:33:59:5e:c7:12:80:08:2d:69:84:0a:ca:00:31:
e1:87:cb:68:5a:fb:ad:29:f5:f7:ea:da:9d:f0:ba:
d2:ec:df:dc:30:24:31:bc:00:91:42:69:e7:8d:8a:
c4:63:11:9b:fd:8d:11:77:5b:ef:a1:c1:83:d0:9e:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:53:E5:43:45:C1:5A:73:C0:1A:BC:FF:1B:C4:43:BC:8B:A6:99:3F
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ec:28:54:65:7b:6a:8e:27:28:28:a2:cc:28:60:6b:0d:e9:
9e:61:5b:d7:03:d1:79:e2:ee:0b:b7:65:bd:c8:e2:1e:6d:42:
35:d0:a9:d8:7b:81:a2:a7:ff:22:8e:6b:9b:5a:e3:8e:f8:23:
30:a0:27:da:52:26:78:48:1e:1e:a5:32:30:bc:16:c7:ee:b9:
10:b0:91:19:d3:a2:db:b5:69:65:c3:1d:21:9d:c7:61:e7:33:
e2:4a:63:95:3c:09:31:a8:65:90:9c:13:b6:2d:76:d2:97:30:
04:a3:3e:75:2d:b5:38:84:fb:5d:e7:ca:a1:43:a4:c9:21:3b:
2e:bd:6b:10:56:4c:83:52:d5:c3:be:02:23:df:43:37:33:66:
45:f1:ea:1b:3d:eb:fb:29:a9:e1:51:31:2f:5d:84:43:bb:7e:
fb:3a:f3:2a:fa:91:7a:d7:48:6e:fc:9a:97:c5:a0:87:a8:85:
70:f3:92:0d:02:fe:85:88:72:03:07:39:17:ed:38:e2:08:ca:
f0:f7:81:4b:da:65:e6:7d:a4:4b:4e:d0:17:57:5f:f4:50:5d:
d2:68:b2:24:35:96:11:3f:2a:f0:bd:63:a7:f5:44:25:f9:c4:
f6:ae:16:e7:cd:22:8e:e5:43:e2:17:be:44:7e:61:31:b4:3d:
34:be:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:47 2025 by rpki-client