Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: yQQT++v8o385H/DfpUmMWcS02yq4Ifj6AYondQMFQpQ=
Subject key identifier: BF:4E:28:51:F5:5A:5E:82:39:3C:3F:6E:5A:9D:6C:73:12:46:A9:73
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 0194BD176DC6937FBC5A10F66D7EB6497396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 0878
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: nbw1Z9JZDHDumF692eUJl3rJN5vBjlttAkzXa0XYyyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6d:c6:93:7f:bc:5a:10:f6:6d:7e:b6:49:73:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=bf4e2851f55a5e82393c3f6e5a9d6c731246a973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:64:9c:e3:d3:33:d6:b3:1a:b2:6e:fa:dd:
e7:e6:06:b3:fc:16:7a:9e:a3:d4:1a:f6:73:97:09:
51:88:78:bf:fa:cc:77:d9:dc:f1:85:93:fb:60:2c:
27:a0:ae:a5:35:da:78:19:ef:7b:b3:6c:30:c7:25:
19:51:89:02:5a:6c:dd:cc:b3:55:e3:cd:17:85:44:
89:6d:d9:b5:d2:c3:9b:41:ba:7c:8c:4f:b8:bb:40:
82:42:9f:09:0c:f4:c0:34:af:3d:59:84:46:c8:1e:
3d:49:b5:3b:8a:0e:d3:94:ff:60:91:06:85:72:d5:
af:4a:61:4a:98:b7:4c:20:6d:cd:e1:43:b2:1f:de:
6a:53:40:f5:35:69:17:a7:57:fb:b9:d8:c8:df:9b:
06:17:e2:8e:b3:2f:2e:32:ad:ee:ad:be:16:ba:22:
93:1f:0a:0c:21:01:46:c6:8e:63:9b:43:30:fd:c0:
fb:a2:ae:c6:35:09:b7:e1:89:47:60:e8:9e:f3:24:
4c:d3:d5:b4:58:9a:91:ec:63:8b:7f:2a:35:b8:97:
74:91:ce:d0:ee:9f:a6:4c:b4:0b:ab:6d:2f:c1:6c:
86:98:25:6f:ff:9a:18:96:35:48:b8:15:26:2d:d6:
d4:e2:45:87:17:4f:a7:67:2a:0b:86:e8:71:8c:0f:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:28:51:F5:5A:5E:82:39:3C:3F:6E:5A:9D:6C:73:12:46:A9:73
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:79:a9:c9:b6:3a:1c:4f:b6:93:62:9d:8b:e5:f9:2f:17:5a:
23:bb:89:71:06:b0:4d:3e:02:12:ac:ba:a1:dd:0d:6e:fe:74:
12:ba:98:f1:12:e1:1f:32:fe:a8:97:15:3d:af:44:2e:b1:e5:
0f:26:b8:3d:7f:86:d2:67:c5:c9:fb:0f:6a:cb:9a:21:f8:a0:
21:39:0b:e1:7b:d7:b4:d7:e6:60:35:fc:f3:18:50:2f:75:d9:
02:b6:a6:ce:7b:7d:de:23:48:9d:34:4e:19:27:14:47:17:5d:
1f:8b:7d:b7:3b:80:8d:db:91:91:b3:a0:d3:b4:15:a1:c9:a5:
8e:22:cf:0e:2a:92:07:8f:29:cc:79:5a:e7:51:a3:16:14:ab:
e9:fb:9c:3f:1c:8f:d3:cb:2d:c5:5e:c0:9d:5b:95:cd:01:cc:
db:ab:0b:d7:5b:20:b0:5a:49:8a:b3:31:fa:1b:0f:69:66:89:
b5:d8:ba:3d:cc:e5:e8:36:47:e9:1c:d3:22:df:6f:58:8d:00:
d6:55:8c:dc:93:ba:27:b7:1d:70:12:c1:a6:ed:e8:dc:63:4c:
c1:81:6f:45:15:79:1b:89:e9:47:e0:98:75:99:18:d2:84:6d:
85:db:19:a7:4b:4a:8f:00:67:7e:05:e3:f7:83:06:1f:d4:fc:
5f:a3:d6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:48 2025 by rpki-client