Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: 86u19apQhxL7cI8Wx2ODkqApkwotf2ubOP8gTFXIBIs=
Subject key identifier: 0B:61:EC:FA:83:44:BA:01:A7:D6:E8:73:C6:56:19:28:34:71:D8:C9
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 0194BBCEF00DF12AC12EAB8B93488438F11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: Uqk4Tl1fcQ7TN40nvTLxOrFkgpBhEWU2ZFTjrQMT3Bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f0:0d:f1:2a:c1:2e:ab:8b:93:48:84:38:f1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=0b61ecfa8344ba01a7d6e873c65619283471d8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:fd:f1:ca:52:28:5c:6a:b1:3e:77:40:d1:
66:79:7e:51:7f:3a:68:03:9f:a6:aa:ef:60:d4:35:
93:45:38:11:7e:04:db:f0:9b:f9:0d:4d:ad:b6:5c:
ec:06:34:b8:6a:94:15:fd:c5:8f:35:25:cf:8f:7c:
3d:28:c4:d0:87:ef:29:c5:1d:13:55:54:7f:b9:e1:
a3:6e:f5:f0:15:00:67:e7:90:b4:15:be:04:08:97:
78:4e:f7:f4:26:20:e0:d3:4a:36:79:f5:5a:b2:32:
86:38:87:03:32:22:29:2d:01:de:df:9f:45:27:39:
4b:ff:62:44:95:0d:fe:5b:48:bb:58:37:4d:f1:90:
91:0e:30:e4:a1:8d:2c:75:57:6e:44:f1:b0:77:19:
a8:95:51:5c:1f:f2:5f:02:e1:e7:c0:f1:7e:0c:04:
ca:40:8e:43:ba:7c:8e:93:f0:04:c2:4e:8a:1a:6b:
c1:c7:b6:b6:96:a7:c3:51:48:49:7a:d9:aa:30:bc:
cf:69:84:5f:ed:ef:3f:f5:75:75:07:b9:05:36:14:
6f:6b:9d:53:71:43:f4:07:e5:db:bf:62:b1:c8:35:
23:c1:95:2e:2b:27:e2:aa:93:d9:27:5f:7b:04:57:
26:70:df:55:4f:46:4c:d9:7b:b4:d5:e7:e1:7e:73:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:61:EC:FA:83:44:BA:01:A7:D6:E8:73:C6:56:19:28:34:71:D8:C9
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:05:c6:1f:39:17:fb:32:06:aa:36:6a:6b:41:b3:d2:e2:5a:
e5:d5:71:2c:16:d5:a2:0e:85:fa:a4:15:02:21:03:69:9a:c8:
7a:f3:f0:0a:d2:e9:a0:69:70:15:6c:f5:c3:2a:75:1c:4b:52:
d5:a9:5c:ce:88:91:fc:40:e8:a3:ff:04:36:a4:98:72:3d:c0:
f8:e9:01:df:25:1c:11:c3:09:21:51:7a:04:e1:36:bf:bc:b7:
20:5b:c7:d4:9e:0d:fd:6e:69:6f:e8:e1:8f:60:d9:4d:e7:f3:
82:47:8c:c6:2f:83:94:ba:b6:90:73:2b:45:42:9d:98:4f:97:
cf:09:07:55:77:49:5a:10:a1:76:35:fe:86:e3:07:10:d0:35:
f4:16:f4:e3:dc:f5:94:0d:f4:5a:45:64:26:c2:8a:95:35:1d:
05:e5:79:21:99:49:24:ad:00:f0:17:a1:8d:41:40:97:18:26:
a6:72:96:16:df:c5:77:50:a1:70:4c:0e:4c:50:11:b2:86:c2:
49:f9:1b:2f:80:b2:ea:be:8e:53:b5:65:ff:cc:70:c2:3c:7e:
79:b4:0e:cf:b6:09:d5:da:0c:b7:04:24:fe:b3:9e:6d:5c:dd:
b6:c4:69:48:fa:6b:93:02:d8:bb:e6:cb:45:0a:c9:9a:65:54:
b1:a2:9e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:37 2025 by rpki-client