Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
File: z9rC7BEEwkXZyrqOthY46drxADk.mft (raw, json)
Hash identifier: 1ZjmQiEyTySeCimnjk5GLoe/KXE5wRJaSvoUX4H22Rw=
Subject key identifier: B6:39:85:B2:FC:ED:6C:BF:AA:E8:D9:FC:40:3C:39:73:BE:E7:BF:63
Authority key identifier: CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
Certificate issuer: /CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Certificate serial: 0194BBCE134B5EBB69C467C40F639B0ED2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
Manifest number: 0F67
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: z9rC7BEEwkXZyrqOthY46drxADk.crl (hash: ckgOT7Pg/sBh9eisyud32lSwQ8hVyE3Uy5I8YUVFWBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:13:4b:5e:bb:69:c4:67:c4:0f:63:9b:0e:d2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=b63985b2fced6cbfaae8d9fc403c3973bee7bf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:a1:38:f7:22:87:c6:3f:01:59:21:a5:90:
1d:3c:60:c7:8a:b7:af:40:28:d2:c0:65:76:ca:f8:
f8:c0:c6:d1:61:ac:d3:27:63:04:95:76:55:16:0d:
86:f0:dd:7b:70:d8:49:7c:90:01:1a:7d:7a:65:d0:
c5:02:a2:bf:5e:a0:79:4e:ed:7b:96:f6:24:6e:cc:
cc:d1:4f:ee:6d:5a:2d:04:cc:db:e0:dc:0f:70:12:
30:9f:51:9d:69:db:64:94:ed:6d:97:23:9c:cf:e8:
f5:ef:a3:88:b9:0f:dc:a5:06:c9:96:26:7c:1b:a9:
ba:3b:9d:ff:b5:9d:72:dd:15:df:9a:f9:ed:82:9a:
a8:1c:0a:14:af:cc:7c:2c:89:91:c4:c7:19:c5:a8:
1d:c2:f2:9e:35:fa:f7:26:ec:c2:af:26:35:82:d3:
70:24:19:c0:f0:e8:01:56:be:aa:70:14:c4:f7:9e:
5e:18:60:5d:f6:c1:f4:8d:22:3b:11:77:4c:52:e5:
90:24:28:02:2b:c9:f2:8f:a9:54:d3:89:0a:50:0c:
7c:13:1b:5b:a0:4f:da:76:cb:d5:be:22:93:21:79:
cd:8d:67:cc:30:1c:0e:2e:ac:6e:e2:42:5c:02:81:
f4:df:5d:fc:00:41:19:a1:5b:19:9f:2d:98:84:02:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:85:B2:FC:ED:6C:BF:AA:E8:D9:FC:40:3C:39:73:BE:E7:BF:63
X509v3 Authority Key Identifier:
keyid:CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:83:5d:79:46:7f:d1:0f:08:a5:7e:ef:4f:93:40:61:c0:
05:80:01:a8:c0:00:c6:21:ed:4e:37:15:16:ab:6e:3d:ab:fa:
d3:77:95:4f:88:a2:e2:b2:74:08:8b:b4:01:32:f8:bf:a8:e9:
ab:d9:42:84:0c:ab:8f:a4:23:88:73:17:52:02:4c:66:87:ee:
4b:27:fd:9f:28:28:13:20:21:96:43:90:43:7c:83:b9:b5:8c:
80:8c:40:d9:ff:c4:c9:7f:95:0f:da:a5:58:8a:3c:b0:f6:83:
7a:d1:e6:28:5e:1c:9f:d2:0e:70:52:ae:12:f8:e5:37:88:e0:
ab:bb:d9:fc:71:c1:1a:53:76:63:88:7f:83:82:08:7b:03:54:
54:9f:55:4c:af:05:99:b5:b6:89:42:af:78:a9:4c:aa:d5:bf:
48:a5:c7:30:5b:6e:19:2e:71:ed:63:cb:35:5c:27:b6:a5:1e:
92:b5:fa:5b:76:11:8f:18:62:9e:63:2a:8a:00:80:85:04:03:
e6:5d:14:24:69:07:ed:cf:5b:1c:b9:75:c7:02:52:43:23:54:
d9:e8:27:a4:2b:aa:55:0c:f6:68:c4:01:ed:e8:02:4e:01:ed:
e1:0d:56:72:46:a8:92:16:86:d7:0b:67:97:64:8a:79:25:5f:
78:cb:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:35 2025 by rpki-client