Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft
File: Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft (raw, json)
Hash identifier: MuAHm1DToKDijSfljtD0RzPYWvh44oKDvBaKyugP4DU=
Subject key identifier: E9:2A:BC:9A:0F:B5:0B:A6:4E:8F:9E:A8:20:EF:37:DE:29:06:45:51
Authority key identifier: 67:AB:A9:AF:A3:7D:9B:CE:40:7F:E2:3C:79:19:89:2D:9D:9C:09:39
Certificate issuer: /CN=67aba9afa37d9bce407fe23c7919892d9d9c0939
Certificate serial: 0194BBCE3DD6B4AF296C225DF3B1039D15AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6upr6N9m85Af-I8eRmJLZ2cCTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft
Manifest number: 0523
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: Z6upr6N9m85Af-I8eRmJLZ2cCTk.crl (hash: OGZV0NFW82PGZZw9rH4Fee05GZNJGy91CyI3k2AtqDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3d:d6:b4:af:29:6c:22:5d:f3:b1:03:9d:15:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67aba9afa37d9bce407fe23c7919892d9d9c0939
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=e92abc9a0fb50ba64e8f9ea820ef37de29064551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:a1:f4:f1:83:68:39:85:58:34:06:23:c3:
bd:f7:51:0b:c5:73:f0:5c:7d:e3:d0:d3:73:35:3a:
35:52:db:b3:63:f7:5e:3c:4b:31:e3:fb:a0:1c:66:
34:c8:d3:14:ad:59:a3:e0:fb:df:c0:89:87:e0:32:
34:34:a6:29:82:23:bc:ac:db:c9:74:d7:68:08:ce:
48:88:9f:19:7c:10:5b:76:22:03:20:e6:be:4b:6a:
5c:1a:da:75:1c:74:a5:ce:f9:3e:4e:d8:11:36:63:
18:60:ea:d7:88:e3:9c:1d:98:17:9d:93:30:65:2e:
ec:46:51:31:ec:ea:e2:52:50:e1:50:10:20:3a:51:
bf:97:6f:51:70:9f:59:8c:65:16:a5:0c:af:67:c8:
af:18:7b:5a:85:be:cd:40:29:2b:9a:54:76:12:b6:
87:96:7d:83:39:2c:77:8f:0f:d1:0a:65:f7:9f:e1:
b4:5d:61:5c:09:03:5b:99:51:b2:60:50:1f:a2:00:
5c:3d:8e:25:f6:e9:d5:68:7a:9e:42:5e:d4:8f:eb:
34:2a:3c:69:45:54:1a:9f:47:d9:d0:fd:d6:da:60:
dc:db:a4:e2:2e:87:47:c7:cc:7e:40:fd:73:74:97:
c4:8c:0b:63:e8:0d:07:21:31:68:c3:9e:cc:f5:af:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2A:BC:9A:0F:B5:0B:A6:4E:8F:9E:A8:20:EF:37:DE:29:06:45:51
X509v3 Authority Key Identifier:
keyid:67:AB:A9:AF:A3:7D:9B:CE:40:7F:E2:3C:79:19:89:2D:9D:9C:09:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6upr6N9m85Af-I8eRmJLZ2cCTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8f50aa-5456-4159-8840-b01d8f295c19/1/Z6upr6N9m85Af-I8eRmJLZ2cCTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:35:c5:f1:1d:4d:00:3b:35:bd:69:44:38:1a:34:0d:be:c2:
04:b1:56:d1:86:3a:e9:56:40:ef:22:bf:bf:c2:44:49:21:a1:
8e:f3:3d:0a:1c:22:37:39:2f:e8:fc:3e:f0:b1:b2:b9:44:aa:
c6:ce:35:c7:8d:a4:b0:59:cb:76:97:bf:87:8b:66:fe:d8:31:
36:83:75:c6:fe:e1:73:e3:a8:3e:99:8d:a9:9e:4f:7f:1e:86:
c8:76:da:df:35:50:f4:22:19:3b:97:d6:9d:80:89:49:d9:9d:
bf:05:bd:c2:b6:79:28:75:43:66:04:bb:e9:a6:95:be:73:11:
0d:3b:4d:54:cc:ce:2e:b4:db:62:13:05:2b:53:2e:c3:2d:18:
01:6d:f6:53:92:cc:2c:f6:05:72:dd:7b:74:5c:12:06:50:1d:
a9:35:fd:84:e0:1d:0e:bc:55:9d:05:66:24:88:fb:81:32:98:
41:f4:c1:fb:a2:ea:f4:d7:31:88:11:11:49:c0:48:26:bd:64:
c3:85:60:2a:7a:fd:5f:ee:1a:af:f9:73:94:02:df:ad:7f:df:
fb:53:69:59:7a:46:18:c8:cf:20:e6:28:62:50:73:07:f3:2b:
c3:d6:0c:7e:95:fd:a5:b4:9b:78:80:c9:e6:d6:07:30:f0:b3:
bb:ef:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:15 2025 by rpki-client