Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json)
Hash identifier: Cv6/geVnJFET8Luxe9XQoUocgiLP0zXCElzrgrzxvxg=
Subject key identifier: F0:A1:BE:48:B9:35:A8:87:01:FD:E1:BC:FE:CB:37:AC:47:B8:B2:20
Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06
Certificate serial: 0194BCA9D29DE4C833179051CCBB38F4969B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
Manifest number: 0CFE
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: Bd9NqxJ8WwXhzN9fBdY737hs9/FtYyzKI/yd7B3iKXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d2:9d:e4:c8:33:17:90:51:cc:bb:38:f4:96:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=f0a1be48b935a88701fde1bcfecb37ac47b8b220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:fa:39:0c:08:52:2f:46:a0:59:bc:52:95:
8e:e6:73:fb:95:ad:45:8f:e6:a7:2e:7d:b9:0c:69:
bd:09:16:09:74:70:ae:59:83:ab:c3:79:98:78:43:
0f:af:4f:92:bd:3c:cf:77:02:bd:18:bd:97:b2:bd:
43:05:09:48:77:2d:09:a4:47:1b:25:f9:be:d2:a8:
b6:58:e6:33:98:3b:4e:79:53:09:3c:14:0f:5d:78:
01:e0:e6:3d:66:5f:3f:94:20:b0:f8:07:37:5a:c7:
8a:dd:96:eb:1e:7c:32:a4:e0:b5:6f:2b:e7:35:d0:
60:c8:43:4a:18:4d:0f:3b:a3:96:61:ec:98:ab:bc:
fb:80:cc:5d:30:87:1c:a2:b1:9a:84:d5:35:d0:22:
3e:f4:07:62:1f:a9:c3:aa:a5:2d:ef:de:5c:d2:1e:
0b:6d:91:2a:24:14:49:e0:c0:3c:14:d1:77:19:f4:
51:06:23:b9:a6:30:08:c3:ae:8f:07:7e:ab:b5:74:
a4:4d:f3:b8:01:b3:83:c1:58:67:ac:10:eb:e9:45:
f7:46:36:a0:41:fc:9e:5f:f5:31:f2:3f:74:80:39:
f3:2d:be:6d:a2:d7:63:a4:cd:a5:d1:05:66:12:7a:
47:10:17:cb:6a:8c:62:b4:4c:d5:90:01:5b:d1:f2:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:BE:48:B9:35:A8:87:01:FD:E1:BC:FE:CB:37:AC:47:B8:B2:20
X509v3 Authority Key Identifier:
keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:be:c0:3a:6f:d6:45:ce:45:a1:3e:9f:81:ba:8a:67:80:1d:
a6:ba:c6:a4:de:0d:d6:50:6b:78:c5:29:96:b2:1c:70:db:87:
b7:72:f9:42:c7:dd:ef:20:42:f9:75:7e:37:34:af:ba:29:c1:
41:26:6f:83:6b:50:14:98:26:84:ce:0a:39:78:a1:b5:4f:b0:
76:0f:0e:fb:97:ae:62:81:05:7a:c0:0f:79:8e:37:29:4c:44:
0b:f5:3b:8b:8f:dd:78:a2:e2:2b:f5:2e:62:ca:a1:59:8c:d2:
6b:06:cd:59:7f:5c:75:45:f0:a4:3b:92:87:66:de:a9:24:47:
db:c3:f5:31:d7:25:67:de:99:e6:30:2d:12:b6:f9:00:12:df:
82:f8:b8:23:c7:88:fe:05:22:18:ef:0d:44:f3:9a:88:d9:3c:
7c:5f:57:90:18:5d:8e:ed:b7:10:a6:f5:66:02:ad:d5:b6:18:
c2:b8:2c:4c:e4:b4:ba:a0:91:40:30:11:e4:cc:e3:00:78:9c:
aa:d5:06:ed:b4:8f:28:82:94:f4:8b:d9:35:69:c4:90:60:9c:
9c:12:8f:fd:45:db:c6:dd:e5:57:77:75:c0:f9:dd:48:78:23:
2c:55:1e:60:a8:db:08:c6:39:63:ab:ba:9a:3c:f4:1e:07:85:
4d:6f:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:34 2025 by rpki-client