Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4861ba-4d1c-493c-a90d-60cf660ad533/1/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.mft
File: rzRlQ3ZpzlhiYaBmzErR6kZOtmM.mft (raw, json)
Hash identifier: MOpTbHAks5UXnMabBoOYeEj36sBsdA7/DpqutWzFGEM=
Subject key identifier: A4:C9:46:A0:0B:53:99:7B:75:2C:4A:7F:D0:FA:AC:83:34:58:76:82
Authority key identifier: AF:34:65:43:76:69:CE:58:62:61:A0:66:CC:4A:D1:EA:46:4E:B6:63
Certificate issuer: /CN=af3465437669ce586261a066cc4ad1ea464eb663
Certificate serial: 0194BBCDB126480998BF6E5C550B8339F018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4861ba-4d1c-493c-a90d-60cf660ad533/1/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.mft
Manifest number: 0CD9
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: rzRlQ3ZpzlhiYaBmzErR6kZOtmM.crl (hash: iIKw+DkVZ9EWdduD2VQKP1wA0cgE12Q9JERUUDXplYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:26:48:09:98:bf:6e:5c:55:0b:83:39:f0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3465437669ce586261a066cc4ad1ea464eb663
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=a4c946a00b53997b752c4a7fd0faac8334587682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:57:1a:1c:6f:9e:88:ac:c7:25:d1:8e:26:
d7:65:6b:67:a6:d1:4f:7f:b0:9f:08:45:aa:d4:98:
76:19:23:06:29:c2:67:4a:7d:55:11:57:a8:cd:29:
ef:bf:df:02:8e:8d:82:91:e0:53:64:c3:cf:ad:9f:
c8:00:77:93:1e:41:6e:41:33:80:d7:2e:10:d0:26:
5d:91:f3:dc:0a:9b:5c:1f:35:3a:7a:56:b9:d6:50:
c3:75:89:73:71:72:2c:a3:e9:20:ba:d2:70:57:9a:
9d:9b:bd:9d:c0:97:2f:d2:d0:9a:f8:94:c7:72:bb:
e7:ae:e1:6b:e1:43:fc:33:8a:11:91:00:aa:c3:db:
c2:f4:fc:f2:84:ec:83:42:0e:23:9d:44:b5:43:f0:
9b:88:8d:66:12:ea:6e:24:80:45:f6:30:d1:4c:6d:
9c:fc:2c:ee:7d:e4:17:ec:d8:ee:f7:af:ef:a7:42:
29:b4:37:81:a8:93:e4:50:79:d9:67:35:9b:0f:cb:
18:aa:a7:5e:d1:88:e6:52:39:0e:31:03:c6:11:f7:
3b:1d:e4:a0:9b:dd:04:d1:27:4e:73:e9:2f:d3:78:
73:9e:52:f4:85:a4:7d:61:a1:c0:3d:b7:90:21:57:
86:1f:41:d1:4e:f8:f2:0d:27:6f:6a:31:37:f9:31:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C9:46:A0:0B:53:99:7B:75:2C:4A:7F:D0:FA:AC:83:34:58:76:82
X509v3 Authority Key Identifier:
keyid:AF:34:65:43:76:69:CE:58:62:61:A0:66:CC:4A:D1:EA:46:4E:B6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4861ba-4d1c-493c-a90d-60cf660ad533/1/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4861ba-4d1c-493c-a90d-60cf660ad533/1/rzRlQ3ZpzlhiYaBmzErR6kZOtmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c3:3f:71:18:53:0e:fb:1d:63:4e:87:f1:4a:9f:94:95:cd:
7a:78:e1:92:3e:bb:f1:64:b8:7f:5f:16:5e:08:a8:69:53:54:
4e:27:cf:a8:5b:52:b3:66:f8:10:ab:77:08:2a:de:fa:ba:73:
af:e7:18:34:6e:f2:2d:be:81:4f:97:79:ea:e5:2e:de:ee:22:
a6:24:7d:56:51:6b:84:32:d9:6e:14:89:bb:81:da:85:97:6b:
b6:19:a6:db:16:27:12:66:dd:18:fd:e6:f6:86:08:52:a1:14:
59:42:b4:8a:32:5f:a5:4a:1c:07:61:c2:a5:5c:5b:2d:3f:e2:
57:34:05:3e:e5:1a:92:29:55:19:92:5e:8c:0f:d9:26:c8:de:
b7:6d:62:17:6f:02:8e:6d:0b:14:c5:34:8c:b5:71:cd:92:fd:
13:45:47:c9:84:21:bf:c8:7a:64:e9:90:f0:fd:64:a6:43:da:
d7:f1:42:c9:e3:32:2d:65:93:99:b4:70:80:54:8b:f4:68:65:
de:31:3d:e4:69:75:04:4b:e6:9c:6f:92:bb:33:52:ee:32:76:
9d:22:8b:14:27:8b:76:51:22:3e:d4:38:ae:2e:8d:6c:5f:97:
b6:38:d3:13:e0:b1:b5:0f:c3:40:18:7f:d8:bc:15:e5:3f:0b:
2e:cb:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:46:00 2025 by rpki-client