Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier: FsWxiyCofWIhVUvplR7Xrts+U5iELVjkXYxyAK3v71k=
Subject key identifier: 74:7A:7C:B6:65:1A:00:3D:07:C9:49:DA:46:F5:14:F9:D2:37:42:35
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial: 0194BBCDC9B28EBA3F24AC89D1C105571B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: WK+Cgz0iSIwuOIWLSWqqOKkLnaBkV54yR/dEe0ny0UA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:b2:8e:ba:3f:24:ac:89:d1:c1:05:57:1b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=747a7cb6651a003d07c949da46f514f9d2374235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:0e:26:ab:1f:d9:ab:6c:ef:80:71:e2:bd:
39:7e:cf:86:56:19:cd:bb:fb:98:d1:77:7a:d0:ac:
38:fc:f1:87:14:b8:25:2c:f6:d9:6f:1b:fd:79:aa:
bd:5d:8b:2a:ff:52:a4:a6:5e:5f:8a:c7:df:3d:b3:
3b:1c:5b:94:b6:3a:95:91:1c:8d:e6:c4:54:af:f6:
ac:61:29:5a:21:b5:df:7a:69:24:86:63:8b:d5:8a:
b5:3d:1a:2b:0a:d9:30:67:a5:e0:36:71:e1:97:db:
3b:3b:83:0a:0b:b4:ef:33:c7:74:c5:66:97:e7:28:
09:58:fb:6d:45:b9:49:d0:78:37:81:98:a8:7d:1c:
3a:82:39:d8:66:94:cd:bc:ac:b4:31:5e:44:26:51:
77:a0:dc:6c:fb:45:1f:cd:21:e6:66:75:a9:2a:e9:
b4:4e:c1:ac:60:df:3e:ef:31:b8:70:9c:a8:85:83:
3a:a1:d9:02:fd:6b:4b:45:73:4f:c3:b6:95:59:0e:
d4:5a:94:84:a3:65:3b:bc:f6:e9:a4:b6:ee:8e:f7:
5f:c8:f6:98:05:c9:03:63:51:7a:33:1c:59:da:4d:
cd:39:23:3d:f7:7f:a3:d2:24:41:de:f2:bd:22:59:
65:8f:54:8a:b6:b9:25:6c:a9:ae:35:61:27:31:30:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7A:7C:B6:65:1A:00:3D:07:C9:49:DA:46:F5:14:F9:D2:37:42:35
X509v3 Authority Key Identifier:
keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:1c:8e:c3:b4:d9:db:11:8e:93:57:59:fa:37:7e:d7:dc:
2b:33:89:be:21:75:1d:79:0c:2d:a8:3b:49:ff:cd:fc:bf:7a:
61:67:0e:bc:87:fd:19:f2:dd:c9:ea:f4:64:da:14:29:a1:0d:
ca:81:15:41:be:42:0d:9e:53:34:c4:5c:1a:cb:65:f7:24:25:
cf:03:34:c4:ae:9a:92:49:71:ad:fd:f0:62:d9:3d:a7:cc:f3:
9c:2e:b4:fc:4c:29:1c:97:83:70:76:a7:5a:e0:fa:17:04:65:
de:f8:06:c4:f2:f1:58:6c:56:94:f5:4a:53:9c:81:49:fd:24:
f4:bd:1c:92:cd:c7:45:56:f0:90:54:3e:21:56:69:07:f9:b6:
d7:d6:d2:d3:72:30:a7:53:35:36:32:60:1f:23:7c:96:3b:2e:
98:6a:03:a9:be:3e:7f:ab:6e:c7:0a:96:31:00:7e:71:89:32:
f3:90:21:b0:35:ef:3d:06:ec:5b:17:cd:5f:4f:c1:12:3e:6e:
27:32:42:02:56:cd:8f:f7:d3:54:1c:14:8f:88:95:3d:14:78:
3e:a3:34:ff:16:68:7e:d2:b2:42:84:ac:8c:c6:fc:47:70:0a:
82:b5:1e:a3:2a:56:68:14:5a:d9:06:d5:d2:e0:30:37:f9:b4:
2b:a3:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:37 2025 by rpki-client