Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier: ohpAUhmsu9DutoRRjJIXcTexY8RBbrWym7lTFesvoKw=
Subject key identifier: 91:10:80:7F:8B:B5:0B:7E:3D:8A:DE:23:F3:55:58:D4:BA:BC:8B:63
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial: 0194BBCEF24BBDB82591798B0FFAB0A1EC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number: 07BD
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: qOl6j0OA+SJcWzv8o+k27HkUawE2O57ksSA7NzGUqcw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f2:4b:bd:b8:25:91:79:8b:0f:fa:b0:a1:ec:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=9110807f8bb50b7e3d8ade23f35558d4babc8b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:d0:ba:bf:aa:04:f3:2b:e4:e2:28:64:11:
d5:91:ac:d4:8e:c4:7e:41:c7:8d:46:58:81:e3:e4:
2d:50:c7:3d:3a:b3:ad:7a:0f:6a:2a:de:c1:6c:91:
32:02:e6:d0:77:4a:22:b8:c2:6b:09:db:ad:0d:ea:
87:03:b6:19:af:4a:e7:e9:5a:e8:3d:98:67:87:c7:
19:a5:53:e5:ad:36:45:d8:1d:ad:1b:ac:b1:5b:aa:
0f:bb:8a:ba:53:f3:37:71:3b:92:3f:b8:90:8f:07:
1e:22:c2:91:e3:52:2c:0b:5f:7e:35:c9:fd:fc:21:
5b:05:41:4e:d3:a9:e5:3d:51:27:a9:83:b4:e9:21:
5c:cf:79:c8:73:0c:ce:b2:97:42:71:bd:19:60:2a:
ff:e9:01:24:19:5a:82:64:cc:0e:a3:a5:62:22:5a:
4e:5c:07:0f:ba:99:da:29:3a:bc:af:cc:69:89:ea:
0e:70:2f:f0:33:c3:6d:d2:7b:c6:b5:ba:78:e1:00:
34:b5:87:77:44:16:14:e1:4a:60:bb:86:70:9c:d2:
a5:31:3d:ce:87:cc:f2:f3:aa:77:f4:a9:86:16:86:
ff:a7:58:74:5f:df:da:f8:0d:f3:87:38:2f:c1:0e:
5c:08:8c:8d:1c:5e:0c:49:ee:10:44:95:d2:09:a1:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:80:7F:8B:B5:0B:7E:3D:8A:DE:23:F3:55:58:D4:BA:BC:8B:63
X509v3 Authority Key Identifier:
keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fc:7f:86:1f:ee:4d:02:6c:46:40:ae:f5:ae:df:89:3a:cc:
83:1d:58:e4:4d:31:c7:49:b7:ea:d6:dd:e6:74:0b:22:c8:c6:
78:eb:94:d8:f5:66:88:5a:b4:c5:97:3d:a4:de:80:cb:b7:2b:
ff:66:af:e7:9c:b1:b7:86:51:1e:43:25:74:a3:11:da:b0:e7:
15:a7:1f:08:e0:e3:d6:2b:0e:ab:f8:09:42:6f:14:4f:71:3e:
7a:cd:b3:5c:7e:af:fc:85:c8:d8:4c:fa:12:10:d2:a6:6f:0e:
d9:a7:3f:c9:e4:a5:f3:ec:3a:1a:f7:fe:ee:c9:d7:38:b8:7c:
d5:52:fb:ab:1f:fe:9b:cb:2f:41:12:00:61:aa:5e:92:a1:ff:
06:d3:bb:02:92:ef:b5:83:2d:24:4b:79:89:90:b6:aa:9d:8c:
29:99:71:51:c3:43:fa:a5:e6:30:fc:9b:ce:a3:ae:a6:e4:11:
c6:4a:4c:f6:2e:2b:18:3e:44:39:cc:e8:b3:5a:73:77:19:8a:
64:da:3d:da:26:e4:67:b9:fb:b6:03:78:1c:e5:b2:60:fd:62:
f9:39:1c:15:38:9f:d8:73:e4:b0:46:1c:18:11:a8:39:e8:d0:
c7:41:84:15:63:c1:86:95:45:2b:4c:6d:36:4e:85:6f:32:db:
aa:c4:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:09 2025 by rpki-client