Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/394dc0-75aa-40a8-8222-ee4a4618524c/1/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.mft
File: zgQm-dLl8wq4eoJ2f9iW7rpLHFc.mft (raw, json)
Hash identifier: rB9BMGyOQbie3jgC/tbi8lh6jpV10WUjBawJMHW0dgg=
Subject key identifier: DF:EF:0F:41:A6:8B:3C:88:A7:E5:4F:A6:90:30:6F:22:B9:1E:62:F2
Authority key identifier: CE:04:26:F9:D2:E5:F3:0A:B8:7A:82:76:7F:D8:96:EE:BA:4B:1C:57
Certificate issuer: /CN=ce0426f9d2e5f30ab87a82767fd896eeba4b1c57
Certificate serial: 0194BCAA2536C83971B604C4305EA0DA6C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/394dc0-75aa-40a8-8222-ee4a4618524c/1/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.mft
Manifest number: 0863
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: zgQm-dLl8wq4eoJ2f9iW7rpLHFc.crl (hash: roBqLsgdLMMFqj2sLI00lAeV5wUestyJ7biNQBgsH3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:25:36:c8:39:71:b6:04:c4:30:5e:a0:da:6c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce0426f9d2e5f30ab87a82767fd896eeba4b1c57
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=dfef0f41a68b3c88a7e54fa690306f22b91e62f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:66:e8:ee:cd:b4:6d:71:09:6a:25:2c:b5:
23:ba:d8:7b:d0:94:47:6c:be:cb:37:e2:e8:4c:14:
ff:ee:c1:a3:7f:8a:d0:a3:a1:d3:51:53:7e:d1:57:
96:35:ee:68:9a:bd:43:c1:26:de:71:a9:d1:d8:48:
61:ba:d7:28:02:fe:9e:5a:48:02:72:24:55:85:fb:
47:8f:e7:58:28:85:b4:45:1d:fd:34:1d:f4:60:62:
e2:eb:18:4d:c3:67:75:44:7d:ef:10:18:2f:a9:46:
2c:3b:cb:c2:1e:6f:6a:6b:ca:06:b5:2f:08:7a:5b:
42:9d:66:bf:4f:26:ff:4d:85:4d:cf:4c:bd:8c:05:
bc:cb:e9:11:a4:a4:64:18:53:ce:fa:a1:20:82:d6:
c0:f6:60:f3:b6:50:93:b0:e6:c5:27:1d:e1:d0:39:
df:61:c6:59:c0:ac:b7:21:83:89:8f:a8:4c:79:3c:
bd:26:40:30:c8:a9:4e:20:8c:0d:45:b4:c6:54:11:
3d:6b:5f:f6:29:15:24:9f:de:3b:6c:b9:70:65:fa:
05:0c:9f:a8:16:64:2a:7e:06:58:88:4f:8b:50:83:
fe:55:b2:6b:ff:a9:c3:8d:2a:87:57:90:50:b5:de:
f7:95:03:9c:4b:cd:c1:5c:b4:17:21:91:e1:f1:7d:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:0F:41:A6:8B:3C:88:A7:E5:4F:A6:90:30:6F:22:B9:1E:62:F2
X509v3 Authority Key Identifier:
keyid:CE:04:26:F9:D2:E5:F3:0A:B8:7A:82:76:7F:D8:96:EE:BA:4B:1C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/394dc0-75aa-40a8-8222-ee4a4618524c/1/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/394dc0-75aa-40a8-8222-ee4a4618524c/1/zgQm-dLl8wq4eoJ2f9iW7rpLHFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2c:61:6f:c5:91:f9:2d:ef:17:fb:e2:bc:52:82:a0:ed:66:
71:7f:11:6d:12:3b:3c:5b:2a:21:25:bb:18:bf:ce:dc:3d:d2:
9c:36:12:3a:39:42:8c:8f:31:37:01:24:f3:d0:65:a5:46:94:
5e:5a:f4:94:9a:a4:a6:80:b2:0a:e6:67:a7:0b:2f:09:d6:2f:
43:37:c3:86:2b:60:26:6d:f0:be:fa:00:d5:b2:7a:41:58:d2:
b0:eb:c3:66:e4:c5:af:ba:7d:6b:c9:f7:ba:51:54:42:a7:a4:
cd:de:10:d6:2e:d5:d3:ad:25:27:c6:90:89:a9:9d:d4:cd:bc:
12:b3:e1:e6:b9:9d:c8:31:1a:7b:74:ad:ee:e8:76:8d:83:b0:
d0:70:40:11:0a:68:17:ac:ab:5e:c0:7a:f9:be:5d:34:ce:fc:
cb:32:f8:49:dd:44:09:96:fa:e5:5b:96:71:80:fe:13:41:27:
69:eb:6d:cc:38:22:36:e7:9f:dc:71:70:ab:7b:5b:3e:ef:ed:
30:37:d3:dc:68:f9:5b:92:43:70:80:81:5a:93:94:05:bf:23:
4e:a0:8a:70:91:f7:cc:f2:58:8d:2b:e1:a1:5a:18:9f:f2:f1:
0c:6a:9d:58:36:3f:ae:b5:37:45:f6:a7:4a:87:be:c3:bc:07:
d9:34:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:15 2025 by rpki-client