Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier: bn/oHFLLgDLX1IsTeUM80/HlqGpbPsc5UGHQVI4ipC8=
Subject key identifier: 38:A7:9D:C1:8A:BD:20:CD:29:23:DC:29:AD:47:56:79:D4:A3:89:EE
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial: 0194BC72CA980B61D633250E4EE8F2A9791F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number: 88
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: CDY8XOmACy2y1yeW1VuCRlSrZqL3vMXFJ+zl+osh4yw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ca:98:0b:61:d6:33:25:0e:4e:e8:f2:a9:79:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=38a79dc18abd20cd2923dc29ad475679d4a389ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:b4:e3:b5:6a:20:03:fb:c6:4b:39:4a:bc:
61:a6:dc:1b:58:3a:d4:27:ee:1d:84:7e:38:50:23:
de:a0:7a:ed:42:36:a2:50:7d:25:db:8c:c0:fd:6f:
68:99:8a:3c:fe:6c:8c:94:ef:ba:61:58:58:ce:e6:
82:ca:f0:b9:28:6d:63:98:94:37:1f:bc:ee:4e:be:
18:a2:9e:49:69:9f:d1:ec:df:a4:54:74:e2:4e:5b:
a2:bc:a2:40:e1:89:1d:ea:54:0a:3e:60:ab:6e:fd:
66:13:af:f0:d0:6a:ad:0e:02:cb:6e:c7:95:39:23:
ef:66:62:eb:b4:8a:49:84:70:87:90:4c:bb:65:2b:
0c:5e:ca:c4:35:f0:3a:23:e9:7a:24:a3:95:13:07:
b9:ae:21:bb:b3:9e:20:94:78:6d:4d:69:56:d3:77:
7a:b4:8c:1c:bc:7e:6c:1a:49:e9:d5:2f:a6:7b:80:
d2:40:e3:89:e7:c2:0f:de:f2:15:f3:6c:af:3c:de:
f6:48:47:f7:4a:bc:32:fc:83:59:c5:c4:eb:17:7e:
f1:85:fe:a4:52:15:46:16:a4:04:c8:bf:c8:86:36:
e7:07:22:18:e8:a3:e5:e7:78:77:46:4f:13:81:15:
f4:52:3b:9c:1d:26:b4:00:d5:01:b1:14:84:e2:85:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A7:9D:C1:8A:BD:20:CD:29:23:DC:29:AD:47:56:79:D4:A3:89:EE
X509v3 Authority Key Identifier:
keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c1:1f:08:e4:60:09:9a:fa:4c:05:46:d4:2d:29:e2:19:63:
86:89:e7:9c:02:1d:05:35:70:27:92:cf:96:74:6b:d4:7b:27:
71:0d:d5:63:71:56:97:ac:bc:b5:4e:81:3e:3e:1b:b3:c5:69:
90:61:b4:63:06:33:0d:67:1d:48:32:19:28:08:e1:d2:6d:69:
ee:79:36:8f:ee:bf:1a:22:e7:a0:f3:9c:54:ea:71:bc:b3:51:
fa:7d:42:6b:14:e9:dc:96:58:fc:e1:99:d7:6f:c8:e2:19:68:
82:b8:eb:ca:4b:4e:6d:64:17:18:8b:84:45:aa:76:c2:ad:cc:
7c:75:69:40:5c:94:0c:71:5b:63:43:a6:47:7a:e8:70:49:c1:
5c:73:13:7a:ff:b3:96:2a:4d:34:39:0a:1c:ae:b2:db:bd:22:
71:1f:20:f9:d7:4c:e1:86:23:bd:09:f3:1b:66:b2:ae:ff:f4:
e8:a0:7e:34:25:c7:fa:08:3c:24:74:6c:65:17:0a:d7:d6:7c:
50:b1:51:ba:a9:42:32:37:39:30:59:51:46:53:01:0e:48:f3:
42:f7:0f:dd:15:ee:bf:a1:ef:0c:ab:aa:a7:36:7f:ed:e1:74:
82:87:34:82:e0:86:dc:20:b5:61:32:24:d3:c5:d8:95:9f:93:
da:98:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:10 2025 by rpki-client