Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: LWbfH9pCqb319dA+hSqB/YjdTzukD1TAGH8GAxRpu3I=
Subject key identifier: AF:6B:FA:5F:A4:FB:1E:19:45:E7:2A:A6:14:C9:26:25:83:B7:4C:15
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 0194BBCED8949F3B5A79F96338D14C57CD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: BpTKREnNvb2xFUjvdCoXuymoFrOPtqH+iFY5x/RICOE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d8:94:9f:3b:5a:79:f9:63:38:d1:4c:57:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=af6bfa5fa4fb1e1945e72aa614c9262583b74c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:5b:2f:24:f3:6d:5c:f3:89:c8:93:10:43:
ed:07:84:72:09:bd:fd:31:6c:4d:4a:ce:7a:62:1d:
d3:86:69:5b:dc:e5:a6:84:61:df:4c:d9:79:86:9a:
c9:2b:de:5d:cb:43:cf:67:bb:94:f1:c2:65:b3:3d:
57:75:94:7e:b6:af:e5:af:fd:c8:60:01:c7:ef:89:
14:32:54:66:0d:30:a6:b5:39:a7:e8:ff:db:3f:99:
7f:56:c5:23:93:cc:51:4b:b0:1a:e4:86:3f:4a:47:
a1:57:9b:83:db:a6:9f:7e:25:8a:be:da:7f:b7:02:
86:88:1a:67:21:4d:9e:fc:f4:45:64:70:53:01:da:
d0:8d:97:7d:01:81:63:17:d6:a1:2a:85:63:ef:19:
a7:d6:0a:f4:2f:eb:6e:d9:06:f8:20:ba:89:9d:22:
60:e2:db:48:e3:78:15:d9:42:64:7b:42:a7:62:6f:
71:db:e1:2b:26:b9:09:f8:e8:1d:63:43:3c:12:39:
b4:5b:46:2b:64:a5:e7:14:48:03:49:28:83:db:d2:
a4:61:33:43:6a:fe:3a:91:18:a0:86:68:d6:d7:d1:
9d:44:2c:ad:b3:67:12:74:6b:6f:18:a4:3c:2e:19:
44:bc:10:14:fd:c5:4e:bc:e0:77:c4:ee:df:f1:87:
c6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:FA:5F:A4:FB:1E:19:45:E7:2A:A6:14:C9:26:25:83:B7:4C:15
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6d:56:19:e3:64:c8:23:41:87:b6:3b:00:2d:5a:bd:92:60:
53:4b:1d:0d:4e:2e:64:73:26:a4:68:8f:07:3d:66:4d:fb:33:
d7:23:43:5d:f9:d6:fd:86:3a:27:d3:14:fb:d3:ea:85:51:57:
9b:55:e1:7a:92:94:eb:b5:c1:50:cd:61:a7:d4:69:a7:84:1f:
13:58:ff:b8:67:8d:b5:5c:f2:72:39:cb:ee:54:bf:ca:8e:95:
8c:39:5a:7e:74:70:35:da:26:46:56:61:6a:ce:69:ad:79:98:
1b:6f:0f:c3:03:7f:8a:87:2b:7b:8e:3a:99:74:6e:88:bb:eb:
96:b7:69:72:b2:96:62:8f:db:57:a4:d8:42:47:8f:03:23:6b:
25:53:84:f2:1e:20:c5:df:9f:84:5c:24:50:a0:0e:e1:ee:81:
16:c9:b0:b9:39:97:e4:f3:6b:92:26:ba:d8:9a:58:9e:9b:3e:
86:54:bd:19:f9:60:9a:26:83:74:db:c3:4e:3c:69:89:f2:ff:
32:3c:5f:60:e1:a8:cf:86:3d:bf:67:11:a2:61:66:fa:89:0e:
2a:fa:cd:fe:c6:b6:ba:d2:3d:fb:65:dc:dc:e6:fb:5e:60:e9:
88:85:b1:96:01:1e:29:5b:1e:5f:17:13:f6:cd:01:56:b6:7c:
02:f1:43:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:09 2025 by rpki-client