Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: bm0+6+zgAgLVWb0JNWskuoE6E/F/JewWmDa2P5wLlfU=
Subject key identifier: 50:7A:E5:9D:D0:AF:D2:3C:5D:DF:E6:BD:CA:EE:2F:C6:EC:5E:CF:9E
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 0194BCAA01B6BD5AB8B050FAAB5B9797D574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0B6D
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: wi6rAYdT2K2BuL1tgDWY4ucENHYb7gvAiTk9QSWM0tE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:01:b6:bd:5a:b8:b0:50:fa:ab:5b:97:97:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=507ae59dd0afd23c5ddfe6bdcaee2fc6ec5ecf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:74:7b:bb:a1:ad:c1:bb:c6:f8:90:3f:00:
13:80:b1:ad:8c:3a:cb:9f:49:23:56:b6:d9:28:e8:
84:17:ac:c7:ad:60:f9:7e:15:4d:9b:9b:da:0d:cd:
2f:06:a4:90:cf:eb:bd:5d:26:8d:50:3c:84:ad:36:
76:9c:5b:15:13:84:a8:40:20:e6:06:2b:cf:f0:67:
59:ba:a2:0d:56:6e:05:a6:4e:f7:a0:95:dd:51:f5:
e4:23:ce:bb:d3:02:6c:4d:82:53:cc:ce:c3:3f:2d:
b2:d7:c2:cb:52:dc:94:38:b1:51:96:79:b5:bc:56:
7e:9d:ff:52:23:1d:5f:b9:2c:90:b3:f1:f2:cd:f0:
4e:44:a1:72:57:23:67:a0:96:df:28:2a:6b:fd:1b:
5f:5a:4c:c1:1f:69:75:1a:a7:13:20:c0:c4:50:96:
eb:45:eb:19:5e:fd:16:51:16:da:5a:c2:38:71:57:
56:9a:47:8e:29:21:40:d6:3d:ce:96:cb:01:7b:ce:
06:05:35:34:e3:9d:09:6f:ce:87:a4:d3:29:91:6e:
d1:9f:ea:8b:e7:66:10:4a:a8:97:b8:c5:e0:6b:7d:
04:6b:f8:91:54:77:30:ed:25:61:8a:03:1d:9d:44:
3a:df:e1:20:e0:2d:d7:a7:fe:fa:04:a9:f7:fc:49:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:E5:9D:D0:AF:D2:3C:5D:DF:E6:BD:CA:EE:2F:C6:EC:5E:CF:9E
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:cc:51:9f:9d:88:6b:36:b0:c9:8b:31:4d:26:e0:9d:a9:17:
3e:72:14:87:ba:8a:6b:30:b7:b9:df:80:7e:8a:94:9a:9c:d9:
38:fe:0c:79:11:d1:a9:c6:96:a2:9b:1d:44:1a:09:11:07:ee:
46:86:66:fc:93:e9:0d:81:34:f1:e1:01:93:3c:c9:f6:6a:5f:
eb:12:2f:e2:b3:85:f2:70:0b:ea:90:29:ab:d0:6a:bf:f1:b6:
33:52:98:f6:cd:71:ad:b9:32:6a:c4:93:4b:bd:70:da:77:82:
d5:87:0c:e4:8b:fe:7b:ae:b4:8b:10:f4:ac:5b:9b:7f:e6:17:
b8:a5:2a:65:13:56:5b:8a:ff:47:21:db:a6:ee:c5:5f:6d:5b:
33:cd:2d:40:c8:37:da:ac:23:75:fc:f1:3f:5c:88:cb:2e:d8:
7b:2a:1e:9b:44:b6:92:e6:c5:47:5b:d9:fe:95:de:15:15:c3:
5d:d7:a9:cf:77:e8:be:2f:d2:88:40:5b:6a:28:e9:23:29:2b:
ed:58:b0:a3:d4:5f:e4:b1:2d:f5:5c:f2:56:1b:67:31:d1:d7:
46:5e:c2:ab:61:00:52:2f:c1:ab:9d:63:b8:e5:21:c6:50:b9:
e6:e6:ce:2d:b0:8f:6f:7f:00:1a:6f:d1:c3:47:10:b4:5e:1f:
7e:85:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:54 2025 by rpki-client