Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier: 46X8lRc2EYBM1/tlK0U31sdVeClzUWOczFObsVxOnKo=
Subject key identifier: F0:3B:F0:55:A7:13:6E:03:64:7B:B7:BD:9F:B0:53:FE:2C:A7:0A:80
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial: 0194BBCF088068C6FA31BB2D458E2D45BA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number: 0FDB
Signing time: Fri 31 Jan 2025 10:01:35 +0000
Manifest this update: Fri 31 Jan 2025 10:01:35 +0000
Manifest next update: Sat 01 Feb 2025 10:01:35 +0000
Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: ZlX7LK7FUl1KZ5O5TeSPbf1P3GqSKrMXACuNC4s5Z34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:08:80:68:c6:fa:31:bb:2d:45:8e:2d:45:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Validity
Not Before: Jan 31 10:01:35 2025 GMT
Not After : Feb 1 10:01:35 2025 GMT
Subject: CN=f03bf055a7136e03647bb7bd9fb053fe2ca70a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:95:7e:bd:c8:f6:b2:70:24:9d:78:61:ec:
a6:5b:77:c8:19:72:83:98:a4:48:e4:10:0a:38:40:
ab:79:11:9b:23:37:37:a3:47:03:22:0d:73:1b:29:
ba:52:05:c4:80:13:31:55:17:a9:07:03:50:2b:a7:
c6:4c:69:65:dc:d2:47:93:72:2f:3a:ae:7a:40:b1:
c6:66:c7:06:f6:43:ae:1f:86:de:58:1b:87:ac:84:
4e:5e:5c:c6:d4:2c:0a:9c:57:7a:07:db:61:c9:f5:
fa:62:73:fb:6a:c9:02:19:31:50:c6:3e:32:e2:f7:
d0:0a:73:dc:86:9e:7e:e1:f4:14:16:9c:c8:b6:d8:
10:91:09:fc:aa:76:e5:b1:51:b7:b2:11:10:2c:77:
64:57:67:4d:05:2f:c9:36:f4:e0:56:63:b8:d7:a3:
d1:1b:07:1c:7f:9b:0e:fa:2b:7c:4f:ad:8e:94:b1:
f6:b3:f2:45:ab:3e:63:8e:1d:c6:f8:31:d3:54:53:
be:a1:8e:4f:8c:ef:0d:29:73:c4:e8:5a:3b:11:62:
43:f1:50:41:c3:a3:73:e3:6e:b6:87:40:69:2a:8e:
d9:a4:e9:26:a0:80:56:6d:b2:21:4d:9a:e3:e1:4a:
48:3f:a9:82:59:10:2d:52:78:e7:3d:01:1e:00:89:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:F0:55:A7:13:6E:03:64:7B:B7:BD:9F:B0:53:FE:2C:A7:0A:80
X509v3 Authority Key Identifier:
keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ba:5c:8b:e3:57:4e:68:ec:56:67:7c:cc:37:60:2d:76:74:
b4:a4:1d:55:1e:14:8f:f2:53:4c:80:9b:fa:93:a3:be:3d:44:
c5:12:3b:a2:a6:62:ad:53:48:a9:12:0c:6b:ce:b9:79:36:cf:
9b:1d:da:86:0c:cb:38:31:fe:72:9c:0a:1f:ea:97:e1:dd:74:
f8:cf:90:78:ad:41:c8:45:9b:8b:cb:f2:c6:fa:2a:a9:0b:de:
ef:bf:ba:a5:e6:e0:40:d8:37:f6:ad:71:5c:52:02:c2:f8:db:
39:89:6c:12:aa:41:90:ea:7c:65:fe:c9:c4:9b:83:2b:41:bb:
34:88:a6:bd:c0:89:c9:8c:ac:3f:e4:01:50:68:b2:82:55:22:
50:f1:57:65:05:25:16:a8:56:d5:3c:fa:41:80:b3:b5:f9:41:
8c:cb:36:d4:43:1e:01:30:0e:73:ab:9d:d9:db:5a:b4:17:66:
01:30:35:22:5d:46:84:7b:1b:f2:83:c4:2c:a5:b7:d6:6f:1a:
ed:d1:c7:14:ed:7b:e0:34:ad:bd:cd:b3:52:d6:35:ff:2d:93:
23:42:ac:56:be:29:1d:c3:82:29:f0:f5:94:99:08:4c:31:9a:
96:8d:b6:4b:01:44:c7:7a:9f:af:ec:1b:45:71:bd:b0:11:1b:
c4:6f:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:28 2025 by rpki-client