Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: mQPb5hWMTEnbspJTU6clufyBbOtjG9dYQhV/7clIOrU=
Subject key identifier: 3C:AB:39:B9:8B:8C:C8:32:FE:E4:A5:E5:7D:C3:89:26:53:7B:50:87
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 0194BC72BB66B8BD121FBCADC25CE952ED58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0A77
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: UP8l81zm5GvBZCOmG9bvje9sonuTOe7woTKJinc7pos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bb:66:b8:bd:12:1f:bc:ad:c2:5c:e9:52:ed:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=3cab39b98b8cc832fee4a5e57dc38926537b5087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:a5:ba:fb:e1:0f:7d:14:b9:78:df:19:ac:
8a:d0:92:f2:68:ec:b6:a6:cb:74:69:f6:53:57:8a:
20:d4:c3:6b:81:a7:21:f7:0b:fb:33:01:7a:6c:77:
be:b4:90:08:16:1b:95:51:5c:c7:a6:a9:87:f7:ab:
1b:fc:6d:fc:44:6d:7b:aa:33:05:7b:bf:ae:b1:87:
ef:a2:4f:2f:db:d3:2b:bd:2c:55:99:59:ba:86:8d:
fd:01:cf:c0:ac:4f:4c:0d:e1:d1:df:3d:b3:c6:bd:
6d:da:4e:47:79:77:3b:42:88:7c:4b:f8:ae:27:4e:
09:49:06:6f:cc:9e:0a:dc:1d:47:f8:65:5a:d1:a6:
ae:1c:b9:c3:7f:55:33:6c:8e:12:71:f0:58:cd:34:
e8:b1:7f:3e:48:ae:bb:b5:40:11:55:4b:fa:9c:1e:
73:3d:e6:09:7a:3e:8f:49:b1:06:5d:4a:53:b0:a4:
91:1f:98:d8:6d:c7:03:1c:0a:78:7c:fa:dc:3b:03:
df:a5:26:7b:8c:b6:82:ed:7c:f4:c3:22:ad:a1:53:
58:40:e1:95:2f:16:70:36:19:87:1d:76:0d:b9:ae:
e2:3f:23:31:b1:0f:39:5c:2f:75:21:36:75:61:8e:
9d:7f:c5:75:fe:3a:72:aa:e3:de:1d:43:b4:19:a7:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:39:B9:8B:8C:C8:32:FE:E4:A5:E5:7D:C3:89:26:53:7B:50:87
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d1:16:4b:56:bf:78:0b:37:db:25:d3:ab:27:c6:42:70:a0:
dd:74:ca:a0:97:10:99:42:92:3f:a2:2f:a6:5c:74:9d:86:96:
11:d3:8d:e2:b1:6a:46:4d:be:6e:95:77:51:78:ab:6d:28:4e:
1e:c5:6e:6a:f1:c7:1b:85:01:a6:94:d5:a8:1a:d9:05:58:65:
66:80:d6:3a:ce:a1:60:9d:4e:90:2b:34:72:30:da:f1:bd:5e:
a7:02:0e:de:59:bf:8d:3d:fb:c3:a8:75:96:90:a7:ef:de:66:
1b:95:68:c4:83:56:13:3f:a5:9c:d5:11:55:b5:bb:2f:c9:fc:
31:b7:5f:3d:e4:14:7e:0e:a6:1f:26:0e:fd:62:b9:6c:4c:11:
c8:14:a2:5d:8a:18:f4:56:dd:1a:b8:7d:e3:2f:c0:57:17:ed:
f7:b9:97:13:f6:13:3e:2c:18:28:e0:e3:73:f7:e8:61:c5:9f:
0e:84:e3:48:16:23:fa:72:4d:1c:d3:94:ba:e2:b5:74:fa:63:
8d:e7:2c:f6:fd:9e:20:aa:61:c0:9f:0c:aa:9b:26:9a:ba:63:
b6:ff:13:d8:37:0a:cc:95:5a:d6:57:db:a6:93:8a:f0:f7:5a:
db:c7:fd:84:33:f5:d6:3c:d6:6a:dc:28:68:9a:af:69:d8:2e:
24:14:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:55 2025 by rpki-client