Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File: zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier: OkhYejnW9A0/51WpbbE0jUZZqMSdxhhCc0IGh+zqKIw=
Subject key identifier: D7:CB:AD:91:60:24:52:8D:DE:66:AC:DE:B2:6B:9B:8A:42:D7:6C:14
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer: /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial: 0194BBCEF23D83A2BC4BFA930C068D693FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number: 0648
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: GPn9qbF+LNwEV9I+O5SlneA1+U4HQpMvtFZG5YVADsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f2:3d:83:a2:bc:4b:fa:93:0c:06:8d:69:3f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=d7cbad916024528dde66acdeb26b9b8a42d76c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:69:1d:ce:d1:a1:3d:42:c0:7c:0c:24:68:
a9:c0:44:b4:ad:69:60:bf:3a:33:5a:fc:ec:c5:a2:
d1:67:71:e3:e6:55:59:ea:ac:d9:bb:ef:de:3e:f5:
56:b6:58:08:f8:11:b6:e7:70:6a:2b:59:1f:67:a2:
de:12:b0:51:dd:f9:75:49:55:7a:88:f8:9f:e3:4d:
e0:bc:9a:de:02:4f:a9:f3:5e:36:71:e8:a0:ee:0d:
63:05:f8:f0:e6:5c:25:64:09:ab:69:3f:a2:47:38:
c8:bc:46:6f:99:44:f5:25:25:e3:7d:10:2f:30:09:
48:ce:b9:48:0e:64:45:8a:55:27:13:73:b0:cc:8b:
e4:7b:3e:4c:69:1f:4e:49:a9:d4:79:3e:f0:b1:eb:
13:d0:72:09:5c:d3:87:31:e3:16:bb:f3:6b:a3:ba:
67:4a:86:10:d6:9f:6a:2d:fc:05:4a:13:62:6a:ae:
13:5c:0d:61:d9:af:31:e3:09:7c:46:eb:17:d7:14:
97:0f:61:1c:c1:2f:5a:b8:0a:76:fc:13:01:ac:13:
81:48:48:e7:4c:44:65:c2:e7:3e:60:62:e6:a9:e8:
1b:1a:99:67:74:3c:27:07:a9:fd:74:a8:fc:57:0b:
a5:f8:dd:77:dc:0b:ef:2e:2b:cb:d6:37:80:80:74:
b5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CB:AD:91:60:24:52:8D:DE:66:AC:DE:B2:6B:9B:8A:42:D7:6C:14
X509v3 Authority Key Identifier:
keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:dd:6b:5b:f1:67:24:de:08:46:02:d1:f4:26:d4:1c:c2:d7:
0e:97:a3:6d:f6:1d:07:e4:16:5d:95:05:7a:c5:7d:4f:cf:61:
1c:cb:06:ad:5e:a6:a0:e0:a6:66:cc:44:2a:c5:0f:2f:6d:02:
d3:cb:ed:49:ba:ee:84:f7:b0:8b:c2:9c:14:bf:fd:52:06:bb:
c0:a5:91:c4:81:e2:5e:be:ac:30:fe:62:aa:93:b4:a4:c4:46:
48:c2:85:5b:5e:d4:b6:5b:26:91:76:d6:cb:88:50:94:fe:5e:
3a:5a:cd:4a:30:b6:2a:b1:7f:5d:2c:d5:e6:2c:b0:67:57:73:
50:82:f8:f5:1c:40:21:6a:6a:b9:87:ea:c5:c0:e0:06:72:2a:
ab:95:6b:68:32:fd:96:82:7e:16:26:38:db:8c:c6:e5:2b:82:
29:fe:b0:ea:60:72:20:bd:ff:26:82:0c:b1:39:de:40:8c:0f:
e8:5d:68:3a:77:84:30:21:fd:f1:a1:36:da:d3:e3:0f:e7:cc:
d1:6b:49:0f:e4:cc:ae:ea:10:48:01:e8:c5:a7:dd:b4:f8:2f:
07:b4:d6:44:d5:7e:25:38:af:75:25:a1:85:63:ed:73:12:c5:
4d:d9:2f:a8:a9:4b:c3:8c:01:0b:1e:be:8d:13:5d:07:96:91:
dc:6a:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:06 2025 by rpki-client