Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
File: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft (raw, json)
Hash identifier: Kfd6fwK9sBLmBef19kvG+ZUHGDrE58FvR24wBdkib54=
Subject key identifier: F3:11:B0:64:E1:8D:2B:55:F2:DE:44:5E:8F:D1:3E:62:4D:E1:1D:CC
Authority key identifier: 64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
Certificate issuer: /CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Certificate serial: 0194BD856E6CEA16D6B2EC5276C4DD150583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
Manifest number: 0CF0
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl (hash: Up87dztrPgfLNtag8HcP7t2fuL9gYtkznRDlY9FN2Kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:6c:ea:16:d6:b2:ec:52:76:c4:dd:15:05:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ee0489158fe95e1991fd5ce725ea067e11a1fb
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=f311b064e18d2b55f2de445e8fd13e624de11dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:28:e0:ee:37:5b:73:94:7a:f7:9c:f0:06:
9c:6a:54:9c:12:47:15:63:98:58:28:04:8c:2d:34:
40:43:cc:58:79:09:ac:09:e6:e3:d7:d5:9f:3d:24:
fa:52:4e:cb:1e:53:20:5e:b4:2f:be:85:f0:ae:41:
c5:a1:21:74:d8:6f:d9:c4:b7:66:6b:da:fb:d3:90:
83:1e:8e:ed:25:21:5c:c4:2d:e4:93:62:e3:a1:53:
63:6c:7a:bc:ee:be:d3:3f:d4:16:48:0f:0b:b0:ca:
b9:46:26:7a:bb:d8:e8:8c:6e:65:fb:c9:c9:80:ca:
65:9e:c3:f5:ab:7e:ab:8e:0b:69:fd:a3:25:3d:fa:
ab:2e:2f:ae:b8:4e:5d:98:06:d0:c8:90:c9:06:22:
ed:78:75:71:d6:c2:f0:30:aa:9f:00:c2:59:90:f9:
b3:90:e7:e5:a4:15:23:81:3e:3c:4a:6b:a7:0f:c7:
26:01:08:13:72:0e:08:f0:26:e8:2b:dd:e2:25:02:
2c:1a:cc:69:44:9c:da:9f:4c:9e:e7:de:02:af:55:
bd:55:05:1e:55:60:e9:cb:2e:fc:41:81:23:b3:76:
5b:7c:57:a2:dd:f8:3a:31:67:6f:35:0c:49:a1:1c:
91:b3:44:ff:89:a0:ff:09:8a:93:5c:74:87:6c:4a:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:11:B0:64:E1:8D:2B:55:F2:DE:44:5E:8F:D1:3E:62:4D:E1:1D:CC
X509v3 Authority Key Identifier:
keyid:64:EE:04:89:15:8F:E9:5E:19:91:FD:5C:E7:25:EA:06:7E:11:A1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/18ae02-e72d-4430-85d8-473c5ba55362/1/ZO4EiRWP6V4Zkf1c5yXqBn4Rofs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c0:ae:c7:d7:48:bc:90:4d:03:ed:2a:79:b7:ec:40:2f:55:
6e:53:94:7c:8c:31:e2:bb:e4:7b:54:45:05:44:e4:3b:03:09:
52:3c:f6:a8:ea:0f:b4:19:83:28:72:38:e9:d1:d7:61:9c:10:
33:7e:03:f3:8a:5e:51:71:f2:f0:76:98:e6:8e:c6:d3:0a:02:
bb:ab:c4:91:4a:f8:56:eb:2d:c3:5f:b6:c0:be:70:cd:8a:90:
a6:82:01:48:1c:64:43:70:5d:4a:d8:1c:0e:d9:54:54:d3:d3:
4d:d2:69:cf:21:5e:35:a9:e6:46:75:cd:8b:fd:ce:92:de:b2:
c3:fb:c0:74:91:90:bf:e7:54:a7:d1:4a:29:89:db:db:00:bb:
ae:41:76:14:6e:8b:2d:7e:fd:3b:f4:c8:5f:e6:56:26:d0:b7:
ea:95:f1:06:e4:74:c9:c5:f8:7b:8e:71:a5:e1:92:70:d0:5a:
cb:c6:af:de:ec:93:92:63:b3:54:b9:8b:d5:6c:cb:3c:0a:96:
8c:e9:73:ae:28:45:10:98:41:c9:a5:3f:a8:54:5b:83:d5:52:
ee:fa:64:e6:47:af:4b:c3:25:2f:bd:3c:c7:6f:8a:e2:c3:3f:
32:0e:b0:0b:50:a7:0f:b3:c1:d4:b5:07:d9:32:44:76:2d:8c:
5d:6d:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:37 2025 by rpki-client