Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json)
Hash identifier: ksRbkCrg9o1MpzWuhejiSOim99hGEhsaDGS9BHmrfcI=
Subject key identifier: 9C:B4:4B:7B:36:02:70:2F:D7:18:4C:33:D4:47:AA:71:F5:B9:33:56
Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607
Certificate serial: 0194BD174D2049F137815FB21F7A024AB768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
Manifest number: 0A9A
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: fbjFc8Ih/xaEbNndkVTgss1OaNwTOdjBsfZNNFsxBLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:20:49:f1:37:81:5f:b2:1f:7a:02:4a:b7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=9cb44b7b3602702fd7184c33d447aa71f5b93356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:d5:60:96:9d:28:00:32:dd:65:5e:0a:62:
a0:1e:4b:2a:91:8d:3f:8e:32:a7:1b:4d:e8:f4:61:
13:55:d4:43:a9:a9:86:dd:2d:ce:12:d7:f9:76:f7:
db:ef:bd:3d:90:28:ee:ea:e6:e6:7a:9b:51:56:7a:
db:6b:ee:78:0b:2a:d4:15:a6:a7:98:ad:5d:2d:f9:
9b:e4:0b:e1:3e:d9:4b:14:e8:71:d8:28:95:11:b3:
6e:ab:70:b6:33:fc:2e:51:4e:49:3f:8b:43:b0:5d:
80:9e:05:a2:5e:31:3e:b6:3b:2c:ef:3e:cf:e1:21:
80:d7:ff:41:6c:64:65:56:f9:3b:27:db:ca:d2:7e:
07:b4:ae:73:19:45:c9:ca:79:db:c6:d5:ef:98:73:
a9:1b:58:09:3d:e7:6f:df:e0:67:cc:4e:85:3c:86:
0c:14:4c:a6:53:c7:e6:0e:b1:52:97:bc:8f:5e:dd:
37:8d:14:c3:bb:fc:f7:f3:6a:de:76:1f:07:29:29:
51:ed:78:a5:11:9d:8f:92:10:26:64:74:ba:87:22:
f5:e1:1c:12:40:f7:49:15:c8:b7:e5:bf:3d:f7:22:
ef:43:ca:70:e0:40:e4:0c:2c:61:ba:56:87:91:d6:
c6:79:79:ce:1b:fc:b0:a1:7d:69:d2:26:64:77:4f:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:4B:7B:36:02:70:2F:D7:18:4C:33:D4:47:AA:71:F5:B9:33:56
X509v3 Authority Key Identifier:
keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3c:08:9d:26:fe:71:b6:99:7c:6d:db:9a:35:dd:66:bc:43:
08:03:8d:d7:4b:0f:55:a1:29:93:0a:27:0f:b9:0c:66:e8:66:
0d:5a:d2:5f:8a:5e:a9:8e:ef:a9:84:b8:9e:54:20:fc:ae:43:
1c:bf:15:cd:db:8e:fd:9e:60:41:db:49:67:e9:23:72:c1:05:
e9:63:b1:7b:b6:4b:7f:43:15:2a:53:cd:bd:ed:7b:a4:c7:8e:
a4:e5:92:d6:b1:39:92:18:5d:85:0f:d7:93:e7:30:e6:76:1f:
59:b9:81:11:46:1c:a3:46:a7:ac:a1:32:05:ac:dc:12:9e:8d:
df:30:bb:a3:98:98:18:f8:b3:71:1b:1b:48:88:04:e0:3b:a5:
44:e1:ba:b1:7e:0c:38:eb:26:b6:53:e5:2b:ab:58:62:5c:6d:
f2:98:dd:f7:64:cb:70:9b:f4:f7:f2:21:6f:47:8a:da:a1:70:
8f:38:a2:c5:59:82:77:d9:78:89:d2:11:92:e2:60:90:e5:3e:
d2:ad:f4:56:a1:1f:88:43:72:0d:3b:94:dd:88:9b:71:7d:97:
fa:94:3b:3b:f4:7b:33:e1:67:a5:a6:66:02:15:7f:b5:44:66:
30:75:c3:bc:4b:d7:1e:7c:ad:5c:bf:a5:69:dd:9e:76:9a:b8:
4a:a7:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:23 2025 by rpki-client