Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json)
Hash identifier: mS83p2K1ZfmSN9mzHv7pxEsca/NEH3cnzbabDIRcMOU=
Subject key identifier: 48:8B:0D:B8:ED:7A:B4:06:5C:82:6A:78:70:84:03:21:83:BC:DB:B0
Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Certificate serial: 0194BBCEABEBFAB909F2D080795F91936D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
Manifest number: 0A25
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: /VBPbGV7m/WmhzDOF0HhtEfQ2wnSI+16g2KD4jZ0Plo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ab:eb:fa:b9:09:f2:d0:80:79:5f:91:93:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=488b0db8ed7ab4065c826a787084032183bcdbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:7f:8c:d1:50:26:57:49:73:a9:3c:7e:35:
c2:31:b6:0e:e0:7b:23:30:ec:04:66:2c:34:72:59:
c4:71:3d:b4:24:b3:00:85:b2:77:f2:79:f4:0e:ed:
b9:13:b1:48:c6:7f:83:dc:6c:30:a8:a8:41:b5:4d:
63:96:07:96:eb:c6:9c:f6:50:69:ef:d7:a0:41:a5:
e0:26:d4:26:4f:ce:13:d8:4f:ae:34:e7:bd:99:19:
0c:10:98:5a:2c:29:93:d2:b8:47:3d:16:a9:09:73:
12:f7:27:7b:d6:98:ed:84:56:5a:0c:0c:a0:bd:6f:
25:30:cb:1c:f2:2b:03:98:d1:54:7f:0e:54:11:5e:
8a:0f:a9:37:38:5d:0f:85:17:5e:cd:d6:1d:20:a0:
69:a9:be:59:78:59:d0:b3:b3:34:03:1b:f7:b5:ff:
fb:6c:42:1f:65:44:95:13:d6:11:2a:18:98:83:9b:
f6:a3:ac:25:c4:47:c6:55:b6:02:e0:b7:0f:d8:7a:
5e:1f:9e:6a:e4:f6:57:69:d8:e7:5b:0b:98:df:cc:
bc:a9:0e:7d:d6:30:cc:b2:34:3c:88:3e:75:e1:7d:
58:6b:ee:7c:c9:f1:12:68:57:b0:9c:f2:4a:00:8e:
ab:f2:52:50:49:8c:57:b5:7b:0e:b1:87:43:95:f7:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8B:0D:B8:ED:7A:B4:06:5C:82:6A:78:70:84:03:21:83:BC:DB:B0
X509v3 Authority Key Identifier:
keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cf:2a:0d:ce:ca:51:62:6c:66:a6:4c:85:df:f3:dd:89:b8:
fc:eb:53:50:ee:9e:5a:d5:8e:2b:71:c7:94:36:ec:ea:59:a3:
00:42:73:a1:89:66:15:7d:1b:1d:d7:ad:c8:6a:59:2e:22:5c:
d5:b6:cc:83:0d:56:e1:9f:6a:53:be:e6:63:86:cd:7d:ce:0b:
60:6a:86:16:a1:0b:5e:da:2e:b5:37:f4:04:b0:4a:8d:53:b3:
1a:d1:4f:8f:5b:cc:fa:36:f3:d3:e0:61:75:5f:d8:e8:a0:e2:
2b:ae:05:c6:a1:ab:f9:33:37:4d:61:6d:2b:4e:e3:f0:cd:e1:
75:2b:d6:ce:67:a6:e2:66:5a:7e:38:37:c9:1e:af:08:ad:b0:
07:69:a7:07:d5:13:ff:69:d7:04:16:22:85:a0:94:9b:73:85:
e9:33:68:9a:c4:1b:23:7f:3a:d8:34:ae:05:20:58:dc:fa:bf:
03:ea:cb:90:90:f9:3b:b0:80:e9:89:e8:06:2a:45:16:fe:a0:
c6:d4:06:01:2f:5f:ab:4d:46:fa:3e:71:84:aa:22:f7:1d:72:
25:85:d4:e5:f8:bf:da:e0:d7:88:9c:64:1b:8a:cc:26:b9:08:
e5:dc:66:18:13:76:f3:96:3a:58:ed:e2:bd:bf:01:b0:48:51:
9f:7d:b6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:28 2025 by rpki-client