Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5ad76a-3b9e-4417-9e7d-0297d4338473/1/ZuqHup0hwM7iok8VrPdPV7eSSVw.mft
File: ZuqHup0hwM7iok8VrPdPV7eSSVw.mft (raw, json)
Hash identifier: SaXJzEEKieS+upzspuuXdbuBRAgdZz69jeXLASJkx7s=
Subject key identifier: 33:EF:B6:AD:53:43:AF:3F:A3:0F:32:4B:90:23:BF:55:A9:87:A6:C3
Authority key identifier: 66:EA:87:BA:9D:21:C0:CE:E2:A2:4F:15:AC:F7:4F:57:B7:92:49:5C
Certificate issuer: /CN=66ea87ba9d21c0cee2a24f15acf74f57b792495c
Certificate serial: 0194BCE0930B564C53BDAB61DBBB15839246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuqHup0hwM7iok8VrPdPV7eSSVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5ad76a-3b9e-4417-9e7d-0297d4338473/1/ZuqHup0hwM7iok8VrPdPV7eSSVw.mft
Manifest number: 02BA
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: ZuqHup0hwM7iok8VrPdPV7eSSVw.crl (hash: bW1GppFq09EiiEkVNvXVAMwyTdw3gMiZhpbuoOFUDaQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:0b:56:4c:53:bd:ab:61:db:bb:15:83:92:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ea87ba9d21c0cee2a24f15acf74f57b792495c
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=33efb6ad5343af3fa30f324b9023bf55a987a6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a7:fa:ab:a9:8f:ea:e8:61:fd:bc:de:64:4d:
99:d7:f9:2c:09:51:fb:f3:90:5f:18:8e:dc:03:99:
2e:cf:b4:b3:b0:88:50:ef:c0:ac:88:46:38:20:5a:
27:be:85:c8:96:ae:c2:d5:f1:32:14:2c:0a:55:d2:
ea:ab:7f:75:01:50:cc:fd:af:02:cd:49:c8:0a:b0:
ea:a8:ea:f8:56:bd:bf:ce:53:fd:71:5e:ab:61:1a:
df:fc:a1:a7:c0:1a:67:8c:7b:77:6b:8f:35:20:cc:
2f:e4:db:03:7d:2d:65:a6:1f:d7:54:50:5a:5a:2e:
95:58:08:68:c8:c1:60:3f:54:2e:41:cb:d3:00:d0:
c8:7d:67:24:fa:97:34:b5:07:29:fb:d7:84:a3:7b:
c5:10:55:84:f5:ec:d6:a3:99:2c:76:b7:5d:3a:d0:
08:34:83:60:cd:3b:6a:d8:a1:e4:d7:ee:5a:7a:46:
75:4c:f0:9a:1d:da:45:35:2b:8f:bd:25:33:b1:cf:
2a:03:d3:ff:1c:8f:23:9a:df:4c:72:f2:45:ad:f3:
29:b5:36:f5:e9:b8:9b:6c:98:8b:fb:ad:d7:6a:da:
98:3d:61:d0:08:38:6d:da:45:6f:ea:15:f3:55:3f:
81:38:0f:73:e5:59:08:5a:c5:f6:26:f1:fb:69:f3:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:B6:AD:53:43:AF:3F:A3:0F:32:4B:90:23:BF:55:A9:87:A6:C3
X509v3 Authority Key Identifier:
keyid:66:EA:87:BA:9D:21:C0:CE:E2:A2:4F:15:AC:F7:4F:57:B7:92:49:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuqHup0hwM7iok8VrPdPV7eSSVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5ad76a-3b9e-4417-9e7d-0297d4338473/1/ZuqHup0hwM7iok8VrPdPV7eSSVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5ad76a-3b9e-4417-9e7d-0297d4338473/1/ZuqHup0hwM7iok8VrPdPV7eSSVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:58:83:04:f5:74:20:f5:f6:0f:57:d0:04:10:33:2b:bc:69:
98:75:eb:4e:fa:6e:04:6a:44:f4:ff:83:5f:3e:9f:0c:b8:66:
de:cd:00:d4:5e:c9:52:ff:d4:b7:50:27:fe:02:e8:f6:a1:aa:
54:f5:6e:4f:72:55:3b:66:f8:36:f8:53:f1:aa:cb:9a:d9:00:
58:64:69:4e:94:d3:c7:a1:2f:7c:ff:b7:1e:31:15:61:07:e1:
c5:19:0f:c5:90:da:90:5d:29:fc:f9:0f:72:2d:96:a3:0f:ec:
53:35:c1:6e:43:ea:a8:f1:cb:ff:0f:d1:7a:6c:f3:13:7d:b8:
bc:b8:c8:5f:23:7e:79:da:74:27:69:bd:1e:70:41:68:9e:03:
7b:ef:7c:77:79:a5:2b:99:98:6c:12:45:98:c2:0a:fa:63:1d:
ac:c6:ae:7a:9e:aa:8b:98:93:1c:2d:46:ec:70:c5:f7:55:bc:
36:98:56:06:fe:85:e3:18:fe:83:5b:16:f5:85:1e:77:4b:ed:
0c:43:3f:f2:74:80:73:e9:27:56:9d:9a:77:0a:38:8d:f8:42:
c8:2b:f5:03:46:96:9f:5f:63:6e:44:56:04:a1:b9:98:ef:f3:
fa:40:61:25:35:6b:b2:c7:d5:5d:ef:4a:91:c1:c1:31:69:eb:
5f:d1:3e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:33 2025 by rpki-client