Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
File: Z8i133U8dJrleBD52T87pRrgXVw.mft (raw, json)
Hash identifier: js4BJIqkIE3bINAV6XgNVZqqfJxYukq1BjTA8Fkz6NQ=
Subject key identifier: 8B:2C:4A:99:71:6C:98:28:3A:30:A3:C9:49:67:E9:6B:03:76:07:16
Authority key identifier: 67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
Certificate issuer: /CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Certificate serial: 0194BBCE67EEACAC02DB6A85CDAE53143746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
Manifest number: 0D26
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: Z8i133U8dJrleBD52T87pRrgXVw.crl (hash: U532zno2tezzovBMElHkIcqAVY9ZU1Gf8Bl9BlC4ZXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:67:ee:ac:ac:02:db:6a:85:cd:ae:53:14:37:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c8b5df753c749ae57810f9d93f3ba51ae05d5c
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=8b2c4a99716c98283a30a3c94967e96b03760716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:f9:d9:14:0f:65:e8:6f:d8:0c:1b:79:a0:
23:5c:50:b4:09:ba:bf:e0:e5:3c:e2:69:d4:cd:6a:
ff:4e:c7:34:c0:50:fd:0a:9e:ab:db:84:47:e5:e4:
2b:8d:31:bb:76:da:cb:10:39:ef:cf:44:5e:1b:e2:
9f:0f:22:ae:c5:00:72:a1:67:c5:f9:6b:e7:1f:05:
87:ee:0b:9a:5e:12:04:a5:3e:a8:e3:d2:e0:14:60:
a5:be:e5:65:44:c9:26:71:cc:e9:61:07:e0:17:ab:
7e:0c:28:6d:92:2e:69:3a:dc:f5:37:4b:a5:5d:18:
66:a8:59:a5:6c:c4:a3:55:d6:b8:6a:5b:9e:f6:57:
4d:b4:e7:00:05:c7:e6:10:be:d6:84:a5:49:f5:a6:
b2:be:69:bd:06:7c:91:03:21:7a:99:bd:5a:10:93:
f1:d1:a2:1d:b6:d8:37:5a:45:71:8c:7a:b3:70:cf:
9c:db:f2:06:e5:a9:ac:9a:0d:74:cc:17:59:a7:65:
9a:81:d6:71:cc:43:ac:9b:9b:7a:97:80:7d:1c:f1:
20:00:92:92:77:88:ea:11:20:e1:99:10:6a:aa:5c:
8c:7b:9e:1a:2f:09:b9:04:f5:4a:bf:4d:90:9c:8d:
2b:81:46:ac:4d:b9:69:8a:e5:ca:4d:34:39:46:cb:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:4A:99:71:6C:98:28:3A:30:A3:C9:49:67:E9:6B:03:76:07:16
X509v3 Authority Key Identifier:
keyid:67:C8:B5:DF:75:3C:74:9A:E5:78:10:F9:D9:3F:3B:A5:1A:E0:5D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8i133U8dJrleBD52T87pRrgXVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d50be2-b9b6-477b-84fc-fbe47ad62aa5/1/Z8i133U8dJrleBD52T87pRrgXVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:ea:1a:39:9b:5b:a4:37:08:41:2d:fb:0a:83:13:e7:1d:
9d:17:52:d6:48:73:94:89:37:3d:f2:45:4d:7c:b8:a5:c8:45:
e4:7c:64:4c:ef:7a:65:f5:47:c2:af:ad:9d:63:db:31:19:93:
0d:c1:87:62:f4:60:ba:5b:88:68:e1:51:a4:ee:ed:5f:d5:3e:
b1:1c:da:06:29:b3:c6:d8:b8:89:25:1f:b1:3f:e9:66:1a:63:
b5:10:d4:7a:db:fa:8b:c3:1a:0d:cd:d1:12:1e:28:a8:fe:84:
5a:e3:55:d1:f7:3f:ad:db:81:cc:33:8c:f4:47:3d:c9:67:39:
bc:74:b4:26:6a:66:2f:9d:36:c2:cb:8a:ff:6e:e4:2b:d5:ca:
68:5c:1b:e7:6e:ad:63:10:97:fa:9f:c7:2b:77:12:95:6f:c1:
14:78:8e:68:8a:c1:ed:02:d8:71:b2:73:d2:58:93:b9:cf:3e:
e1:c8:e5:87:1e:a0:47:70:3e:22:b3:f5:50:2f:3c:d6:4a:16:
04:95:06:21:44:04:40:45:c7:2d:77:20:2b:81:cd:b5:88:ab:
0f:c2:31:b5:41:60:7e:1b:63:0b:7f:cb:c4:a1:6f:6b:8a:15:
a4:10:7f:38:c6:66:f1:f5:df:7f:fe:3c:34:d3:b9:e8:66:82:
a7:6b:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:44:01 2025 by rpki-client