Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: /xVjqLixa7NwllNXRYqPhYr7qFv62IJUiHeaD14DNxs=
Subject key identifier: C5:5C:95:D6:E1:E1:2E:C4:FB:30:FA:CC:27:96:46:E4:86:61:BA:13
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 0194BBCE4B880A5D88784442346B7F713BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0B5E
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: p6uWUk0oi/v0/gY8Obdi8imAgmUrcxNmx1dtLhr2Qo4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4b:88:0a:5d:88:78:44:42:34:6b:7f:71:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=c55c95d6e1e12ec4fb30facc279646e48661ba13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:6c:14:eb:94:bd:85:82:10:2e:60:3b:2e:
6f:08:c3:04:02:b9:74:ca:e0:29:a6:ea:ac:c2:05:
65:7c:f8:fb:9e:4f:06:c0:8c:23:4c:5e:a5:2f:d4:
a0:86:e0:b8:07:2c:70:2c:5a:98:02:fc:8c:b7:bb:
8c:da:76:b8:63:3a:28:fd:72:16:1e:70:13:f0:f9:
38:80:40:05:47:49:77:8f:fe:ce:10:0a:2e:44:85:
6c:b4:8c:c8:52:7b:06:28:aa:f5:bd:25:28:0c:a8:
0d:e9:dd:f3:0f:82:55:22:fe:6f:44:ca:b9:92:59:
8a:9f:0a:dd:65:d8:8c:95:6c:aa:6a:bb:f5:b1:3d:
6a:cd:df:a6:c5:b5:62:9f:8c:81:d0:fd:c3:05:ed:
80:c6:d1:96:f1:52:eb:cb:66:eb:b2:fd:7a:67:25:
c8:7c:5a:79:29:d5:bd:37:39:20:2b:2e:c8:f5:b0:
99:88:7a:0a:7e:e5:bd:c5:12:db:ef:44:ee:73:55:
a8:b4:80:61:3f:fe:0d:9f:58:13:6a:6e:20:cb:85:
6e:68:09:64:09:3c:a1:a7:b2:52:da:25:58:c5:7d:
fd:fd:7a:5a:39:1d:15:46:60:c1:cb:73:2d:dc:36:
6f:70:db:8a:b9:f4:0c:2a:1c:c9:8c:52:d8:bd:48:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:95:D6:E1:E1:2E:C4:FB:30:FA:CC:27:96:46:E4:86:61:BA:13
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b2:cd:bb:ac:06:6f:81:a5:0b:95:42:d6:28:fc:74:9d:d9:
f8:97:f5:66:7e:47:8a:de:3c:3e:70:ab:f9:f6:5e:80:1c:a2:
d5:a1:a1:e3:c3:3d:c8:f3:cd:51:8a:50:b8:59:f9:a1:0e:e7:
6f:01:c6:6c:f5:e7:42:6b:f3:7d:48:60:f2:2e:18:a4:e1:ee:
61:a4:ea:82:df:93:2f:98:a0:62:b9:31:01:f5:44:d3:f1:2f:
60:71:ea:5a:40:01:ca:51:96:98:1d:0e:39:a8:d5:b7:ab:f6:
19:52:1b:e0:9c:a7:69:aa:dc:06:77:69:04:d3:08:50:55:f5:
05:ef:3a:83:31:55:c6:5f:32:11:da:2d:d9:da:68:02:d9:58:
94:21:11:7d:09:39:03:e2:51:86:93:5c:04:92:4d:5b:71:33:
fd:d4:c3:38:ea:31:26:87:18:a6:c8:2d:7e:33:2d:dc:a0:f7:
ef:71:0c:50:f2:49:ec:d9:4e:73:56:2d:5b:b3:0b:3f:74:44:
d2:17:35:e1:68:f5:77:70:16:c5:95:25:fb:07:93:6e:b9:bf:
f8:3c:5e:df:f5:6b:98:d4:85:16:e9:92:0d:be:a5:44:fe:11:
47:59:6f:28:ad:87:14:9b:e9:4c:0c:f3:b0:f0:58:21:81:82:
d9:b0:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:02 2025 by rpki-client