Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/356f20-226e-4339-9d40-65de97e2757c/1/z11k85hBuOQkhzhDPDUl0qRHzV0.mft
File: z11k85hBuOQkhzhDPDUl0qRHzV0.mft (raw, json)
Hash identifier: x66D9SYVoH+J08NTBg4IUWROBE8IdCGfYb6P3uWKktc=
Subject key identifier: 59:07:2A:EC:2E:6B:AD:CC:88:9A:F8:70:34:86:A8:45:14:5F:3C:E1
Authority key identifier: CF:5D:64:F3:98:41:B8:E4:24:87:38:43:3C:35:25:D2:A4:47:CD:5D
Certificate issuer: /CN=cf5d64f39841b8e4248738433c3525d2a447cd5d
Certificate serial: 01944036573F4406A0ED62F67A4A1D77A2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z11k85hBuOQkhzhDPDUl0qRHzV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/356f20-226e-4339-9d40-65de97e2757c/1/z11k85hBuOQkhzhDPDUl0qRHzV0.mft
Manifest number: 0F4F
Signing time: Tue 07 Jan 2025 10:01:30 +0000
Manifest this update: Tue 07 Jan 2025 10:01:30 +0000
Manifest next update: Wed 08 Jan 2025 10:01:30 +0000
Files and hashes: 1: z11k85hBuOQkhzhDPDUl0qRHzV0.crl (hash: EHL1z0PFIdQK97KULQuJKN/3sCcq3k/fwef3atabgRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:36:57:3f:44:06:a0:ed:62:f6:7a:4a:1d:77:a2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5d64f39841b8e4248738433c3525d2a447cd5d
Validity
Not Before: Jan 7 10:01:30 2025 GMT
Not After : Jan 8 10:01:30 2025 GMT
Subject: CN=59072aec2e6badcc889af8703486a845145f3ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:42:21:84:57:94:9b:8b:e9:be:ee:bd:79:
28:25:2f:6b:be:30:24:87:5a:2e:15:59:1f:24:90:
a6:77:b5:4a:e2:44:65:c9:1b:22:2f:4a:a1:70:32:
67:ca:dc:73:8a:c5:ca:77:1e:df:ca:f0:0a:d8:19:
f5:62:5d:55:f5:6c:c1:21:ad:41:1f:46:c7:fe:cd:
2d:87:ba:ea:99:84:bb:54:8d:dd:70:d8:41:59:b7:
27:25:8d:f6:66:cf:2d:aa:f7:31:cd:09:49:fc:a5:
f3:c6:84:16:ca:54:f5:1e:c2:fa:f1:47:f6:e9:0f:
bc:11:de:14:4e:44:5c:5a:de:e0:af:15:b7:67:93:
1d:5c:78:23:07:82:e8:89:ab:c1:76:e3:ab:77:2a:
12:c0:91:88:64:3c:d1:63:36:f5:7b:f2:c0:86:2a:
f2:7b:6e:22:4a:f5:57:b7:2f:3e:7f:e8:bd:f4:d2:
92:33:24:e4:5c:8d:5e:c4:08:1c:73:9e:cf:45:71:
f4:92:89:a8:24:05:62:d1:58:e1:2c:d6:0e:ff:25:
4c:6c:bb:7f:fa:59:c0:6a:b6:38:4b:17:99:2b:6f:
ca:06:6f:12:85:8e:4a:7a:ec:31:0f:ea:b7:ff:fb:
5b:7a:a3:80:9e:35:66:b4:24:55:76:23:4b:78:03:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:07:2A:EC:2E:6B:AD:CC:88:9A:F8:70:34:86:A8:45:14:5F:3C:E1
X509v3 Authority Key Identifier:
keyid:CF:5D:64:F3:98:41:B8:E4:24:87:38:43:3C:35:25:D2:A4:47:CD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z11k85hBuOQkhzhDPDUl0qRHzV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/356f20-226e-4339-9d40-65de97e2757c/1/z11k85hBuOQkhzhDPDUl0qRHzV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/356f20-226e-4339-9d40-65de97e2757c/1/z11k85hBuOQkhzhDPDUl0qRHzV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:51:4e:c9:3e:8e:67:3d:60:69:9d:c5:9b:1a:2f:67:ac:70:
85:3c:aa:77:9f:a1:63:e8:09:90:3d:72:12:52:f9:76:ec:b8:
ae:37:8b:87:39:ee:f5:8b:00:4e:8c:f4:ba:ff:ee:40:39:19:
a5:b9:8b:0f:5f:1b:2c:04:37:8e:af:a3:f3:5d:d6:38:11:a3:
45:45:d2:e5:69:09:cf:a6:e4:db:2f:9c:b5:b7:8b:7e:3f:c0:
ac:8e:05:6f:60:31:34:cd:e7:a4:be:d8:ae:d2:2d:fe:83:35:
77:2c:ec:40:f5:72:b1:e6:6b:a0:bd:c7:dd:f7:39:c1:e9:11:
2b:3a:b6:68:01:76:7a:20:c4:05:4c:62:da:3f:27:6f:8c:8c:
df:4e:33:3d:ac:02:21:12:72:7e:00:2c:0d:35:0e:0c:46:64:
e7:b7:83:36:b4:56:65:ea:f5:2e:7e:20:3a:86:91:17:7d:fe:
35:0f:06:85:d3:ec:7d:34:5d:80:2a:d4:c3:dc:9f:f9:e2:d4:
98:3e:0a:94:c7:e7:c9:34:77:6a:4a:e9:7d:f0:ef:80:c9:b2:
54:88:35:8d:90:16:03:a9:b1:5d:e6:be:67:53:4e:8e:6f:c0:
cd:26:23:5e:e6:d7:70:55:15:6d:32:0b:3d:08:07:d1:8d:89:
93:9f:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:28:19 2025 by rpki-client