Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft
File: zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft (raw, json)
Hash identifier: 28jlscEMqTblRjDw0T3mWQ2JMdFUNgd3aL/xdm0Qnfw=
Subject key identifier: 3D:AC:CE:AF:2A:43:F1:F1:70:C0:F1:EA:AF:68:D9:83:FA:E9:85:B7
Authority key identifier: CC:A3:AF:4D:D5:6A:01:97:C5:73:07:61:60:6D:AE:52:7D:E0:92:65
Certificate issuer: /CN=cca3af4dd56a0197c5730761606dae527de09265
Certificate serial: 0195A19E5395F304ADAE59E48FCBAC270492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKOvTdVqAZfFcwdhYG2uUn3gkmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft
Manifest number: 07B2
Signing time: Mon 17 Mar 2025 01:01:02 +0000
Manifest this update: Mon 17 Mar 2025 01:01:02 +0000
Manifest next update: Tue 18 Mar 2025 01:01:02 +0000
Files and hashes: 1: zKOvTdVqAZfFcwdhYG2uUn3gkmU.crl (hash: sXLBtvmt3WERVtdeCBY61lKKzrY1IhxxbL0+i5mDApo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a1:9e:53:95:f3:04:ad:ae:59:e4:8f:cb:ac:27:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cca3af4dd56a0197c5730761606dae527de09265
Validity
Not Before: Mar 17 01:01:02 2025 GMT
Not After : Mar 18 01:01:02 2025 GMT
Subject: CN=3dacceaf2a43f1f170c0f1eaaf68d983fae985b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:1f:ff:d4:74:15:4f:3f:78:a4:93:e7:ab:
14:c0:e4:2c:3e:23:f1:3f:fb:9e:23:46:37:c6:63:
02:49:0b:76:b9:80:16:87:7d:b5:8c:ca:c6:7c:06:
b7:99:e9:1e:2e:ae:c6:1e:da:6d:1d:09:ae:8c:49:
c8:e8:b7:5c:1d:77:05:4a:c8:f4:2a:fe:d0:6e:11:
5b:00:6d:e2:b2:fe:4f:33:a0:c5:ed:28:29:0f:e5:
13:08:97:04:ac:d2:fe:d0:5d:47:bc:3f:21:68:02:
29:a0:1a:d0:80:8d:6d:d5:a5:f7:a4:26:f9:d0:fd:
02:ac:f5:9d:1d:8a:4c:cc:ad:04:7b:3b:d3:0b:32:
c6:78:76:52:02:ae:a8:bf:e3:80:8b:27:5f:5e:8f:
d6:08:ef:00:b5:9e:02:95:13:42:1d:3a:e7:ef:2e:
2d:df:89:92:6b:38:00:dd:81:f6:d3:9b:63:3d:35:
50:82:59:82:67:a2:34:e4:7f:52:0c:39:e9:8f:01:
df:e8:02:6e:0e:56:11:c5:89:0b:e3:fb:21:a5:fe:
7e:32:d3:5f:b4:b2:ea:81:50:52:86:e9:61:d1:78:
1d:8f:e8:ba:b9:dc:55:84:24:91:e7:af:56:cf:a5:
5f:54:b3:15:b9:81:8b:60:07:94:e3:73:c9:5f:e9:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AC:CE:AF:2A:43:F1:F1:70:C0:F1:EA:AF:68:D9:83:FA:E9:85:B7
X509v3 Authority Key Identifier:
keyid:CC:A3:AF:4D:D5:6A:01:97:C5:73:07:61:60:6D:AE:52:7D:E0:92:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKOvTdVqAZfFcwdhYG2uUn3gkmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/132d65-5b93-4930-a2e0-f35a3007fd32/1/zKOvTdVqAZfFcwdhYG2uUn3gkmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c9:6d:ce:13:ea:5e:38:ad:ec:4a:15:40:87:fc:a7:71:8f:
0d:9d:04:a0:d9:90:e3:84:7a:73:e1:92:c6:ca:79:41:d3:9b:
df:7d:a8:2b:2e:6a:0d:77:20:13:84:53:0f:63:2b:b1:07:1e:
0e:42:81:dd:a3:b6:71:33:28:80:64:c0:f3:0e:a1:ae:aa:de:
13:63:0a:66:79:95:55:51:b4:d5:94:e3:13:18:e2:01:48:95:
c4:64:74:87:3b:ab:f0:c8:73:46:6c:e0:74:d6:10:5d:1a:6a:
9a:20:5b:96:f0:c4:d5:50:ad:7b:fd:cf:3b:f7:14:9a:a8:ff:
24:32:1c:36:7f:20:5a:ae:c7:9c:34:63:cb:e8:d1:c1:ff:e6:
da:d6:3b:ba:28:45:6c:d7:ac:fa:0b:72:56:d8:48:79:e5:15:
4f:8f:48:41:43:e1:fc:cf:5f:91:52:e5:e2:2e:7b:63:f9:27:
e3:22:8c:b3:b7:1d:83:05:f7:d2:5d:bb:d4:fa:c2:46:fe:bf:
38:c3:4c:53:de:d4:c5:02:94:59:a9:dc:8d:64:4b:83:8f:85:
cb:f6:af:1c:e8:8f:1c:9d:ee:ca:c4:cf:8d:ee:7b:18:86:0b:
84:59:a5:13:c6:32:ea:ff:b4:6f:2b:95:06:b6:d3:02:5a:80:
2c:c8:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:33:34 2025 by rpki-client