Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
File: ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft (raw, json)
Hash identifier: k5LFyuJWhdir6WtxU6R5cTOA6yw/mYAnLRl8x33mUl8=
Subject key identifier: C6:AC:2A:34:46:7C:7F:85:6D:52:46:A2:9A:BE:BA:57:71:E2:9F:30
Authority key identifier: 64:11:5A:CD:7C:7D:A0:B7:C0:AB:98:FC:79:C1:9B:74:B5:54:4D:BB
Certificate issuer: /CN=64115acd7c7da0b7c0ab98fc79c19b74b5544dbb
Certificate serial: 019415B9CD4E58E7FB842947737A0CB58489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
Manifest number: 0CA1
Signing time: Mon 30 Dec 2024 04:01:25 +0000
Manifest this update: Mon 30 Dec 2024 04:01:25 +0000
Manifest next update: Tue 31 Dec 2024 04:01:25 +0000
Files and hashes: 1: ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl (hash: 763ygt1xnv2oVQ+ic5ySYma4GqZw1er3P4IlzvuTxvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:15:b9:cd:4e:58:e7:fb:84:29:47:73:7a:0c:b5:84:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64115acd7c7da0b7c0ab98fc79c19b74b5544dbb
Validity
Not Before: Dec 30 04:01:25 2024 GMT
Not After : Dec 31 04:01:25 2024 GMT
Subject: CN=c6ac2a34467c7f856d5246a29abeba5771e29f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5d:bd:8f:88:78:94:8a:95:b5:46:09:12:4d:
1a:63:99:42:4e:17:86:0d:83:91:e3:00:0d:b8:9a:
4a:93:a5:ee:37:b5:dc:df:95:b5:d5:00:03:b1:d1:
07:4a:8f:9e:7e:66:51:5a:5f:b7:3e:39:46:e6:0a:
46:1d:4d:8a:a2:d2:3a:e7:48:bd:9d:88:7f:14:fd:
65:be:59:07:8b:ff:b3:20:83:d3:9e:34:41:7b:27:
52:f7:b4:5c:ed:b8:58:a5:57:34:2b:bd:1e:fa:57:
38:db:ed:f7:d8:e4:13:16:e2:81:28:2f:5a:df:0c:
93:44:8c:60:8b:36:84:13:3e:71:6e:83:da:6c:14:
90:75:27:4e:39:30:33:76:48:9c:a8:c7:28:5a:a5:
89:62:cc:29:16:fc:60:88:08:2d:19:37:4f:b2:8a:
32:30:7a:4c:06:70:55:5d:d8:38:52:e5:cd:b9:fc:
b9:42:b2:a5:3c:94:d1:db:7c:fe:f0:e8:70:a1:29:
b9:ca:eb:7c:74:f7:74:30:0b:91:0d:1c:ed:63:30:
94:2e:13:7c:24:99:cb:38:0b:21:18:1d:53:dc:87:
04:8b:1c:39:51:c5:6f:aa:b6:50:33:a8:db:65:93:
64:0b:8e:50:f9:81:9a:95:a6:4b:bf:8c:cc:d4:f1:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:2A:34:46:7C:7F:85:6D:52:46:A2:9A:BE:BA:57:71:E2:9F:30
X509v3 Authority Key Identifier:
keyid:64:11:5A:CD:7C:7D:A0:B7:C0:AB:98:FC:79:C1:9B:74:B5:54:4D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBFazXx9oLfAq5j8ecGbdLVUTbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2228c5-daae-4a1c-9421-5dfa79747989/1/ZBFazXx9oLfAq5j8ecGbdLVUTbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:87:4c:b5:85:47:22:9b:78:4d:16:a7:fb:72:38:49:60:42:
54:9d:dd:70:9b:d6:a9:48:f4:be:79:33:9a:dc:83:80:fb:07:
4f:6e:72:b7:a9:9c:3c:81:e7:0d:b5:ee:62:3c:bb:25:40:6f:
b8:4a:2d:6b:39:13:03:0a:02:90:8d:96:cd:20:eb:e0:3a:3e:
73:dd:5d:ad:aa:16:5f:3e:b3:19:8f:e7:44:a2:6f:ba:2b:83:
a5:69:0c:24:62:ee:cf:9b:e9:56:d3:d7:90:99:ee:76:17:60:
3f:c1:e5:73:4e:dd:4e:f2:73:a6:0d:2a:95:f5:5d:68:2d:03:
cc:20:c4:a0:57:02:0c:95:5a:2a:a9:61:3f:31:8d:ac:13:66:
49:38:68:e7:7c:c9:fe:c9:2c:72:bf:36:cb:a2:a3:d2:ce:2b:
45:2e:ce:05:4d:c7:6a:57:1b:dc:03:3a:4e:e3:a3:8d:dc:1e:
39:d6:4c:c3:31:44:9b:87:7a:10:e2:7c:1e:08:cc:23:eb:32:
a6:11:51:5b:af:78:98:e3:7d:6c:f9:0d:bf:03:40:1d:f4:ab:
94:b0:e4:28:00:6c:b7:27:e7:22:39:24:45:d4:a9:18:3b:8a:
49:b4:73:92:51:96:e5:0b:b4:92:a8:c5:d3:cf:f2:0c:39:14:
a8:3e:d4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:14:33 2025 by rpki-client