Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
File: Z6FPJDBIdf8VT-Kysstuugr5RSM.mft (raw, json)
Hash identifier: mkdAkdViCVUC3AYBIXYSu0QdW4aRF68BlQuufobpr3E=
Subject key identifier: 66:3A:34:3F:02:D5:4D:32:3E:53:C2:53:34:E3:F0:58:53:D9:4F:21
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Certificate issuer: /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial: 019541B391BB406C66F7F0607B794696DF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
Manifest number: 1348
Signing time: Wed 26 Feb 2025 10:00:42 +0000
Manifest this update: Wed 26 Feb 2025 10:00:42 +0000
Manifest next update: Thu 27 Feb 2025 10:00:42 +0000
Files and hashes: 1: Z6FPJDBIdf8VT-Kysstuugr5RSM.crl (hash: JcmRjpD0AVTmp3C+xBiHET9pbGqcKTWCKeI94Xa8Ato=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:b3:91:bb:40:6c:66:f7:f0:60:7b:79:46:96:df:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Validity
Not Before: Feb 26 10:00:42 2025 GMT
Not After : Feb 27 10:00:42 2025 GMT
Subject: CN=663a343f02d54d323e53c25334e3f05853d94f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:f6:4a:92:93:61:7b:37:be:e7:c6:04:48:
ba:6e:a0:d9:0d:0d:52:d1:7c:c0:7b:80:2e:1b:50:
a8:a1:b7:68:e1:8d:1f:d2:af:bf:b4:a6:aa:b9:5a:
a2:e2:c1:00:a4:74:bd:03:bc:d3:03:52:0b:04:ac:
93:80:e2:4c:3a:7e:83:e1:4a:88:6f:83:fa:49:7d:
0d:ad:a3:22:5e:71:b5:26:f6:5b:5e:38:d2:19:ef:
17:a7:07:8a:07:59:47:83:75:51:60:12:14:60:da:
8a:9c:52:b0:6f:cd:33:82:6d:2a:a5:6c:78:0c:7a:
4c:f3:60:b4:da:59:3f:91:a1:43:0f:05:d9:c6:29:
c4:7f:71:93:62:d0:5e:21:b1:ba:b6:8e:08:d3:dd:
0f:b8:1a:1e:9f:c2:6a:1d:de:91:5b:77:25:cd:4c:
4e:04:08:a2:c9:95:fc:40:ec:48:21:16:53:f7:c9:
2d:97:89:e0:bb:81:60:04:af:78:3d:12:7d:11:27:
51:29:35:62:c6:c7:c3:4b:46:00:cb:14:fa:62:2b:
5b:91:d3:6b:18:c4:16:ee:51:fe:1b:01:8d:51:bd:
32:f9:c5:de:36:85:af:0a:c1:41:88:a1:0d:d0:8a:
61:4a:92:66:d4:83:6c:ed:49:e4:8f:1f:79:12:dd:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:34:3F:02:D5:4D:32:3E:53:C2:53:34:E3:F0:58:53:D9:4F:21
X509v3 Authority Key Identifier:
keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:5b:1a:02:48:e5:be:5b:74:26:7e:2f:57:06:42:de:a3:
ba:bc:3a:7e:a8:7e:92:f7:b5:43:bf:02:d2:d9:a5:e4:3c:c1:
43:ec:cd:48:03:01:89:21:40:b5:59:e0:79:fb:e6:f7:be:ed:
d6:58:e4:c1:c4:d5:66:d9:48:8b:85:4f:f3:6e:60:02:e8:2b:
74:6e:c9:62:24:51:bf:ee:0e:7c:44:69:be:95:cd:d6:2b:4d:
84:8f:87:af:93:73:f6:3a:62:da:4d:46:df:f1:80:fb:2c:15:
42:a7:7b:cd:6d:89:6c:a9:58:a6:c6:f8:c0:14:e4:c9:71:32:
cc:80:77:1b:c7:77:d4:b7:1d:e4:19:6f:a8:f8:cc:69:87:23:
a4:e7:f5:e4:73:eb:c1:ae:d4:24:45:77:42:2d:5c:16:e7:13:
98:7f:4d:46:c1:00:4a:7d:2e:14:42:b6:42:e0:71:f6:1b:9b:
f9:49:65:7c:c6:3f:41:42:9e:2c:9f:ff:d5:f8:27:8d:5a:61:
7f:cf:c9:7f:69:76:03:fb:2d:d8:f5:4e:9d:40:6a:e6:b0:d4:
bb:18:ee:04:4c:39:2f:28:32:ff:d4:0b:66:d1:0c:04:ae:df:
fe:42:dd:01:a7:40:56:64:bd:df:23:de:9a:94:8e:69:f8:26:
c9:20:7a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:15:35 2025 by rpki-client