Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
File: ZZA_X17-WJPdatiYYsRzddMePUA.mft (raw, json)
Hash identifier: mRxxwOa6It4DaL1+zrcLShWoSMy+D2uSr2STEttZnLE=
Subject key identifier: E3:92:82:E5:5A:BD:21:A0:45:08:A9:B5:4D:C1:21:23:DA:D2:BD:46
Authority key identifier: 65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
Certificate issuer: /CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Certificate serial: 0195E159F6451CD04A7C58F2D7B831E9D946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
Manifest number: 0520
Signing time: Sat 29 Mar 2025 10:02:04 +0000
Manifest this update: Sat 29 Mar 2025 10:02:04 +0000
Manifest next update: Sun 30 Mar 2025 10:02:04 +0000
Files and hashes: 1: ZZA_X17-WJPdatiYYsRzddMePUA.crl (hash: /3PCVHzx2kOlvOPoLPTFpdgG0TkjM9M6UqaO56vir/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:f6:45:1c:d0:4a:7c:58:f2:d7:b8:31:e9:d9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65903f5f5efe5893dd6ad89862c47375d31e3d40
Validity
Not Before: Mar 29 10:02:04 2025 GMT
Not After : Mar 30 10:02:04 2025 GMT
Subject: CN=e39282e55abd21a04508a9b54dc12123dad2bd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e2:fa:9a:44:bd:ea:32:00:b6:3c:b9:3a:25:
07:db:c5:f8:1e:23:3c:30:6d:71:ff:6b:6c:1b:94:
d6:a6:19:5d:fb:a6:e5:0d:1d:68:65:07:93:90:02:
31:41:35:89:c2:9b:10:d7:29:88:46:58:2d:ef:16:
54:ed:d1:c0:1f:16:8f:18:58:cd:ca:a5:20:ca:03:
1f:ee:96:ce:61:b7:0b:c5:f3:a6:9a:85:6b:5f:eb:
1a:d1:30:3d:6b:99:d4:ee:55:f6:07:d6:af:3d:56:
46:a0:07:4c:5c:12:6a:16:bd:50:1b:6a:0a:28:00:
fc:4c:1f:13:c7:0a:4c:01:14:45:a0:79:70:3a:6f:
58:36:72:02:43:39:a9:4c:09:f4:fd:c1:35:38:95:
f1:b7:da:8b:4b:e8:11:62:89:d5:cf:ad:f9:4a:ae:
0b:c3:a1:36:15:22:84:ee:68:16:2b:ed:c2:e1:f8:
20:ad:20:9f:7f:7b:57:72:56:06:78:a8:d8:7f:1d:
ac:89:97:c2:64:b2:49:73:cb:92:3e:c5:60:6f:eb:
9e:1a:bb:70:47:8e:12:81:a5:3d:6d:ec:2d:04:fb:
42:69:59:80:d3:0d:79:99:5b:85:bd:07:f8:ea:2d:
06:c2:20:1c:dc:c3:d9:16:84:d6:14:b8:3a:8e:97:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:92:82:E5:5A:BD:21:A0:45:08:A9:B5:4D:C1:21:23:DA:D2:BD:46
X509v3 Authority Key Identifier:
keyid:65:90:3F:5F:5E:FE:58:93:DD:6A:D8:98:62:C4:73:75:D3:1E:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZA_X17-WJPdatiYYsRzddMePUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/caa2e1-521b-4a5a-aa9a-b4b5801eca0d/1/ZZA_X17-WJPdatiYYsRzddMePUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:e7:c0:f5:e2:cc:93:cb:bf:fd:15:cb:f2:45:5d:35:5f:
2a:35:75:6c:1d:f3:c0:bc:d1:5f:7d:3b:0b:45:5d:4a:17:f1:
57:42:36:e9:51:f0:b1:1b:4c:10:da:85:0b:92:13:2c:15:66:
d7:55:30:ee:d1:7c:08:c4:1b:07:7a:62:5e:40:b1:40:d3:c7:
1d:1b:90:37:37:ad:06:bb:27:5e:44:6a:cc:5e:6b:73:11:4f:
ed:60:b7:e4:16:f0:be:26:2a:2d:86:72:4c:db:4f:e7:37:a2:
93:c5:99:d4:c1:d0:59:05:9f:31:7a:81:ca:00:84:14:97:24:
cc:ad:20:4f:7f:45:0d:44:f8:d6:76:16:b7:57:ea:5f:6a:82:
80:84:bf:f6:73:10:8d:c1:c2:27:44:8f:bf:a8:ad:fa:88:9d:
1f:c2:69:1d:89:a0:15:e9:85:f4:26:be:1b:77:3e:79:82:3a:
68:f6:67:dd:37:9e:8c:60:55:e2:99:01:e0:09:b0:dc:b1:0f:
8d:49:36:1b:68:bd:2a:40:c8:3e:b0:24:9a:ed:81:16:bf:49:
09:7c:5f:bf:3f:b9:36:fe:3b:28:d4:e9:12:09:52:19:74:e6:
06:f4:36:fd:20:85:9d:4e:ba:c8:9f:4b:69:35:f8:73:9e:02:
2c:9c:de:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:51 2025 by rpki-client