Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/665cd3-2789-46e9-9f42-4b1e0f0c5644/1/ErZkZumSPA88MycasXt_j9DSSqs.mft
File: ErZkZumSPA88MycasXt_j9DSSqs.mft (raw, json)
Hash identifier: sG5nkJwTlcf6C27ki+QBGYD1J3+Cg7M1GQXgnqSUFC0=
Subject key identifier: BE:B4:3F:3D:0E:9B:15:93:22:CC:D1:71:F6:51:2F:EE:FF:43:9C:3B
Authority key identifier: 12:B6:64:66:E9:92:3C:0F:3C:33:27:1A:B1:7B:7F:8F:D0:D2:4A:AB
Certificate issuer: /CN=12b66466e9923c0f3c33271ab17b7f8fd0d24aab
Certificate serial: 01955F5001450240F2190FFA93EB3801162D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErZkZumSPA88MycasXt_j9DSSqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/665cd3-2789-46e9-9f42-4b1e0f0c5644/1/ErZkZumSPA88MycasXt_j9DSSqs.mft
Manifest number: 0CAB
Signing time: Tue 04 Mar 2025 04:00:33 +0000
Manifest this update: Tue 04 Mar 2025 04:00:33 +0000
Manifest next update: Wed 05 Mar 2025 04:00:33 +0000
Files and hashes: 1: ErZkZumSPA88MycasXt_j9DSSqs.crl (hash: 3LBpjoB6fASKKGwBmFUEu+scLnd4tyQ5oiAs6ZGmPMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:50:01:45:02:40:f2:19:0f:fa:93:eb:38:01:16:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b66466e9923c0f3c33271ab17b7f8fd0d24aab
Validity
Not Before: Mar 4 04:00:33 2025 GMT
Not After : Mar 5 04:00:33 2025 GMT
Subject: CN=beb43f3d0e9b159322ccd171f6512feeff439c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:84:3f:73:e0:a8:71:72:9d:97:98:26:cd:
77:43:de:80:b1:d0:99:e9:31:bf:cb:d2:0f:62:8e:
6a:77:8a:3d:3b:e6:d2:e6:a3:70:4a:a0:ab:1d:ff:
fc:bf:0c:1b:45:91:a4:ae:de:ec:48:2d:3e:62:d2:
d0:21:89:8f:45:eb:8c:f5:24:2a:f8:b2:57:5d:e5:
ca:c6:48:5b:a1:35:bf:ac:96:44:7e:86:c9:39:36:
75:58:61:81:98:8d:70:48:4d:d7:a8:d7:83:de:f1:
25:55:ff:b5:ff:a3:e9:2a:f7:62:a5:ef:bc:c1:eb:
89:8a:41:fb:d6:2e:4c:9e:fe:71:a9:86:78:b0:b3:
c7:a8:aa:b4:42:98:6e:99:9b:b8:3a:ff:b2:9f:c9:
00:dd:4c:21:de:e4:75:fc:f4:e6:9b:18:e8:ef:c1:
85:5e:9e:aa:3b:b9:24:75:ba:ae:19:99:75:2d:b2:
90:cc:e2:50:f0:28:83:d4:fd:a9:7d:19:c8:0e:b5:
a3:0f:21:58:9f:56:86:3c:ac:43:7d:74:1e:d8:09:
d9:86:dd:1f:6e:f9:ad:d3:8f:2c:e2:63:79:75:45:
b0:86:87:64:ef:7a:ae:b1:a5:c0:e1:6e:26:89:82:
09:ee:a4:a1:94:c5:08:a4:c7:80:ee:99:10:6e:e9:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:3F:3D:0E:9B:15:93:22:CC:D1:71:F6:51:2F:EE:FF:43:9C:3B
X509v3 Authority Key Identifier:
keyid:12:B6:64:66:E9:92:3C:0F:3C:33:27:1A:B1:7B:7F:8F:D0:D2:4A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErZkZumSPA88MycasXt_j9DSSqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/665cd3-2789-46e9-9f42-4b1e0f0c5644/1/ErZkZumSPA88MycasXt_j9DSSqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/665cd3-2789-46e9-9f42-4b1e0f0c5644/1/ErZkZumSPA88MycasXt_j9DSSqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:62:aa:3e:26:6d:a9:2a:62:05:e3:53:36:4f:00:e2:76:9a:
e7:c5:1c:31:a8:5a:00:f9:ba:ca:15:a9:90:08:a6:00:31:25:
91:89:b4:8e:c0:91:b3:d2:1e:b2:0b:f8:61:c7:fd:ae:65:7e:
00:0a:ab:4c:b3:8a:63:f8:ca:fa:50:d4:cb:ed:e5:48:1f:51:
64:e1:61:c8:9d:8b:d8:9f:00:f0:56:35:8b:fc:ec:34:d1:02:
26:99:81:4a:3e:64:ae:1a:54:ed:92:f7:08:ec:80:9c:57:5b:
59:bf:0b:05:1f:7a:89:48:43:6b:cd:0b:ba:ba:ca:ad:6c:6b:
1f:c1:6e:6c:16:df:41:f3:65:10:d5:5f:24:36:65:0d:4e:e7:
0b:8c:67:de:50:e7:e1:0b:97:25:c8:37:5c:60:72:15:23:3b:
ce:a6:74:50:ad:90:04:2f:e4:d4:c0:84:26:53:3c:59:69:a2:
c4:20:41:ee:30:e0:03:19:7b:b4:2e:cf:c8:aa:73:3f:b2:07:
db:34:90:84:a1:07:21:92:93:58:f8:e3:db:66:95:13:ac:ab:
85:81:11:c5:76:7a:a7:53:2a:81:26:39:31:7b:85:82:9b:fe:
fc:b9:03:12:14:0b:a2:c2:1c:55:4e:a3:9f:2f:38:46:c4:01:
2d:02:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:53 2025 by rpki-client