Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/995c6d-da69-4238-88f7-74d232b92266/1/ZWZEuh8QwvJfkc9lgx66JLTqbWk.mft
File: ZWZEuh8QwvJfkc9lgx66JLTqbWk.mft (raw, json)
Hash identifier: bG6vlWdq2VQ5BbI/SGv2KcZ72WNSC6iXg6EQHRv/CoQ=
Subject key identifier: 8F:E0:D0:02:EE:A3:4E:0B:79:F5:AD:E7:A7:CA:D3:1E:E4:64:AC:F9
Authority key identifier: 65:66:44:BA:1F:10:C2:F2:5F:91:CF:65:83:1E:BA:24:B4:EA:6D:69
Certificate issuer: /CN=656644ba1f10c2f25f91cf65831eba24b4ea6d69
Certificate serial: 0193E8A9668284180837D393A334D1A766EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWZEuh8QwvJfkc9lgx66JLTqbWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/995c6d-da69-4238-88f7-74d232b92266/1/ZWZEuh8QwvJfkc9lgx66JLTqbWk.mft
Manifest number: 06CE
Signing time: Sat 21 Dec 2024 10:00:36 +0000
Manifest this update: Sat 21 Dec 2024 10:00:36 +0000
Manifest next update: Sun 22 Dec 2024 10:00:36 +0000
Files and hashes: 1: ZWZEuh8QwvJfkc9lgx66JLTqbWk.crl (hash: oTXpqFqyhuw7n2dG5fQhxLgmkO6CrbSMZRLDm3p0uQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e8:a9:66:82:84:18:08:37:d3:93:a3:34:d1:a7:66:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656644ba1f10c2f25f91cf65831eba24b4ea6d69
Validity
Not Before: Dec 21 10:00:36 2024 GMT
Not After : Dec 22 10:00:36 2024 GMT
Subject: CN=8fe0d002eea34e0b79f5ade7a7cad31ee464acf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:4e:ae:7a:c2:cc:89:43:fa:98:0f:55:b8:
c9:09:a4:ac:4c:89:b2:d1:ce:e1:6f:ad:b9:2b:8e:
c0:72:90:83:c2:c8:75:11:9c:a2:8f:96:22:82:b0:
b2:bc:05:cd:b1:d4:43:74:c2:57:4f:dd:3c:0d:e1:
2b:a8:05:1d:ec:46:ea:68:a2:65:5e:68:ab:fb:d4:
95:bf:0c:c6:81:ab:c5:5b:10:69:87:fc:57:e4:e2:
f0:8b:cf:f3:73:c4:74:b0:52:7e:85:39:92:61:14:
41:e7:36:11:3d:b6:00:72:f9:b5:25:41:cc:d0:67:
d4:c9:f4:df:ad:ac:1d:4a:e2:ee:df:ad:71:24:3b:
82:cd:cf:f3:83:1b:b9:7a:d6:d2:12:e6:6b:e0:e0:
d0:e7:3c:b0:b1:a1:b8:ab:75:58:19:a7:9e:1a:59:
a8:1a:89:e2:f5:e5:47:fe:b7:f3:a7:36:9d:73:d2:
99:d4:b3:dc:b6:2b:ae:c0:43:55:dd:78:dc:7a:b6:
f8:90:3d:c5:80:d3:63:7b:37:d4:7e:47:f9:b1:c0:
ed:c1:8e:f2:c0:9f:36:31:a7:ea:d8:01:8c:44:82:
54:e4:62:23:31:e9:63:d1:7e:9c:49:c5:80:ad:8a:
3c:60:c5:c0:ff:fd:7a:01:41:19:15:1b:3a:24:23:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E0:D0:02:EE:A3:4E:0B:79:F5:AD:E7:A7:CA:D3:1E:E4:64:AC:F9
X509v3 Authority Key Identifier:
keyid:65:66:44:BA:1F:10:C2:F2:5F:91:CF:65:83:1E:BA:24:B4:EA:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWZEuh8QwvJfkc9lgx66JLTqbWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/995c6d-da69-4238-88f7-74d232b92266/1/ZWZEuh8QwvJfkc9lgx66JLTqbWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/995c6d-da69-4238-88f7-74d232b92266/1/ZWZEuh8QwvJfkc9lgx66JLTqbWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:11:a3:7f:a7:63:bf:71:a9:de:66:50:f1:99:00:79:b5:17:
c4:ec:a5:6d:e8:fa:e6:63:39:1e:67:07:48:bc:b3:45:0a:8b:
09:45:33:8d:d2:cc:a0:90:48:80:46:72:75:08:8a:b1:19:79:
d3:bd:63:fe:61:d4:14:c4:18:ea:35:09:4b:8c:3c:f1:71:b9:
54:70:4d:0d:0d:ec:34:0c:fb:ad:dc:25:4c:fa:4e:10:7e:44:
82:48:17:f9:70:3e:43:fc:98:5c:f3:22:f1:66:8d:de:70:f8:
96:78:6c:05:ac:82:81:3f:f3:63:85:1c:90:08:f2:c6:9a:4f:
16:f5:37:1b:99:bc:ba:d4:c7:f9:3e:49:a2:f0:ed:44:e6:ca:
45:5e:9b:76:59:2a:09:9b:21:d0:3b:a0:0d:5b:9f:7c:e1:b6:
ba:5e:d0:89:36:34:d9:1b:03:c5:ac:93:66:b5:0a:1a:2d:fa:
5f:e7:e2:98:29:21:65:fa:5a:ce:c3:99:df:9b:ba:a8:8f:1a:
48:4a:bd:91:60:26:71:1a:2a:18:48:a0:ad:d0:c9:89:9a:8e:
d2:b4:a0:0b:d8:9c:67:3e:14:5b:b4:7a:e6:f3:3b:db:b6:8b:
e7:97:ae:8a:be:b3:59:68:65:28:36:d5:a3:45:08:fe:6b:c2:
b9:10:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:56:17 2025 by rpki-client