Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8b3c40-daf4-49b4-b7a1-ed5e4c094391/1/ZRH8QwkZMW3L0MQSUaGSeU1Ee7k.mft
File: ZRH8QwkZMW3L0MQSUaGSeU1Ee7k.mft (raw, json)
Hash identifier: ArjloCCDCfr4cFhLPK/WxE8hRQeOBZBz2P6cBrPNZ+s=
Subject key identifier: E1:F6:E0:6B:EC:CE:E3:6A:DC:66:B0:3B:40:D4:7C:C4:FF:02:F2:24
Authority key identifier: 65:11:FC:43:09:19:31:6D:CB:D0:C4:12:51:A1:92:79:4D:44:7B:B9
Certificate issuer: /CN=6511fc430919316dcbd0c41251a192794d447bb9
Certificate serial: 0194A68FE9CEC4CA62E112DDAF6A1C54415C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRH8QwkZMW3L0MQSUaGSeU1Ee7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8b3c40-daf4-49b4-b7a1-ed5e4c094391/1/ZRH8QwkZMW3L0MQSUaGSeU1Ee7k.mft
Manifest number: 13EF
Signing time: Mon 27 Jan 2025 07:00:36 +0000
Manifest this update: Mon 27 Jan 2025 07:00:36 +0000
Manifest next update: Tue 28 Jan 2025 07:00:36 +0000
Files and hashes: 1: ZRH8QwkZMW3L0MQSUaGSeU1Ee7k.crl (hash: xYAeMuonYL70jaYYxrR58wIeZkFIeCdKnLaiy0mOdI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:8f:e9:ce:c4:ca:62:e1:12:dd:af:6a:1c:54:41:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511fc430919316dcbd0c41251a192794d447bb9
Validity
Not Before: Jan 27 07:00:36 2025 GMT
Not After : Jan 28 07:00:36 2025 GMT
Subject: CN=e1f6e06beccee36adc66b03b40d47cc4ff02f224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8b:fc:f6:5e:a9:bf:8e:81:bf:90:55:d2:3f:
1d:f4:1c:a9:a1:0a:d4:cf:3c:1f:f2:87:e5:e8:08:
10:f0:65:49:98:66:ba:26:2d:08:2c:41:90:ba:37:
d3:16:5d:d2:e3:99:85:93:7e:fc:1d:30:e3:6d:c1:
15:12:37:c0:ac:06:e8:8b:14:88:3c:3c:36:e0:4b:
69:1a:1c:d6:17:c1:ab:3d:ef:24:c0:9f:6e:de:8a:
3b:78:fb:6b:6c:6c:87:d1:47:00:8a:75:18:77:6b:
a4:5c:fa:f7:a8:05:e3:88:c9:d7:ba:a0:95:50:af:
34:9e:e6:46:92:43:07:03:0a:7d:33:57:08:2f:7a:
76:9f:e8:38:44:ea:a5:89:1b:d8:43:b6:28:1d:63:
6a:7d:63:8c:74:85:ee:f5:a3:3e:05:e6:3e:22:cb:
79:88:e5:af:0a:5a:48:5b:7b:23:8c:85:c3:22:52:
b0:30:c7:4d:ef:31:75:e9:07:c1:44:a2:83:a8:12:
ce:ed:47:10:97:65:d8:e0:11:7a:5f:76:88:27:32:
21:81:83:7d:01:10:15:1a:6b:7b:a6:7b:2f:f7:5e:
e2:76:f7:bb:9c:4a:40:9c:79:29:05:5c:37:40:fb:
8f:b3:78:96:28:90:f9:26:3f:b4:e2:90:ac:7b:8f:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F6:E0:6B:EC:CE:E3:6A:DC:66:B0:3B:40:D4:7C:C4:FF:02:F2:24
X509v3 Authority Key Identifier:
keyid:65:11:FC:43:09:19:31:6D:CB:D0:C4:12:51:A1:92:79:4D:44:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRH8QwkZMW3L0MQSUaGSeU1Ee7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8b3c40-daf4-49b4-b7a1-ed5e4c094391/1/ZRH8QwkZMW3L0MQSUaGSeU1Ee7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8b3c40-daf4-49b4-b7a1-ed5e4c094391/1/ZRH8QwkZMW3L0MQSUaGSeU1Ee7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b5:b8:e1:60:79:91:83:7b:56:15:a2:8d:75:b1:2a:4d:68:
97:4a:41:9a:0d:f7:38:f8:cb:9f:d8:b3:22:4e:f9:52:e2:68:
48:7a:17:57:ba:f0:99:4a:4c:6e:27:d6:fe:bb:21:21:e4:7a:
40:69:b5:67:ec:17:c2:90:c8:b2:30:54:2f:c0:73:5a:ae:30:
27:61:9c:98:33:ac:44:6c:d9:f5:4b:1a:ec:ec:c6:f1:17:27:
e2:15:0e:8d:79:01:11:05:bd:ae:30:e2:80:fb:1d:33:fc:0c:
aa:97:da:cc:36:19:3a:d4:49:40:3d:fa:ea:06:48:b4:d3:ea:
ec:38:97:ee:a5:9b:ab:55:e8:00:32:82:85:09:7d:ae:dd:11:
82:ca:90:d1:84:de:5f:e8:e5:c4:bb:4a:99:6d:a0:e3:3f:45:
08:ee:25:00:fc:ee:7b:fc:0b:68:fb:2a:9e:a8:62:0a:e9:0c:
40:0d:30:62:68:8a:3a:c0:ca:51:7c:51:0b:bf:ff:e5:68:ae:
36:eb:a1:4a:ec:ed:4d:c6:f7:cb:7f:3c:6b:43:9d:8f:a1:30:
06:74:5f:ec:a5:4e:3f:8d:8a:62:53:84:26:80:46:dd:3b:7e:
f7:82:e4:08:b7:56:55:18:94:d5:d0:ab:95:28:ae:d1:02:ae:
5b:c2:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:23 2025 by rpki-client