Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c452b6-944c-4128-a55d-3123f5699d72/1/zfV9QJ5oeAatx8KLkN11JFL7jBM.mft
File: zfV9QJ5oeAatx8KLkN11JFL7jBM.mft (raw, json)
Hash identifier: 0MPXYidnBg30ca0XRLjiaGYRmG0t66oQUw5u7QvdhiE=
Subject key identifier: 8A:C0:74:B0:95:42:7B:8B:03:D3:4E:92:94:18:A7:2D:CA:8D:9F:13
Authority key identifier: CD:F5:7D:40:9E:68:78:06:AD:C7:C2:8B:90:DD:75:24:52:FB:8C:13
Certificate issuer: /CN=cdf57d409e687806adc7c28b90dd752452fb8c13
Certificate serial: 01837DCE542E8DB2D3906533A3D0FAB5E174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfV9QJ5oeAatx8KLkN11JFL7jBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c452b6-944c-4128-a55d-3123f5699d72/1/zfV9QJ5oeAatx8KLkN11JFL7jBM.mft
Manifest number: 041C
Signing time: Tue 27 Sep 2022 07:16:57 +0000
Manifest this update: Tue 27 Sep 2022 07:16:57 +0000
Manifest next update: Wed 28 Sep 2022 07:16:57 +0000
Files and hashes: 1: zfV9QJ5oeAatx8KLkN11JFL7jBM.crl (hash: 15OnHQ8fmw2Zep9xBuf4Wx740ZmCgX0xzTFszz1RsDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:ce:54:2e:8d:b2:d3:90:65:33:a3:d0:fa:b5:e1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf57d409e687806adc7c28b90dd752452fb8c13
Validity
Not Before: Sep 27 07:16:57 2022 GMT
Not After : Sep 28 07:16:57 2022 GMT
Subject: CN=8ac074b095427b8b03d34e929418a72dca8d9f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:a1:16:a1:97:82:c6:ad:2b:c6:19:33:bf:
39:0b:a1:23:41:d1:b9:00:76:62:95:c7:b4:8a:dd:
63:c7:f9:cc:9d:10:0c:93:5a:e2:fa:fc:af:1e:cb:
2a:d4:d6:29:a4:bd:cc:3e:a4:5e:f7:76:9c:69:f8:
8b:1f:20:20:5b:d2:e4:2a:7b:28:f8:be:cb:b6:2d:
05:85:40:c7:01:11:28:73:5d:af:e7:21:65:8e:c8:
42:e6:a7:42:27:64:49:0d:74:bc:6c:dd:27:b3:30:
2e:88:e5:da:46:6c:dd:9e:53:c1:38:d8:9d:04:f9:
a3:0b:91:5a:72:c6:7b:51:4d:bb:94:0b:10:23:cc:
14:98:38:cb:c4:b2:35:91:83:db:1f:16:9e:cd:c0:
35:65:ac:4d:fd:e2:37:e7:ef:52:39:e6:32:18:2c:
90:c5:1e:f8:41:f4:31:bf:5a:b8:e3:de:f7:23:62:
55:ce:18:8f:b8:10:e8:16:fd:8f:25:2b:74:af:aa:
c9:c3:9c:68:ed:77:ec:eb:ad:71:97:d6:81:0e:84:
7b:ab:6b:ac:17:05:db:2e:33:bf:15:87:7e:97:db:
74:da:f6:8a:b2:b8:49:56:08:d9:58:26:72:0d:d3:
07:64:3b:63:31:9b:58:a4:38:a1:39:26:d6:a3:8c:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:74:B0:95:42:7B:8B:03:D3:4E:92:94:18:A7:2D:CA:8D:9F:13
X509v3 Authority Key Identifier:
keyid:CD:F5:7D:40:9E:68:78:06:AD:C7:C2:8B:90:DD:75:24:52:FB:8C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfV9QJ5oeAatx8KLkN11JFL7jBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c452b6-944c-4128-a55d-3123f5699d72/1/zfV9QJ5oeAatx8KLkN11JFL7jBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c452b6-944c-4128-a55d-3123f5699d72/1/zfV9QJ5oeAatx8KLkN11JFL7jBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:91:de:a3:8f:d2:47:cd:2c:62:8c:71:3a:80:e2:a9:39:bf:
d9:17:15:69:44:7e:41:55:e3:bc:4d:4e:fe:ba:a6:42:88:af:
5b:4e:08:4f:41:12:e1:e8:05:f1:69:93:4a:25:38:3d:2d:34:
05:66:b6:cd:5d:70:69:e6:64:88:4c:c2:ec:13:92:bc:4c:4a:
c9:50:ad:a2:94:01:f9:8f:d8:af:33:72:61:00:75:73:7d:d2:
f6:f1:20:0b:d4:7a:0c:13:37:78:5b:28:4b:ee:5b:ca:6f:0c:
23:b4:9c:04:81:aa:6b:1e:b3:42:fd:32:7c:e6:c6:cd:d7:cb:
ce:2c:67:42:1d:a3:50:e3:ee:da:84:39:25:c8:7d:cb:95:de:
ea:31:00:4e:b5:7b:15:be:2c:62:df:b1:07:1a:d7:39:c5:a3:
69:2f:73:8b:39:51:35:c8:e1:8f:64:44:2f:0d:e4:e5:0c:11:
1f:2f:cd:8a:5d:93:3a:35:d0:b6:98:d9:d5:d0:90:43:5c:0c:
4b:92:c0:0e:84:23:ee:f8:26:d7:12:f2:06:b3:1e:0a:f0:10:
5f:06:21:68:61:32:c9:db:e5:1a:10:9b:41:26:ae:67:9d:a8:
23:3f:da:c6:a7:e6:bd:dd:e6:2c:85:55:7d:9f:47:55:35:e9:
1e:92:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:56:09 2025 by rpki-client