Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/35ea7f-3a87-4d2c-877b-3fba33480c66/1/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.mft
File: z7YwgnCPGCn1M0G1V2LSIO1o4Mk.mft (raw, json)
Hash identifier: oby0xq48vDfmr/szsYIMkVXc5g60LAQiP5I8VKKRC0A=
Subject key identifier: 91:CA:17:E8:AE:A4:60:4C:21:02:7D:C7:37:9E:11:75:70:A0:35:A8
Authority key identifier: CF:B6:30:82:70:8F:18:29:F5:33:41:B5:57:62:D2:20:ED:68:E0:C9
Certificate issuer: /CN=cfb63082708f1829f53341b55762d220ed68e0c9
Certificate serial: 0187524657FE56F230F7EEFAA93F7595AA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/35ea7f-3a87-4d2c-877b-3fba33480c66/1/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.mft
Manifest number: 01
Signing time: Wed 05 Apr 2023 16:35:54 +0000
Manifest this update: Wed 05 Apr 2023 16:35:54 +0000
Manifest next update: Thu 06 Apr 2023 16:35:54 +0000
Files and hashes: 1: z7YwgnCPGCn1M0G1V2LSIO1o4Mk.crl (hash: XpQqw3lviEp/MxmS5k0YuPYfep21nTgLNXPEmiyB7lc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:46:57:fe:56:f2:30:f7:ee:fa:a9:3f:75:95:aa:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb63082708f1829f53341b55762d220ed68e0c9
Validity
Not Before: Apr 5 16:35:54 2023 GMT
Not After : Apr 6 16:35:54 2023 GMT
Subject: CN=91ca17e8aea4604c21027dc7379e117570a035a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:e3:25:08:0c:5a:a0:1a:d5:62:21:6f:00:
36:c2:4b:2b:1b:d3:cf:83:ca:49:51:81:9c:84:03:
82:13:05:b9:91:0b:65:e2:19:38:37:5b:10:07:68:
9c:ac:9a:42:90:11:00:a3:21:bf:32:9d:ef:37:20:
fb:0f:7f:7c:2e:bf:48:21:26:b4:dc:7c:e0:a4:89:
e7:c1:c6:73:17:54:a6:f6:c3:74:b2:25:16:ed:c6:
82:ca:a6:0b:6f:da:fe:94:84:90:3b:b5:f4:d8:1d:
d3:8e:d0:e8:9c:74:5d:7f:3f:b6:c5:8b:86:8d:0b:
8f:15:b8:ad:2e:cb:a2:e6:b8:51:ba:4b:7c:ca:0c:
c5:60:b8:9b:54:d0:ab:d9:46:55:44:04:d0:27:fb:
15:a6:52:29:0f:5f:1d:39:4c:c6:96:af:e4:45:d7:
50:0e:81:1c:0d:1b:43:c9:2d:ed:9a:ef:2e:1d:05:
e0:19:d6:f7:a1:90:bc:9d:3f:30:84:bc:44:02:2b:
4b:eb:5e:ec:81:e8:14:f9:45:02:be:db:02:de:31:
70:64:41:fe:f6:eb:3b:62:0f:48:7e:6b:80:7a:4a:
e3:5f:cb:2f:66:a5:aa:37:3b:3b:4d:6e:4c:c2:ab:
ef:2f:0c:49:53:92:95:45:d4:80:d1:9a:b4:f2:3c:
0b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:17:E8:AE:A4:60:4C:21:02:7D:C7:37:9E:11:75:70:A0:35:A8
X509v3 Authority Key Identifier:
keyid:CF:B6:30:82:70:8F:18:29:F5:33:41:B5:57:62:D2:20:ED:68:E0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/35ea7f-3a87-4d2c-877b-3fba33480c66/1/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/35ea7f-3a87-4d2c-877b-3fba33480c66/1/z7YwgnCPGCn1M0G1V2LSIO1o4Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:24:03:e5:87:ef:a3:9c:74:ce:4f:88:2d:b8:cf:d5:e9:c9:
87:9e:9b:41:e6:96:ac:e1:86:90:a3:0b:80:1e:ba:03:65:cd:
42:1a:f7:f6:61:a6:c0:3e:2f:50:75:dd:0c:19:07:34:28:c3:
53:4d:e1:80:a8:03:0d:fc:24:ac:4e:6d:f6:2e:42:0a:b6:86:
68:44:06:b4:7d:56:79:b3:22:4d:65:1a:0d:0e:36:c0:e3:35:
41:cd:b3:7c:b3:49:d2:c0:4f:d8:ed:fa:a2:3c:1d:27:40:fa:
0b:a4:03:f7:9a:64:12:6a:cb:0b:a2:66:0d:12:ec:f4:4f:c5:
7c:45:30:7e:f0:95:44:f9:5f:09:5c:7e:f2:ce:a5:e8:60:49:
06:f7:22:1d:49:36:4a:2a:94:7d:1d:5d:5b:19:3b:77:51:2c:
31:36:ab:57:b4:3f:f5:01:ca:47:7c:e0:d6:25:fc:02:57:32:
46:bd:67:64:84:0e:b2:6b:30:25:a3:1f:cf:02:0d:52:8e:13:
e7:40:9b:ba:70:07:e1:57:75:7c:07:c9:f4:4a:0c:c1:4f:b1:
8c:1b:f9:71:ff:f9:cb:00:00:87:e8:e6:90:8e:46:24:a2:01:
14:49:28:94:4e:b0:6f:39:65:34:10:ac:7e:34:fe:89:d2:cd:
ae:1e:b8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:44 2025 by rpki-client