Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.mft
File: zvoStmPnGorLx7ROcCoO1r1jyB8.mft (raw, json)
Hash identifier: zFtnY8ZDHVBO+/ymOZuOBqJR8s1232GwZlWhV34E260=
Subject key identifier: 31:45:62:61:2D:D8:8B:64:C6:2F:0A:9E:2C:61:1B:25:6D:B6:F4:10
Authority key identifier: CE:FA:12:B6:63:E7:1A:8A:CB:C7:B4:4E:70:2A:0E:D6:BD:63:C8:1F
Certificate issuer: /CN=cefa12b663e71a8acbc7b44e702a0ed6bd63c81f
Certificate serial: 019172AA0B33ACD3DAE1C326B54842DB27E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvoStmPnGorLx7ROcCoO1r1jyB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.mft
Manifest number: 0C18
Signing time: Wed 21 Aug 2024 02:00:32 +0000
Manifest this update: Wed 21 Aug 2024 02:00:32 +0000
Manifest next update: Thu 22 Aug 2024 02:00:32 +0000
Files and hashes: 1: zvoStmPnGorLx7ROcCoO1r1jyB8.crl (hash: cv4/d9/BdLQgby6s4xnf/0zlgmE9esap9Gr3rsW/Y1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:72:aa:0b:33:ac:d3:da:e1:c3:26:b5:48:42:db:27:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefa12b663e71a8acbc7b44e702a0ed6bd63c81f
Validity
Not Before: Aug 21 02:00:32 2024 GMT
Not After : Aug 22 02:00:32 2024 GMT
Subject: CN=314562612dd88b64c62f0a9e2c611b256db6f410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:cd:0e:2c:ea:ce:c0:7c:ee:3e:f9:b2:ca:
b3:34:3a:9d:43:ad:7c:16:43:54:43:81:4c:7c:6e:
68:de:d8:ba:d5:54:64:48:de:39:22:4d:ae:73:c4:
20:4c:4f:f4:79:24:45:b0:bc:cf:5d:69:e7:ce:7d:
05:b2:f7:c0:16:6e:00:90:26:06:01:e4:e8:99:35:
c8:5a:c3:ce:31:97:a3:65:9d:17:21:25:2c:57:29:
27:8c:05:ad:d3:42:74:e0:52:b3:a8:a2:4f:da:e4:
e2:c0:77:3b:46:e3:ef:d3:bf:97:99:fd:35:00:40:
01:34:b9:ae:5b:51:05:03:8f:cc:32:58:7f:e2:f0:
00:4a:f0:b2:a8:a5:77:34:c0:4c:e8:9c:74:fe:3a:
80:12:0e:d0:fe:18:f8:c6:de:a6:ae:ce:8b:0e:b3:
05:3e:3e:0a:72:18:ca:86:89:be:88:f8:ff:ab:07:
1c:15:d9:f3:9f:06:ea:67:9c:77:71:ed:7b:ad:94:
9e:e7:d5:d6:11:f7:78:95:16:7f:8e:67:23:81:8d:
cc:f6:63:f6:f0:7e:8d:48:c6:b6:68:7d:a8:40:18:
73:76:22:44:36:01:f2:9e:f4:ff:10:41:93:ae:8c:
4f:7f:4a:6d:a8:d2:af:e8:56:ce:e3:67:5b:ac:82:
2c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:45:62:61:2D:D8:8B:64:C6:2F:0A:9E:2C:61:1B:25:6D:B6:F4:10
X509v3 Authority Key Identifier:
keyid:CE:FA:12:B6:63:E7:1A:8A:CB:C7:B4:4E:70:2A:0E:D6:BD:63:C8:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvoStmPnGorLx7ROcCoO1r1jyB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/94cdd7-efd8-4c56-aa7c-69e8195171fb/1/zvoStmPnGorLx7ROcCoO1r1jyB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:c2:35:a2:3a:24:e7:b2:12:c8:f7:7f:b6:8d:ec:78:eb:
fa:93:00:1e:f1:98:70:ac:f1:10:eb:8d:8f:e7:b7:01:5f:b5:
a0:ed:5e:3f:14:c1:4c:ab:6b:60:80:ba:e1:27:d0:24:8b:34:
7d:78:3e:8c:3e:a1:66:86:b0:45:8a:86:26:85:20:6a:e2:8b:
55:e9:61:a6:76:2d:f4:de:e6:83:31:4a:9c:b5:52:ca:5f:47:
ed:30:15:1e:93:f7:d6:89:93:e1:66:b0:ed:b0:ac:21:5a:90:
fd:0f:bd:a4:5a:a4:20:6b:7d:47:25:8b:1d:2d:cb:8b:b3:20:
71:9d:3c:27:f8:cf:97:18:0f:10:69:d8:00:c1:ef:fd:2b:b5:
a3:42:ab:cb:54:68:ef:43:8d:65:9c:66:0f:4a:85:73:6d:e0:
d0:51:a8:fa:5f:0c:63:ad:fc:4e:15:85:b3:23:b9:fc:0b:3b:
49:ab:28:0c:dc:04:4b:8d:00:2e:b6:dc:84:fc:a7:96:d0:19:
29:a6:eb:13:33:4b:77:08:05:a4:8b:a2:24:1c:20:b2:02:08:
f4:a0:4a:2c:4b:e9:a4:98:a8:b4:e2:1c:3e:9a:c3:51:f3:03:
ea:77:4a:f8:19:70:81:ef:b1:73:ba:e4:b2:6a:7f:db:08:cb:
8b:58:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:45:56 2025 by rpki-client