Manifest
$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/3/0A733568F1D03B88BCEEE55A4576AEBCD49D7A63.mft
File: 0A733568F1D03B88BCEEE55A4576AEBCD49D7A63.mft (raw, json)
Hash identifier: sIhf9Zdiqo4zzsf9o62r4/Fprpzg8tu8af6uzH8WjPY=
Subject key identifier: EA:62:F3:45:D2:8B:5F:DA:5F:A9:94:E0:42:8A:CF:00:89:00:20:A4
Authority key identifier: 0A:73:35:68:F1:D0:3B:88:BC:EE:E5:5A:45:76:AE:BC:D4:9D:7A:63
Certificate issuer: /CN=0a733568f1d03b88bceee55a4576aebcd49d7a63
Certificate serial: 3B6A5B6949F0541F4BE7027A6909F645E5E2CB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnM1aPHQO4i87uVaRXauvNSdemM.cer
Subject info access: rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/3/0A733568F1D03B88BCEEE55A4576AEBCD49D7A63.mft
Manifest number: 0C
Signing time: Sat 20 Jan 2024 19:15:49 +0000
Manifest this update: Sat 20 Jan 2024 19:10:49 +0000
Manifest next update: Sun 21 Jan 2024 21:29:49 +0000
Files and hashes: 1: AS200242.asa (hash: IiQfOQUmuBe3+rvvrMnyHFpFq29aRf/u+D1QC20zA8A=)
2: 0A733568F1D03B88BCEEE55A4576AEBCD49D7A63.crl (hash: Dt1Oa3q98XDk7F5rck3NQweQZsTD/0gihS8zqFWqQDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6a:5b:69:49:f0:54:1f:4b:e7:02:7a:69:09:f6:45:e5:e2:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a733568f1d03b88bceee55a4576aebcd49d7a63
Validity
Not Before: Jan 20 19:10:49 2024 GMT
Not After : Jan 21 21:29:49 2024 GMT
Subject: CN=EA62F345D28B5FDA5FA994E0428ACF00890020A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:fb:b6:2c:43:b3:69:27:40:c5:d7:f3:bf:
e7:ac:ff:3f:ac:18:07:77:38:e9:7c:33:9f:12:6b:
bd:ac:d2:27:6a:b6:dd:04:8c:14:53:f2:08:0b:a4:
34:19:ce:81:35:5a:6d:38:5b:c2:96:4a:0c:60:86:
5c:41:17:29:63:67:4c:ab:91:0a:ba:36:b2:bf:82:
ab:f0:4f:0d:34:ac:e0:09:ee:6d:1d:e1:86:06:b2:
b5:0c:e0:54:80:43:6d:32:a7:93:18:68:49:e4:78:
66:99:df:05:f6:98:7c:2a:84:1d:bb:4f:3e:d7:af:
c1:dc:5c:c9:bf:5c:c5:cc:e1:25:c7:ce:84:f1:67:
87:de:fb:9e:ff:06:46:8e:c8:45:99:da:16:a7:95:
26:ab:67:81:db:47:83:07:8e:de:a6:78:b1:62:3d:
e8:39:45:a1:02:36:cf:b0:4c:b5:7d:35:d2:63:43:
09:de:7e:40:80:b4:b9:dc:9d:e3:65:62:99:70:14:
c1:de:6e:de:69:ca:75:0b:29:4a:95:cf:a9:bb:f5:
bf:9a:a1:b4:7f:d9:7b:04:02:b8:2b:4c:85:85:89:
83:f8:ef:97:b6:51:97:8a:0e:1d:4b:b9:c7:15:6e:
e4:e5:61:c1:1d:88:eb:d2:ab:ef:6b:b1:6c:8e:ce:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:F3:45:D2:8B:5F:DA:5F:A9:94:E0:42:8A:CF:00:89:00:20:A4
X509v3 Authority Key Identifier:
keyid:0A:73:35:68:F1:D0:3B:88:BC:EE:E5:5A:45:76:AE:BC:D4:9D:7A:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/3/0A733568F1D03B88BCEEE55A4576AEBCD49D7A63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnM1aPHQO4i87uVaRXauvNSdemM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/3/0A733568F1D03B88BCEEE55A4576AEBCD49D7A63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:11:c3:7f:f9:44:2d:10:bd:2b:66:bd:4f:e7:9f:39:d8:c7:
d8:88:41:29:c2:b6:0c:c4:be:05:1a:5c:4c:98:0b:de:1f:61:
36:cd:ae:59:37:42:32:b5:c7:31:31:0e:b7:6c:27:3d:c9:7c:
35:6f:75:ed:3d:3e:82:c3:cf:4d:c6:f7:b3:38:37:fe:18:83:
dc:6f:1d:47:7a:0c:1d:c9:9c:a4:ef:eb:94:8d:b9:5f:89:21:
d1:0d:a2:75:99:c6:c6:46:de:76:3d:46:57:70:a2:72:f3:de:
4f:ac:94:7d:70:93:b6:dd:74:07:b9:e7:91:e4:45:2d:20:76:
2e:8c:f0:13:32:2e:99:d0:c1:b1:eb:75:82:0f:a4:10:99:fb:
1f:96:b1:bc:6a:c7:70:d8:66:93:1d:05:34:50:59:7b:65:14:
af:60:99:0f:4f:69:d5:7f:49:c3:54:73:99:86:ea:f6:eb:66:
68:90:23:5c:3d:9c:12:52:80:80:91:19:a7:98:18:0e:99:97:
b2:cf:de:0e:c8:1f:9c:53:40:e1:d6:74:e7:4e:d0:c0:21:fc:
5d:c8:a3:b1:84:06:80:bf:ea:45:5f:13:06:5c:d6:8b:5f:d8:
cd:a6:0b:ae:7a:0b:3b:cf:a0:b7:dc:48:1a:0a:2e:71:48:7e:
bd:a4:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:56:17 2025 by rpki-client