Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/ZkIyhZmOjB_DzzRxTWQVtaup8JM.mft
File: ZkIyhZmOjB_DzzRxTWQVtaup8JM.mft (raw, json)
Hash identifier: FknL4ZSobP+WRVGBbPAOhuIHuWyJSxMEMYE4yajiq0Y=
Subject key identifier: 77:47:A0:EE:CD:FB:0C:62:04:31:E1:DF:0B:88:EE:C9:58:C4:FE:4B
Authority key identifier: 66:42:32:85:99:8E:8C:1F:C3:CF:34:71:4D:64:15:B5:AB:A9:F0:93
Certificate issuer: /CN=66423285998e8c1fc3cf34714d6415b5aba9f093
Certificate serial: 018D8785E4D3BE5C24B6C6B2598DF9B6BB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkIyhZmOjB_DzzRxTWQVtaup8JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/ZkIyhZmOjB_DzzRxTWQVtaup8JM.mft
Manifest number: 0864
Signing time: Thu 08 Feb 2024 07:01:55 +0000
Manifest this update: Thu 08 Feb 2024 07:01:55 +0000
Manifest next update: Fri 09 Feb 2024 07:01:55 +0000
Files and hashes: 1: 1jDpbzVFNBDTPbixPeyGMQkYB6k.roa (hash: 4Mqjaq0CmpF7HLtWhmWFigL1p3i/jX02AnpA8YPjHaM=)
2: ZkIyhZmOjB_DzzRxTWQVtaup8JM.crl (hash: ApTTRM1fxxkHuxLgoyDXP1ShWFJgq4Ggik2q3ECGIFg=)
3: p_KUv-6mD4ujP8XmcqGQnuIr_14.roa (hash: kv6JjDc5Zf3rzppfs8px+yJpBtE9dMq9UUIukDYIeuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:85:e4:d3:be:5c:24:b6:c6:b2:59:8d:f9:b6:bb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66423285998e8c1fc3cf34714d6415b5aba9f093
Validity
Not Before: Feb 8 07:01:55 2024 GMT
Not After : Feb 9 07:01:55 2024 GMT
Subject: CN=7747a0eecdfb0c620431e1df0b88eec958c4fe4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:ad:8e:8a:59:f0:22:76:5c:73:0e:7a:11:
bf:2d:3c:dc:78:f9:f1:57:66:b8:d4:d0:d7:ec:0e:
dc:9f:41:5a:42:c6:3e:0b:47:9b:9e:b5:39:b6:34:
0b:91:d2:fa:8c:b0:f1:4e:3c:7b:25:2a:5a:2c:61:
00:a4:84:ff:e4:7c:a2:fb:82:29:72:28:0c:d6:c8:
4a:3b:28:77:67:ce:a2:b4:ca:c4:c0:c5:f4:08:db:
64:77:80:19:93:06:6d:29:dd:a2:dc:52:02:e9:0d:
0e:d8:60:e6:18:ae:4d:f4:17:e8:83:9e:a2:19:f2:
a0:6e:ae:04:39:b1:48:b3:a8:d0:11:71:f1:20:e9:
bc:71:b4:2b:0a:ea:2a:2d:89:98:b9:ac:72:af:dd:
e0:1b:b4:ae:c5:c2:ee:12:43:77:a2:e0:b6:a8:e4:
5d:40:a0:c1:f3:df:c2:6d:4f:62:1e:e7:8f:ca:e0:
37:62:24:e7:36:f6:da:8a:3f:31:66:2c:14:79:79:
a3:4d:87:d8:c8:39:89:c4:6b:21:18:4d:9b:f5:c4:
81:4f:9d:15:52:3a:dc:52:f9:22:e0:df:89:1a:87:
ed:88:1e:85:80:5c:36:41:fc:74:24:b9:93:6e:be:
54:6e:f2:6d:1a:bd:39:f7:eb:86:a6:8b:0b:5d:d4:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:47:A0:EE:CD:FB:0C:62:04:31:E1:DF:0B:88:EE:C9:58:C4:FE:4B
X509v3 Authority Key Identifier:
keyid:66:42:32:85:99:8E:8C:1F:C3:CF:34:71:4D:64:15:B5:AB:A9:F0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkIyhZmOjB_DzzRxTWQVtaup8JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/ZkIyhZmOjB_DzzRxTWQVtaup8JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/944ba0-1079-4b86-81ca-c93506c23460/1/ZkIyhZmOjB_DzzRxTWQVtaup8JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:34:cd:92:60:93:03:0c:a5:e3:08:90:1e:99:3e:66:a3:23:
af:31:fe:19:4f:c4:6f:af:2c:ab:a0:1f:e3:7b:7f:2a:dd:d6:
e4:b2:62:40:27:09:fb:0d:11:9b:da:ff:c6:e5:a5:11:73:12:
1b:df:01:01:93:de:91:94:35:06:d7:75:85:58:81:82:2a:8e:
42:d1:b5:dd:7a:dc:90:7e:81:90:5a:a1:52:38:c2:4c:10:26:
47:c6:1b:a5:a1:3b:af:65:79:92:25:64:9b:40:64:d4:f7:c6:
16:23:9b:7d:a0:47:c3:eb:b8:1f:8e:7b:0b:a9:4f:ed:ab:9c:
ae:ec:6c:49:60:a0:af:5b:64:db:5a:2e:34:6e:b6:43:56:bf:
55:b5:3c:90:74:60:f4:f4:10:4c:b0:4f:fe:d6:34:cc:7b:90:
7d:8c:2b:5b:ec:1a:a2:5a:13:29:e4:01:47:ef:ca:92:38:3b:
e0:a3:4c:81:f4:b1:b0:dc:44:38:0b:b6:6f:26:ef:fd:91:5d:
d3:51:a6:11:ef:cd:0a:90:ef:24:f4:0f:45:d3:22:90:49:8b:
1b:fd:8d:be:19:dc:43:d2:89:7b:98:fa:5b:c4:0c:bc:1e:21:
e1:88:87:fc:51:4e:99:1e:9f:db:a3:be:29:30:8a:47:dd:e2:
77:61:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org