Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.mft
File: zRzl1y2syrz3l0snLsJ678UatiA.mft (raw, json)
Hash identifier: 6A1mQkRK6oLk9Wm2EMGRETCuogP9hEB8/vFalEvo+yw=
Subject key identifier: A2:65:6A:D5:0F:C6:F1:17:EB:27:A4:53:4B:4A:DF:B2:02:3D:FF:75
Authority key identifier: CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
Certificate issuer: /CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Certificate serial: 018D8C73EA1FB8DE47DA541EC75AF3FEBA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.mft
Manifest number: 0860
Signing time: Fri 09 Feb 2024 06:00:23 +0000
Manifest this update: Fri 09 Feb 2024 06:00:23 +0000
Manifest next update: Sat 10 Feb 2024 06:00:23 +0000
Files and hashes: 1: gNq-DNUiY_bgRwQyKl_VBvsnRVo.roa (hash: LAYTr3A4BNdNJDG5RyTTQVu3VDnTzfS+lgoqlIlbVqs=)
2: zRzl1y2syrz3l0snLsJ678UatiA.crl (hash: ZstzJ1SvUA+N9yKIlZlIXpvGiKJ5JjZamlqtVEpyLyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:73:ea:1f:b8:de:47:da:54:1e:c7:5a:f3:fe:ba:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Validity
Not Before: Feb 9 06:00:23 2024 GMT
Not After : Feb 10 06:00:23 2024 GMT
Subject: CN=a2656ad50fc6f117eb27a4534b4adfb2023dff75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:3f:ee:da:b8:c9:5c:b8:f0:34:2f:35:31:
09:fd:a6:76:af:10:da:42:97:65:0e:91:4d:44:2d:
be:41:52:0b:d2:d3:33:4d:69:44:3d:b4:b7:8b:c0:
b6:f2:fd:92:0e:7a:2e:f3:f1:a5:9f:97:fe:e0:c2:
a7:da:64:a7:f0:e2:e5:df:f1:fc:71:73:82:d7:ee:
a4:a5:a9:15:8a:8b:c0:c9:d4:da:23:c3:62:bf:a8:
c8:34:2d:9b:37:ae:9c:19:8a:2a:59:d3:95:92:d3:
c2:5f:89:5d:aa:ae:37:9b:12:12:d1:95:4e:c4:dd:
92:c0:95:e4:43:69:7f:9b:1c:a1:f6:34:e8:f3:b6:
45:db:e5:8b:2d:0f:86:22:07:cc:6b:1d:f6:43:45:
de:86:84:86:c7:96:70:19:c9:70:c3:15:3a:c2:01:
05:1e:8a:db:3e:fd:e9:bb:e0:d0:4e:a7:7d:f1:5e:
c6:fc:55:5a:4e:04:70:02:49:ac:c0:33:7a:12:93:
ab:85:0a:a3:b0:53:71:f0:6f:b5:a3:26:07:77:d7:
1b:a3:a8:5e:f3:34:d7:d6:3e:2d:97:1c:85:e7:e7:
57:34:08:43:b3:4a:f6:1e:63:97:c7:ef:7b:61:00:
a4:a6:a8:97:ef:dc:13:e6:3e:e6:17:d5:ea:f9:8d:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:6A:D5:0F:C6:F1:17:EB:27:A4:53:4B:4A:DF:B2:02:3D:FF:75
X509v3 Authority Key Identifier:
keyid:CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:3f:c9:02:50:b5:a9:37:a7:e9:e4:1c:f3:43:9c:06:01:
90:27:76:bb:97:f5:7f:37:b4:18:69:c2:14:b5:84:f5:91:12:
40:07:77:59:32:8e:a7:5d:cf:a6:91:5d:03:e1:d9:04:04:4c:
7a:e4:a0:68:a9:0a:3a:b4:3c:db:fe:f9:39:f4:87:f2:a4:5b:
c3:57:8a:4f:42:ef:4c:e6:3f:eb:8a:35:00:78:70:68:e8:e1:
0f:83:eb:4e:ab:18:3a:34:fd:e2:ed:2f:0e:8b:36:21:e5:d6:
73:24:b6:a0:f6:27:77:52:6e:58:0f:3d:d0:1a:0c:d8:eb:17:
3b:65:4e:66:b7:c8:d2:f4:70:6c:a7:68:e0:48:83:88:1f:5c:
05:ae:58:d3:08:52:2e:0e:26:cd:67:37:12:00:d8:f6:37:23:
80:74:16:ef:69:07:ef:0e:9e:ad:0f:b9:fd:7a:9c:b0:ea:fc:
b0:13:10:cd:65:e9:71:ec:bd:bd:3a:3e:94:60:89:6c:69:73:
9b:00:26:a9:9e:26:c3:22:02:52:66:41:c4:1d:99:3f:ed:e9:
60:6b:94:9a:b1:80:30:5d:f6:ab:f6:54:f3:a6:88:ca:9a:3c:
5e:35:ae:be:cd:5c:90:ca:cc:fe:43:45:73:07:62:d2:fd:43:
b1:22:16:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:09:04 2025 by rpki-client