Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/862e95-7d04-4ac2-9e84-7b1a84adae21/1/ZovkzQDVuS0BXM5C1dVDE9YdhP4.mft
File: ZovkzQDVuS0BXM5C1dVDE9YdhP4.mft (raw, json)
Hash identifier: U9HK8gXvaFIx4IPLBSNElsNmCkqZPgyyqPzK0k8WGlc=
Subject key identifier: D2:50:1C:D3:F5:09:47:61:BE:18:A8:03:FE:56:A1:BC:50:22:AF:4B
Authority key identifier: 66:8B:E4:CD:00:D5:B9:2D:01:5C:CE:42:D5:D5:43:13:D6:1D:84:FE
Certificate issuer: /CN=668be4cd00d5b92d015cce42d5d54313d61d84fe
Certificate serial: 01928A41FB8DB9432D8FA74788647851FA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZovkzQDVuS0BXM5C1dVDE9YdhP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/862e95-7d04-4ac2-9e84-7b1a84adae21/1/ZovkzQDVuS0BXM5C1dVDE9YdhP4.mft
Manifest number: 0384
Signing time: Mon 14 Oct 2024 09:00:32 +0000
Manifest this update: Mon 14 Oct 2024 09:00:32 +0000
Manifest next update: Tue 15 Oct 2024 09:00:32 +0000
Files and hashes: 1: ZovkzQDVuS0BXM5C1dVDE9YdhP4.crl (hash: 7qgmVb2mmmWKT2BZ2q+GypbnIQfIk3ahepEe4o9vfxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:41:fb:8d:b9:43:2d:8f:a7:47:88:64:78:51:fa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668be4cd00d5b92d015cce42d5d54313d61d84fe
Validity
Not Before: Oct 14 09:00:32 2024 GMT
Not After : Oct 15 09:00:32 2024 GMT
Subject: CN=d2501cd3f5094761be18a803fe56a1bc5022af4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:06:3c:08:87:44:ee:6c:a6:fa:49:97:bf:
57:c7:45:d4:8d:1f:32:80:e7:dd:55:d1:a3:b6:8f:
e9:bd:6a:ab:53:c7:f9:ec:8c:70:38:cb:8e:d2:8e:
df:32:fd:3c:a0:3b:df:8b:44:28:e6:31:ae:0f:1e:
1e:4b:22:1e:40:62:e3:9d:42:de:fd:4a:78:a8:7e:
27:75:78:e8:77:8b:f2:0d:d0:15:b6:fe:65:54:b3:
93:9f:0d:3b:55:ff:e5:a6:ab:c6:90:6f:9c:f4:6e:
a3:55:e8:02:56:3e:24:cd:19:53:37:c2:ba:6c:29:
11:c7:fe:a5:8b:0e:d1:c4:ab:b4:6d:8b:d1:cf:78:
9b:e4:64:7e:55:6b:70:34:06:7b:76:18:a2:c3:46:
fc:1d:9e:08:76:cf:9b:5b:40:b1:20:a2:18:8b:05:
05:53:09:19:c8:02:ef:dd:19:dd:18:a2:3b:97:1e:
86:0a:23:7e:e3:6f:5c:7c:d3:d2:4a:c2:dc:f7:3c:
d2:3b:4e:e1:97:2a:f6:29:05:24:6d:61:39:fc:8f:
33:0e:0c:24:1c:5e:cf:1d:20:e2:bc:30:e0:54:4f:
ba:c2:e9:2c:33:cd:64:d8:08:4e:b5:0c:d1:36:05:
35:dd:d7:cc:53:94:d3:74:e6:da:43:11:cd:4f:cc:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:50:1C:D3:F5:09:47:61:BE:18:A8:03:FE:56:A1:BC:50:22:AF:4B
X509v3 Authority Key Identifier:
keyid:66:8B:E4:CD:00:D5:B9:2D:01:5C:CE:42:D5:D5:43:13:D6:1D:84:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZovkzQDVuS0BXM5C1dVDE9YdhP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/862e95-7d04-4ac2-9e84-7b1a84adae21/1/ZovkzQDVuS0BXM5C1dVDE9YdhP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/862e95-7d04-4ac2-9e84-7b1a84adae21/1/ZovkzQDVuS0BXM5C1dVDE9YdhP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c1:e4:19:ac:af:7b:e8:1f:9b:ac:b9:31:9b:83:30:97:cc:
b3:cc:e5:f0:7c:a7:56:e3:73:0d:9e:e3:39:4b:c6:22:08:ff:
7a:9a:e6:0b:38:9c:94:63:72:7b:c6:3e:ab:91:24:36:c3:d1:
bc:6a:8a:bd:25:11:4f:8e:b7:0c:b3:77:d5:cb:68:ad:ca:90:
5d:f4:f0:f3:fb:4e:be:3f:9c:6c:78:c5:78:e1:a3:e6:78:7c:
50:c8:f0:47:34:a1:5c:a7:86:4a:98:5d:34:19:a1:41:b2:2d:
ef:f4:dc:da:19:ac:81:59:e9:ee:77:04:8f:8c:0a:35:9f:29:
6f:c4:b2:e3:7f:81:61:8c:3d:ff:32:7c:92:9c:69:84:ff:8a:
47:64:9c:14:18:94:38:80:d6:2d:cb:4d:9d:c4:b7:3b:87:30:
9e:bb:64:30:41:50:67:fa:cc:c3:6e:ee:66:77:ef:1e:98:7a:
73:03:7f:8b:6a:73:c2:67:13:5f:68:79:5c:2a:25:62:53:84:
17:85:69:b2:91:06:f9:d7:fe:04:52:93:01:ed:cd:7a:db:25:
1f:ed:c7:4a:62:bb:85:6e:4d:4c:a8:e8:08:c3:ce:89:82:cb:
0d:36:37:3c:49:5d:c0:6e:5e:59:66:49:01:d0:b9:00:79:9d:
94:8c:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:34 2025 by rpki-client