Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1b09b5-c264-46ba-9fa9-7c5fe5ffbe03/1/zp-LxZWqgiAd9TWDWjcRK5jZtYA.mft
File: zp-LxZWqgiAd9TWDWjcRK5jZtYA.mft (raw, json)
Hash identifier: 1lLAtsYSgduCxkx6nvnQ1F9esZ14Lin4NvlCEMhC5KA=
Subject key identifier: D2:A7:21:B2:3B:0B:78:88:79:49:99:4A:18:53:5D:41:AD:44:A6:03
Authority key identifier: CE:9F:8B:C5:95:AA:82:20:1D:F5:35:83:5A:37:11:2B:98:D9:B5:80
Certificate issuer: /CN=ce9f8bc595aa82201df535835a37112b98d9b580
Certificate serial: 018B3BCB4D0C54BB0B66F766ADDD2F66FA89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp-LxZWqgiAd9TWDWjcRK5jZtYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1b09b5-c264-46ba-9fa9-7c5fe5ffbe03/1/zp-LxZWqgiAd9TWDWjcRK5jZtYA.mft
Manifest number: 0ECF
Signing time: Tue 17 Oct 2023 04:01:00 +0000
Manifest this update: Tue 17 Oct 2023 04:01:00 +0000
Manifest next update: Wed 18 Oct 2023 04:01:00 +0000
Files and hashes: 1: zp-LxZWqgiAd9TWDWjcRK5jZtYA.crl (hash: O4dLSf5tF/Ta/G1xcP3wz2u54HjBnbWcg3j5YHwV/YQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3b:cb:4d:0c:54:bb:0b:66:f7:66:ad:dd:2f:66:fa:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9f8bc595aa82201df535835a37112b98d9b580
Validity
Not Before: Oct 17 04:01:00 2023 GMT
Not After : Oct 18 04:01:00 2023 GMT
Subject: CN=d2a721b23b0b78887949994a18535d41ad44a603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:eb:ea:ed:71:47:34:e5:ae:db:cc:88:70:
c3:41:a7:8c:4b:04:cd:f1:a7:74:a0:6e:90:56:13:
94:b8:03:55:5c:72:14:0c:65:66:a5:c2:90:7c:dc:
29:2c:4f:54:5f:a9:b2:c8:d5:df:74:7f:bf:28:09:
44:90:80:f8:f5:0f:36:34:f9:10:e9:b7:15:8f:9b:
87:db:6a:81:75:ef:36:b1:66:d2:1e:f8:3a:75:1d:
9f:c3:ce:7f:05:44:a1:dd:5b:82:91:fc:d5:77:a8:
7f:db:ee:29:8d:52:8f:3c:fa:c7:73:38:ab:95:bf:
b5:ba:63:69:40:fc:04:2a:b5:e1:28:f9:67:c5:4e:
bc:a2:e3:88:e1:e9:55:3e:e1:b8:dc:e6:d5:da:20:
7a:3e:6b:20:a0:f0:70:44:9f:58:7a:7a:8e:83:c6:
dd:49:bd:c0:f3:29:e3:7e:0b:e2:dd:4d:09:44:93:
12:7d:5a:90:60:32:21:6b:80:20:de:ea:18:55:71:
aa:6e:d5:cb:1a:66:f0:5f:ad:68:a6:cc:cf:61:a1:
c3:0a:03:6f:41:11:91:a5:17:04:28:24:44:37:95:
fa:be:d2:c6:61:a1:49:53:d0:66:60:ef:8f:9f:53:
1f:58:3d:3b:6e:1c:86:22:e6:7b:81:c3:f3:14:52:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A7:21:B2:3B:0B:78:88:79:49:99:4A:18:53:5D:41:AD:44:A6:03
X509v3 Authority Key Identifier:
keyid:CE:9F:8B:C5:95:AA:82:20:1D:F5:35:83:5A:37:11:2B:98:D9:B5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp-LxZWqgiAd9TWDWjcRK5jZtYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1b09b5-c264-46ba-9fa9-7c5fe5ffbe03/1/zp-LxZWqgiAd9TWDWjcRK5jZtYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1b09b5-c264-46ba-9fa9-7c5fe5ffbe03/1/zp-LxZWqgiAd9TWDWjcRK5jZtYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f4:4f:eb:79:a8:65:69:f9:49:0f:72:7e:66:de:f4:84:6c:
40:c3:6a:4d:73:e6:6c:b6:63:30:de:fc:52:66:18:f6:a6:5b:
d3:d5:25:d6:b2:9d:3b:77:77:60:ad:8c:b9:6c:c7:4e:34:de:
dd:97:dd:1e:27:6a:5d:13:6b:71:b1:e2:a2:e3:cb:ba:5d:05:
f5:6e:1b:44:8b:36:31:19:91:b9:ae:e4:71:57:ed:3e:46:55:
ac:fd:84:e1:7c:46:1f:15:5d:2c:ff:03:f9:b3:b6:37:a0:34:
6c:dd:b3:58:38:51:f5:fc:2e:ab:7e:05:f3:4f:72:7d:f2:5f:
7d:fe:83:c1:e4:9c:4c:1c:6a:23:e1:4c:ae:1a:1c:06:ee:41:
db:5d:18:9a:57:3d:a7:cc:27:3d:2d:1c:25:2f:aa:dd:54:ac:
b8:73:a1:01:ed:af:40:b4:9b:85:84:29:eb:e8:e2:bd:b9:de:
68:d7:12:9d:96:45:f0:39:e9:c2:97:82:3f:1e:73:20:cc:90:
3e:9b:73:b1:83:10:b0:ff:58:01:19:d3:76:e1:6e:d3:95:41:
23:2e:b2:25:a7:bc:85:b1:b0:f6:a8:a0:b2:60:cb:5f:39:47:
a9:d0:55:84:cc:0d:8d:4e:66:ef:e2:1a:0d:17:40:03:45:54:
cc:f4:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:40 2025 by rpki-client