Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.mft
File: zZIz9qiNCPZVnCIGsb_yZVsSIjE.mft (raw, json)
Hash identifier: 6z/oOGB0miXtRtQuvkDwkssrgG/QN3DUXzZbKSoc7PI=
Subject key identifier: E7:54:FB:72:CE:65:1C:21:F5:FA:A9:5D:AA:DD:DF:95:F5:D0:55:C4
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 018DA17B5A67B883C22C27240AC919B1F4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.mft
Manifest number: 108A
Signing time: Tue 13 Feb 2024 08:00:32 +0000
Manifest this update: Tue 13 Feb 2024 08:00:32 +0000
Manifest next update: Wed 14 Feb 2024 08:00:32 +0000
Files and hashes: 1: MkRHfjzdt_EmaRoZX6572cfDXKI.roa (hash: fmnR5u3g21RNvJNynudhpstS09AfyiLUKjnwTJJzneE=)
2: zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl (hash: ODrtNldG/Ij87D8knvDrMTIHfUz/SEQ4PPEtXy/c+aA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:7b:5a:67:b8:83:c2:2c:27:24:0a:c9:19:b1:f4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: Feb 13 08:00:32 2024 GMT
Not After : Feb 14 08:00:32 2024 GMT
Subject: CN=e754fb72ce651c21f5faa95daadddf95f5d055c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:14:94:f5:08:ca:17:40:e3:6e:ae:14:ef:
d2:25:ad:c6:0a:d6:29:e4:6b:37:de:3f:d9:50:0f:
46:9b:9f:b3:df:e5:46:33:30:96:3b:c2:24:49:c8:
72:e1:ae:39:03:df:0d:4b:a1:54:3a:af:5f:3e:74:
1e:2e:70:c1:ed:34:b2:4f:31:3e:98:7c:3d:76:4b:
9e:65:47:37:24:6e:66:e5:30:b4:85:ea:76:de:a3:
34:71:9a:ee:09:a3:2b:3f:c6:5a:c7:fd:ef:c7:1b:
1d:16:ce:76:dc:e1:ec:70:83:95:9d:0f:65:3a:95:
36:97:c2:e6:ef:43:c1:35:ff:17:73:dd:1a:ac:15:
27:f0:83:f7:a4:52:d4:84:3b:c6:ae:c3:ab:52:bd:
e6:bb:52:0e:cd:ab:1c:48:00:5b:47:d0:25:4a:32:
cf:43:7c:58:3d:b4:50:ae:67:45:6d:c4:5f:5d:95:
00:0e:b3:71:1c:dd:09:3c:6f:d9:52:9f:9f:67:3f:
18:56:4f:87:2c:03:a7:88:69:62:6f:8c:36:7c:60:
c3:38:c3:26:6f:a4:7f:54:21:fc:76:f3:68:11:e5:
b6:53:94:3c:4d:85:20:36:e0:6e:a5:81:5b:8e:f5:
5a:80:97:8a:70:8a:ad:2f:97:88:da:b7:28:61:6e:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:54:FB:72:CE:65:1C:21:F5:FA:A9:5D:AA:DD:DF:95:F5:D0:55:C4
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a5:06:c2:f4:bc:1a:42:9d:e1:87:20:fd:b3:52:cf:95:14:
0a:15:48:fd:b9:9a:31:fc:cf:41:c0:b1:96:b3:a6:0f:26:85:
22:42:fc:07:bd:bb:ad:05:e6:a1:b6:c8:03:70:7f:cd:38:b2:
a4:26:b9:9e:f0:65:8d:6f:a5:03:d0:d0:97:93:ae:66:ec:4e:
f9:ec:ce:00:b5:72:35:4e:43:a8:54:7b:b2:bb:24:09:6f:ba:
86:48:4f:f2:ce:be:9f:00:ae:e1:91:7f:3b:0c:6b:2b:d2:1d:
4e:44:36:73:d5:34:78:10:d3:fd:28:76:2a:0e:b1:af:70:63:
73:b5:b4:fe:79:0c:61:8e:15:11:17:b9:d1:9a:e3:d8:e1:f9:
db:a9:f5:31:a4:a9:32:e7:0f:64:2b:30:e3:44:93:cb:78:25:
e5:3b:15:0e:fb:e8:83:9f:df:63:14:4e:50:71:25:58:98:6c:
d1:25:3c:3d:3c:d1:62:42:0b:a2:ba:35:e6:24:58:18:ef:00:
4c:be:7d:3b:03:59:32:16:db:fe:a2:d6:84:98:b3:b4:21:34:
62:ea:4d:1e:7b:43:b2:5f:a2:c3:a7:f7:a4:01:1b:bc:93:2e:
cb:f8:c2:69:ec:74:09:42:21:91:f0:25:77:d1:db:06:97:3a:
8a:a8:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:30 2024 by rpki-client on console-fra.rpki-client.org