Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zRMB3ZP9fMXPJTtmimkyqnK1pik.mft
File: zRMB3ZP9fMXPJTtmimkyqnK1pik.mft (raw, json)
Hash identifier: iy5x1gO8DM8imQbCSj1+iXmhfrFSMXnjReH8OMtKNP4=
Subject key identifier: A2:9C:0A:9D:44:FB:DE:7E:7B:EA:98:7F:23:F6:C6:8B:42:A2:C8:A5
Authority key identifier: CD:13:01:DD:93:FD:7C:C5:CF:25:3B:66:8A:69:32:AA:72:B5:A6:29
Certificate issuer: /CN=cd1301dd93fd7cc5cf253b668a6932aa72b5a629
Certificate serial: 0183ABAFD9EA0DA9F557A8D173D2CFEAD5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMB3ZP9fMXPJTtmimkyqnK1pik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zRMB3ZP9fMXPJTtmimkyqnK1pik.mft
Manifest number: 0AF7
Signing time: Thu 06 Oct 2022 05:06:11 +0000
Manifest this update: Thu 06 Oct 2022 05:06:11 +0000
Manifest next update: Fri 07 Oct 2022 05:06:11 +0000
Files and hashes: 1: zRMB3ZP9fMXPJTtmimkyqnK1pik.crl (hash: p8K955MzgjOOj5BWJ4A3lJaKEPxEZJ3oUhuvavIgg+s=)
2: zZj35Ivs4AB6RrVltKMZ64DeG-k.roa (hash: TAqfiwdQcmDYgtRSq92Pq9HrYZvebn44SCf/c1PklZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:af:d9:ea:0d:a9:f5:57:a8:d1:73:d2:cf:ea:d5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1301dd93fd7cc5cf253b668a6932aa72b5a629
Validity
Not Before: Oct 6 05:06:11 2022 GMT
Not After : Oct 7 05:06:11 2022 GMT
Subject: CN=a29c0a9d44fbde7e7bea987f23f6c68b42a2c8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:0e:62:4a:bb:b4:59:af:6c:25:c2:fe:e6:
0d:ba:2a:79:46:61:15:38:a3:d0:b6:bc:f9:14:2c:
7e:de:c6:ee:28:dc:4c:a3:b4:79:3e:12:2a:ca:a4:
9c:ea:0f:8d:3e:05:14:12:6c:72:2b:d8:84:dc:b8:
9c:84:66:0f:e7:2b:79:8b:8b:ad:48:0c:c4:f1:3e:
c6:ce:8d:90:e8:a6:92:38:e8:7c:e7:55:3a:0d:09:
b8:3e:1e:b9:47:17:2f:a4:8e:a4:22:6d:5b:6a:4f:
db:51:27:3a:fa:88:ea:2a:55:b6:82:c3:32:94:57:
26:cc:7e:69:bd:0f:53:87:6a:97:0f:36:25:c4:a7:
50:8a:f2:c7:99:b0:fa:c9:dc:81:46:a1:da:bc:06:
e2:c8:e6:40:19:8a:96:46:3a:2f:f4:38:70:b1:c0:
66:8a:61:f7:0f:22:f6:94:4c:9e:7b:5f:7f:22:b7:
21:3f:3f:0e:54:f5:76:d9:48:59:ef:d8:67:34:d6:
cb:71:9f:81:3d:48:49:44:25:50:50:6d:59:69:49:
dd:bf:42:64:40:ae:c3:d9:29:51:0f:39:95:74:cb:
b1:8d:fd:22:48:a9:6e:fa:9a:0d:c1:67:90:25:b7:
ab:fd:9c:a5:b7:44:c4:ec:c6:fa:5f:d4:02:7b:29:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:0A:9D:44:FB:DE:7E:7B:EA:98:7F:23:F6:C6:8B:42:A2:C8:A5
X509v3 Authority Key Identifier:
keyid:CD:13:01:DD:93:FD:7C:C5:CF:25:3B:66:8A:69:32:AA:72:B5:A6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMB3ZP9fMXPJTtmimkyqnK1pik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zRMB3ZP9fMXPJTtmimkyqnK1pik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zRMB3ZP9fMXPJTtmimkyqnK1pik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ab:20:28:10:95:3d:8e:8a:2d:f5:e6:7e:11:7d:a0:d4:f4:
d9:d9:e5:7e:6c:89:81:95:21:5c:a0:04:e1:24:4b:1f:3f:56:
04:a5:a9:6a:4a:73:1c:38:0f:fa:bb:ff:3a:17:97:61:1b:9d:
f0:20:84:48:64:bb:8c:0e:df:5f:8d:5a:3b:e4:e6:70:92:89:
9a:20:6d:c3:74:72:53:31:81:12:34:6b:46:0b:f3:33:a0:5a:
47:bc:43:8c:2a:1d:4e:78:7e:a3:29:0d:1c:33:96:fe:56:29:
ac:5a:25:4d:aa:98:ba:e3:ed:4f:51:12:ab:84:94:73:68:31:
93:e1:11:68:3c:6b:11:1f:70:c3:3f:04:4b:3b:9e:a6:cc:05:
8a:cc:c7:ec:51:90:9b:3f:de:bd:cf:3c:7c:f0:31:78:e0:ee:
05:95:ba:2b:b9:19:ed:04:65:64:56:86:4c:e1:19:e7:0b:d3:
03:95:53:d6:89:fd:f8:43:f0:69:f5:88:b9:33:7f:e5:1a:f7:
42:78:29:98:99:e5:26:ce:58:1d:fe:b1:c5:df:76:eb:90:57:
1e:d5:92:01:60:b9:1e:43:52:bf:39:73:c4:44:5c:ee:6b:b2:
d9:00:e6:53:8a:cf:30:77:4f:09:08:f0:c1:42:d4:c6:bd:89:
ba:15:15:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:34:11 2025 by rpki-client