Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.mft
File: zJklGlcsQEbgrVWgTmt7bkZkOGw.mft (raw, json)
Hash identifier: yEE3ClBDul+m+HSIwBDiVbj7D/y9RsDIKX/a2FhTeFY=
Subject key identifier: CA:06:C3:AB:68:0B:29:50:89:C7:A7:A9:0F:F1:F2:4C:F2:07:87:59
Authority key identifier: CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
Certificate issuer: /CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
Certificate serial: 018BD75CD50FDAF10BA87CCB5FDE9DB92FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.mft
Manifest number: 084E
Signing time: Thu 16 Nov 2023 09:01:07 +0000
Manifest this update: Thu 16 Nov 2023 09:01:07 +0000
Manifest next update: Fri 17 Nov 2023 09:01:07 +0000
Files and hashes: 1: 3u_IbOzqEP00_DPC-6_PJmX-RBM.roa (hash: yuc8NRtORdDuq/mk1zq/dt/1FI2KzYZ4qJ8AuTpBuWo=)
2: zJklGlcsQEbgrVWgTmt7bkZkOGw.crl (hash: spYM4lhY22ZqWlWM2MmdryjWEH9jKsnPjgD0e0kF+I0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:5c:d5:0f:da:f1:0b:a8:7c:cb:5f:de:9d:b9:2f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc99251a572c4046e0ad55a04e6b7b6e4664386c
Validity
Not Before: Nov 16 09:01:07 2023 GMT
Not After : Nov 17 09:01:07 2023 GMT
Subject: CN=ca06c3ab680b295089c7a7a90ff1f24cf2078759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:78:9a:e3:20:32:da:c7:79:c3:12:48:74:
2b:9f:2d:01:a3:9b:b4:65:31:74:0f:b1:7f:13:3c:
a5:a8:12:c7:e1:6e:0d:18:a5:c9:67:9c:72:18:e1:
77:e1:14:c9:87:ea:87:7e:85:dd:e9:c9:cb:5c:a7:
62:38:f7:09:a4:bb:d9:ae:98:43:32:60:9e:6d:30:
f6:69:36:1e:11:4a:8a:10:d4:71:d1:8a:8d:72:ce:
7c:c1:5b:33:3f:c5:09:f9:01:52:f1:6d:b2:7a:02:
09:ca:ab:a5:fa:7d:a8:28:dc:13:f4:43:fc:4f:d1:
ae:97:5e:64:21:0d:10:58:ac:bb:c6:90:12:4a:a3:
2e:9d:a6:f0:39:33:99:91:be:16:39:90:a2:a0:20:
30:24:f6:b1:8f:c2:42:f3:87:d9:d4:39:cc:3f:56:
f2:70:8c:f3:31:a3:ce:b1:4f:5f:7b:db:82:b6:4e:
75:84:b4:8f:2d:b2:64:09:18:d6:78:af:e3:67:b4:
ae:19:e7:73:49:da:0e:e8:e7:49:48:0f:6f:78:0d:
e5:57:1b:00:6b:28:d3:0f:b2:25:3c:f8:78:b2:6c:
07:3d:c7:38:3c:de:89:36:3e:c1:af:b3:79:f9:c7:
1b:3e:e6:eb:0c:25:ef:b0:de:3e:a0:78:6b:da:7e:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:C3:AB:68:0B:29:50:89:C7:A7:A9:0F:F1:F2:4C:F2:07:87:59
X509v3 Authority Key Identifier:
keyid:CC:99:25:1A:57:2C:40:46:E0:AD:55:A0:4E:6B:7B:6E:46:64:38:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJklGlcsQEbgrVWgTmt7bkZkOGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/158743-3851-4a3c-adbd-0a4ffb4892ff/1/zJklGlcsQEbgrVWgTmt7bkZkOGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:03:75:52:4a:3f:f2:4d:ae:64:31:a0:4a:b0:9c:62:0e:90:
a2:64:25:b2:80:14:69:a1:8e:e0:18:b2:0c:82:52:0f:46:a2:
0d:41:bc:77:95:76:d8:c7:2c:99:84:30:22:95:f6:2c:f0:d8:
18:78:27:89:ca:06:c7:bb:54:2b:15:f8:cd:a3:ef:8d:45:67:
74:35:a4:37:c3:40:b7:c1:f9:f4:62:f2:2a:c6:4f:f3:86:d6:
2b:2f:4b:11:5c:4d:bb:eb:2d:05:e7:ab:76:e5:fd:29:6c:dd:
4f:2c:b8:6b:04:9b:6e:b8:f7:3c:74:e0:e2:6e:f0:fa:59:cd:
db:9d:94:77:fe:09:9d:68:32:e8:2c:ae:ce:2b:c4:fb:86:2d:
ea:d9:b0:98:47:12:9a:01:34:d4:03:f5:ef:b8:4a:31:af:b4:
e3:06:9e:b8:2d:9d:b8:6c:6d:3d:88:44:cd:b8:26:52:cb:83:
01:af:14:9b:28:2b:ba:c5:75:b1:5a:f5:f5:02:56:46:5c:ac:
df:1d:2a:b6:d0:90:56:49:47:77:05:a0:2b:7a:09:a9:ee:db:
44:9a:86:8b:be:a9:73:87:5c:5b:27:7a:5d:7d:af:71:bf:37:
f5:58:dc:5b:44:83:58:37:22:7d:a5:32:c0:2f:d9:33:36:a7:
5c:c2:23:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:13 2025 by rpki-client