Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0db364-4c03-4418-af52-bc6d16433e2c/1/zLiGkD6HTmVeJ2L5DauZk26q4rI.mft
File: zLiGkD6HTmVeJ2L5DauZk26q4rI.mft (raw, json)
Hash identifier: oQ468a+bXtpyAC+GudRJCbGAc6xC2uYsogxF0I6s7p4=
Subject key identifier: F1:46:23:12:EE:B2:1A:5F:2B:CA:2F:E2:6B:3F:2A:9C:33:98:45:9A
Authority key identifier: CC:B8:86:90:3E:87:4E:65:5E:27:62:F9:0D:AB:99:93:6E:AA:E2:B2
Certificate issuer: /CN=ccb886903e874e655e2762f90dab99936eaae2b2
Certificate serial: 019323E4F0D7FA2828407137F74C81AA9E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLiGkD6HTmVeJ2L5DauZk26q4rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0db364-4c03-4418-af52-bc6d16433e2c/1/zLiGkD6HTmVeJ2L5DauZk26q4rI.mft
Manifest number: 016B
Signing time: Wed 13 Nov 2024 05:00:26 +0000
Manifest this update: Wed 13 Nov 2024 05:00:26 +0000
Manifest next update: Thu 14 Nov 2024 05:00:26 +0000
Files and hashes: 1: zLiGkD6HTmVeJ2L5DauZk26q4rI.crl (hash: PH66/u8F+mwt+YrdxUg+pVnTnl+gieVIbVZSz289bQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:23:e4:f0:d7:fa:28:28:40:71:37:f7:4c:81:aa:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb886903e874e655e2762f90dab99936eaae2b2
Validity
Not Before: Nov 13 05:00:26 2024 GMT
Not After : Nov 14 05:00:26 2024 GMT
Subject: CN=f1462312eeb21a5f2bca2fe26b3f2a9c3398459a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:ee:8b:70:e3:3c:77:00:9b:27:65:a3:26:
03:6e:5d:cc:67:92:22:de:42:e4:57:5e:5c:15:38:
e3:cb:1a:04:16:df:62:91:0c:ad:e8:8f:63:5b:fe:
0b:24:5f:14:fa:23:ec:72:4e:ca:9a:68:f7:c6:7b:
e5:45:df:68:13:36:13:ed:11:d2:89:db:aa:54:0a:
7f:c8:df:30:6d:b2:55:49:76:87:2b:f8:d2:98:e7:
10:c6:a2:59:ad:ad:ae:4b:ae:6b:bf:a8:02:f3:28:
72:7e:6c:cc:b0:e8:e5:4c:29:d1:c1:7b:88:56:95:
aa:8c:19:1c:be:3c:97:84:43:05:ab:84:99:7f:6e:
5f:7a:cd:0e:c8:43:74:71:0e:01:af:0f:63:34:05:
5f:98:a5:7a:ae:d9:eb:ee:8a:b8:3c:6f:7c:4d:b9:
2d:3e:68:28:94:dc:99:14:c3:81:9d:89:60:9c:09:
a1:8b:a9:6e:d6:af:3b:4b:3d:b5:a7:5a:ae:b1:5f:
22:83:d1:69:49:d2:45:e4:e1:79:40:1e:0c:f1:fe:
92:fd:22:13:d2:41:2c:61:bc:30:ec:53:21:d7:c2:
45:4d:60:84:71:d1:17:21:ff:42:28:c6:93:a0:28:
e8:fa:dd:82:50:2e:a3:87:10:48:9f:36:91:40:43:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:46:23:12:EE:B2:1A:5F:2B:CA:2F:E2:6B:3F:2A:9C:33:98:45:9A
X509v3 Authority Key Identifier:
keyid:CC:B8:86:90:3E:87:4E:65:5E:27:62:F9:0D:AB:99:93:6E:AA:E2:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLiGkD6HTmVeJ2L5DauZk26q4rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0db364-4c03-4418-af52-bc6d16433e2c/1/zLiGkD6HTmVeJ2L5DauZk26q4rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0db364-4c03-4418-af52-bc6d16433e2c/1/zLiGkD6HTmVeJ2L5DauZk26q4rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:87:ea:de:8a:05:d1:c7:aa:b0:c6:06:4c:9a:98:ee:fe:37:
d9:12:5a:f7:ff:40:3f:02:ff:37:11:69:0f:95:1b:98:3e:c9:
9a:02:8c:e7:31:ac:a0:94:3f:fe:2f:90:a9:18:70:31:b7:09:
16:fd:cb:76:84:ab:b2:db:91:f5:5f:5f:6e:c9:8c:10:7b:12:
82:9d:6d:ca:73:0d:a0:40:c9:fc:ee:3c:8a:e7:72:42:cc:9e:
1f:d1:86:92:ae:bf:36:23:1c:19:9c:bd:91:78:a2:4c:5d:cc:
1a:b9:dc:57:c5:1c:59:aa:6b:31:dd:cb:67:00:a0:4a:2d:18:
aa:f4:e6:09:e2:e4:5f:e6:4c:09:f0:90:fa:2d:e2:52:d6:65:
6b:cd:d7:28:88:b6:33:69:20:f2:34:8c:22:e3:85:5b:df:7f:
87:ab:c4:d9:2f:36:b2:16:25:b4:78:61:70:e7:0d:f9:a4:10:
2d:12:43:35:27:d6:2a:06:d2:71:90:16:bb:a8:20:7f:79:64:
3a:bc:0e:6f:59:b2:0c:c1:e5:f3:20:11:6c:75:ea:4c:19:7c:
4e:6f:ec:19:23:78:f3:1a:5b:29:bf:d6:6d:61:e7:b7:c8:68:
7c:aa:00:41:99:77:80:c5:84:f5:14:77:2e:d0:31:86:9c:60:
dd:32:4e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:50 2025 by rpki-client