Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aefc24-ae86-4974-9718-df096f8c20cc/1/CZwh50gDoOXS_MeNv29qEPxZorA.mft
File: CZwh50gDoOXS_MeNv29qEPxZorA.mft (raw, json)
Hash identifier: tau5r2dbUI2hLrrRi99GjYIGkUEfAAzEXLqAU9MGxEY=
Subject key identifier: 24:FA:FE:0F:BF:EF:A3:28:89:73:20:AF:69:BF:0E:A4:20:A1:63:4C
Authority key identifier: 09:9C:21:E7:48:03:A0:E5:D2:FC:C7:8D:BF:6F:6A:10:FC:59:A2:B0
Certificate issuer: /CN=099c21e74803a0e5d2fcc78dbf6f6a10fc59a2b0
Certificate serial: 018D220649CD43B6142A84E5E695F8A22DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZwh50gDoOXS_MeNv29qEPxZorA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aefc24-ae86-4974-9718-df096f8c20cc/1/CZwh50gDoOXS_MeNv29qEPxZorA.mft
Manifest number: 010C
Signing time: Fri 19 Jan 2024 14:00:53 +0000
Manifest this update: Fri 19 Jan 2024 14:00:53 +0000
Manifest next update: Sat 20 Jan 2024 14:00:53 +0000
Files and hashes: 1: CZwh50gDoOXS_MeNv29qEPxZorA.crl (hash: 7tPJ9L+x0/WJjdXgSSKtC5KpUyBhHU39Pm3IcAw5mKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:22:06:49:cd:43:b6:14:2a:84:e5:e6:95:f8:a2:2d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099c21e74803a0e5d2fcc78dbf6f6a10fc59a2b0
Validity
Not Before: Jan 19 14:00:53 2024 GMT
Not After : Jan 20 14:00:53 2024 GMT
Subject: CN=24fafe0fbfefa328897320af69bf0ea420a1634c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:4a:5e:15:bd:41:d6:a2:89:fa:f2:63:91:
03:1a:81:5b:13:95:50:4e:b5:12:14:6d:9d:dc:e6:
59:da:57:ed:c9:19:0e:72:6f:b2:50:ef:56:27:07:
93:da:a8:3e:7c:aa:88:5b:94:7d:13:00:ee:72:92:
11:49:a2:07:65:38:39:82:8b:02:00:28:01:b0:0e:
64:7b:8f:b1:a3:80:09:9f:38:0d:13:2e:ba:9f:bf:
33:80:01:b2:3c:51:df:c6:5c:75:2d:05:c6:ae:0d:
5b:ee:1f:05:5f:3f:48:a5:fc:4d:6b:33:4e:59:a3:
a1:ea:80:d7:0d:e0:5a:b8:8b:60:0b:e1:db:a7:46:
f8:82:ac:a8:b5:1b:50:fe:a1:1b:71:41:f0:cb:c9:
52:cd:2d:46:ed:92:a9:08:4b:53:e2:ca:aa:d5:3a:
9a:a9:66:3c:20:59:e1:98:22:e7:e6:7b:75:19:43:
52:a9:1d:b2:d5:66:2b:cc:b7:f9:ba:0e:ef:56:15:
f1:f1:a8:f6:b6:9b:78:37:62:28:e4:32:2a:09:c5:
e8:90:97:42:1b:df:b1:b4:b2:7d:5d:0e:67:3d:b6:
a5:dc:53:5f:21:25:c7:2e:51:67:60:d1:e6:b2:86:
ec:bd:b8:56:0f:bd:61:d8:e5:5a:b8:2c:96:9a:78:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FA:FE:0F:BF:EF:A3:28:89:73:20:AF:69:BF:0E:A4:20:A1:63:4C
X509v3 Authority Key Identifier:
keyid:09:9C:21:E7:48:03:A0:E5:D2:FC:C7:8D:BF:6F:6A:10:FC:59:A2:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZwh50gDoOXS_MeNv29qEPxZorA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aefc24-ae86-4974-9718-df096f8c20cc/1/CZwh50gDoOXS_MeNv29qEPxZorA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aefc24-ae86-4974-9718-df096f8c20cc/1/CZwh50gDoOXS_MeNv29qEPxZorA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:43:56:8f:87:fb:1c:64:ad:4f:e3:8b:24:62:cb:56:9c:0b:
87:47:56:01:58:c4:70:aa:f4:3a:82:98:af:a1:81:8a:36:25:
70:ce:d2:d5:e5:83:17:3c:1c:ce:41:cc:6b:59:9b:34:be:64:
2c:a8:be:7b:55:77:25:0b:d6:f8:59:bf:a3:cc:d2:ba:97:43:
18:07:33:ee:3c:75:e3:d8:69:52:89:b5:45:ab:73:0e:c4:3e:
87:44:0d:82:43:9f:ea:a4:cb:d7:2f:ba:ca:d3:ed:a1:59:d4:
96:f8:95:55:42:47:d2:9c:ef:09:eb:cb:6e:14:23:a6:7f:80:
05:ed:44:0d:ba:1d:52:3a:5e:ca:97:1d:e1:7f:62:c9:3f:13:
09:e9:5f:eb:fc:03:33:72:08:bf:7f:40:8e:73:dc:23:83:26:
5d:21:37:e1:f4:e9:00:80:b8:01:76:a5:18:db:3e:61:51:e7:
7a:d2:b4:fd:45:fb:6f:e8:26:d7:b2:a0:84:ee:54:c5:04:31:
5d:e8:0a:e8:a5:ca:d7:d7:8e:54:c3:74:71:e9:c8:2a:d1:42:
b3:93:4f:a1:1b:06:38:c2:72:ce:30:d8:7b:71:84:aa:f3:b7:
1c:8d:ba:e3:bd:67:0f:e0:72:fd:8e:d8:1f:80:74:a0:ee:ba:
71:3d:07:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:12:12 2025 by rpki-client