Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6b646e-849b-49c7-afd4-298945b0f599/1/ZOmV8EbpLwKyFqBHigBg88ue97M.mft
File: ZOmV8EbpLwKyFqBHigBg88ue97M.mft (raw, json)
Hash identifier: 2hEAoOK+6eUyOKoT3SAOMLEA/Q/1RsT6Cpc7gVNTAdk=
Subject key identifier: 27:AF:46:17:20:E0:3C:85:D9:0F:01:AE:04:88:A8:09:41:87:24:9E
Authority key identifier: 64:E9:95:F0:46:E9:2F:02:B2:16:A0:47:8A:00:60:F3:CB:9E:F7:B3
Certificate issuer: /CN=64e995f046e92f02b216a0478a0060f3cb9ef7b3
Certificate serial: 01859EC6B8BF7368F2F2945D5A2FCA3B5B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOmV8EbpLwKyFqBHigBg88ue97M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6b646e-849b-49c7-afd4-298945b0f599/1/ZOmV8EbpLwKyFqBHigBg88ue97M.mft
Manifest number: 8B
Signing time: Wed 11 Jan 2023 03:01:41 +0000
Manifest this update: Wed 11 Jan 2023 03:01:41 +0000
Manifest next update: Thu 12 Jan 2023 03:01:41 +0000
Files and hashes: 1: ZOmV8EbpLwKyFqBHigBg88ue97M.crl (hash: Zq2fnUr3rK2ZhQM9OORNAyVHR9kdc/iBQi5NnCMGNtg=)
2: sh_g49s2cFt2KWd-4QXqJw6RnxA.roa (hash: jJ8FwGv32NZglOVSfIkMDWhzjY1Dl0oQFd2AZmG7img=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9e:c6:b8:bf:73:68:f2:f2:94:5d:5a:2f:ca:3b:5b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e995f046e92f02b216a0478a0060f3cb9ef7b3
Validity
Not Before: Jan 11 03:01:41 2023 GMT
Not After : Jan 12 03:01:41 2023 GMT
Subject: CN=27af461720e03c85d90f01ae0488a8094187249e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:60:9c:16:8a:31:b7:4b:66:57:5e:ad:3f:
19:51:d2:bd:b3:60:2a:c2:79:66:58:94:bd:fe:33:
19:b9:35:1f:04:09:24:11:45:fd:00:2f:40:f3:ba:
b4:6b:f4:37:97:86:6b:c2:59:97:09:a2:72:e9:f6:
c6:34:31:a7:9f:d9:20:c7:45:2d:9f:03:06:41:24:
d8:1c:b5:26:b6:7b:a4:b2:48:75:a4:0a:a7:2a:d8:
c0:24:27:3f:b1:11:97:15:e7:bf:42:b0:bf:fe:3b:
a3:6b:10:39:78:e8:dc:fe:de:e5:f4:19:a3:33:9c:
a9:0d:66:be:a8:df:fb:7b:f2:88:7f:d8:82:77:39:
52:7a:93:3c:0b:52:60:8e:23:92:fa:7b:b1:1a:0b:
1f:ce:ab:27:66:6c:7d:d2:25:fd:9c:d3:11:f9:dc:
73:33:fa:b5:c0:32:b0:9b:85:dd:73:be:e0:97:75:
35:ef:14:92:c1:a3:88:49:39:30:c0:a5:7a:83:19:
1f:e1:a9:84:b1:6c:1f:4a:97:5b:68:93:83:a3:34:
fe:53:7b:0c:99:28:e7:a2:39:9f:bc:f1:f2:a5:ed:
2d:6b:9e:1f:ac:7b:44:df:ba:9c:c6:31:63:22:a5:
88:81:98:ca:ef:cf:e2:73:89:98:76:15:f3:5d:dc:
07:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:46:17:20:E0:3C:85:D9:0F:01:AE:04:88:A8:09:41:87:24:9E
X509v3 Authority Key Identifier:
keyid:64:E9:95:F0:46:E9:2F:02:B2:16:A0:47:8A:00:60:F3:CB:9E:F7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOmV8EbpLwKyFqBHigBg88ue97M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6b646e-849b-49c7-afd4-298945b0f599/1/ZOmV8EbpLwKyFqBHigBg88ue97M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6b646e-849b-49c7-afd4-298945b0f599/1/ZOmV8EbpLwKyFqBHigBg88ue97M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a2:f7:ad:00:6d:db:c7:1f:d8:17:22:08:3e:d2:95:ca:63:
cd:58:c1:63:e1:38:43:1b:c4:8b:cb:bb:88:39:b0:48:23:70:
04:3c:73:cf:0d:9b:3f:cc:60:be:8d:c4:d0:d9:06:80:1b:4c:
02:11:ae:dd:c0:c7:1a:6d:ed:de:41:91:34:22:52:aa:ee:9d:
a8:d2:45:c9:c9:85:86:55:63:47:60:38:08:96:c4:95:4b:d6:
14:8c:95:76:96:32:43:dd:cb:ab:4e:2a:71:6c:54:1e:f4:a5:
f4:da:14:2c:22:f7:41:58:46:d1:a4:0e:17:91:6e:84:4e:ee:
3e:2d:a6:70:e4:a0:81:60:7c:06:74:47:88:e1:6c:38:eb:68:
81:b1:31:06:1f:52:80:77:ef:d5:16:4a:b9:70:08:96:39:38:
f4:5c:74:a5:10:2e:c7:fd:1f:40:be:1a:c3:08:01:c6:e7:1e:
cc:ef:80:a7:26:20:6f:de:45:15:55:08:6c:93:3a:37:04:c9:
d7:e8:22:5e:36:37:d3:58:05:23:7b:6b:e2:d4:0b:75:aa:04:
18:d1:56:86:2d:7d:a6:fc:f6:ab:fb:b9:6e:0e:b7:04:81:2c:
6e:f3:ff:ff:c4:7b:f0:bf:28:08:4a:6b:4d:d9:bd:25:dd:75:
b4:8c:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:37:18 2025 by rpki-client