Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/835bc1-98ad-4421-8218-42d54d0f5f5e/1/ZQl0VqksHiRNhs-miqILdSzugiA.mft
File: ZQl0VqksHiRNhs-miqILdSzugiA.mft (raw, json)
Hash identifier: vyOmCknHLYZdSiGak2XANi8ze1sOzwIsfWlx2j3bhPg=
Subject key identifier: 66:4B:64:CB:FC:87:F7:02:54:20:3C:E2:A3:5D:65:2F:65:FC:25:DC
Authority key identifier: 65:09:74:56:A9:2C:1E:24:4D:86:CF:A6:8A:A2:0B:75:2C:EE:82:20
Certificate issuer: /CN=65097456a92c1e244d86cfa68aa20b752cee8220
Certificate serial: 0189BB04E6D8BEE4E45A247C3D6357F46406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQl0VqksHiRNhs-miqILdSzugiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/835bc1-98ad-4421-8218-42d54d0f5f5e/1/ZQl0VqksHiRNhs-miqILdSzugiA.mft
Manifest number: 0A87
Signing time: Thu 03 Aug 2023 10:50:07 +0000
Manifest this update: Thu 03 Aug 2023 10:50:07 +0000
Manifest next update: Fri 04 Aug 2023 10:50:07 +0000
Files and hashes: 1: ZQl0VqksHiRNhs-miqILdSzugiA.crl (hash: ERuOKBS5n0H1wugfBIS2QbD7U3OivHXMVLdvFMNZywA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:04:e6:d8:be:e4:e4:5a:24:7c:3d:63:57:f4:64:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65097456a92c1e244d86cfa68aa20b752cee8220
Validity
Not Before: Aug 3 10:50:07 2023 GMT
Not After : Aug 4 10:50:07 2023 GMT
Subject: CN=664b64cbfc87f70254203ce2a35d652f65fc25dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:1f:dd:a4:57:39:57:a0:e2:a5:ca:11:75:
c8:99:29:27:6b:9f:5a:31:04:de:86:10:41:65:07:
d2:0d:c7:f5:bf:eb:93:a5:6c:4e:a7:44:53:f2:64:
c7:b1:82:ce:63:1e:b6:15:a7:b4:cd:7f:e5:45:03:
07:be:65:99:eb:ab:57:2c:5a:bc:e5:c1:b4:fc:dc:
cd:bc:65:3c:23:0c:59:4d:dc:28:3d:48:15:f2:bb:
0d:48:ed:8c:63:fe:62:90:01:6a:3c:7f:4b:e6:32:
28:ba:bf:ad:e4:62:b4:9d:7f:70:81:26:4a:6e:46:
96:31:35:c1:ee:29:61:a9:79:93:09:6e:44:88:ea:
d4:86:f5:cd:1d:91:3e:9b:4c:76:13:ee:e8:fc:25:
71:47:81:d2:50:a0:4c:f7:09:b4:b3:5f:91:8b:6a:
f5:a3:11:44:0d:de:71:fb:c0:99:55:6d:42:b7:e2:
1c:4e:e6:b3:cf:9b:af:1e:32:1b:4d:53:da:94:0d:
4e:8f:a2:e1:f6:d7:23:6f:45:8a:9b:47:70:fb:a6:
6a:9a:cc:07:11:18:05:c0:1d:ff:0e:ee:27:4c:e4:
2c:aa:9d:e4:bc:9c:2b:ba:fa:54:d9:12:cb:f9:ae:
67:bf:ba:0a:58:11:e3:e7:15:22:d8:63:aa:59:8e:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4B:64:CB:FC:87:F7:02:54:20:3C:E2:A3:5D:65:2F:65:FC:25:DC
X509v3 Authority Key Identifier:
keyid:65:09:74:56:A9:2C:1E:24:4D:86:CF:A6:8A:A2:0B:75:2C:EE:82:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQl0VqksHiRNhs-miqILdSzugiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/835bc1-98ad-4421-8218-42d54d0f5f5e/1/ZQl0VqksHiRNhs-miqILdSzugiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/835bc1-98ad-4421-8218-42d54d0f5f5e/1/ZQl0VqksHiRNhs-miqILdSzugiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5d:c2:3a:32:2d:0a:a4:eb:6c:18:f2:67:f8:a7:aa:3a:ae:
88:dc:6b:16:d2:07:3e:1b:19:31:ab:19:b4:a9:a2:c2:03:d5:
95:da:46:80:35:0f:e3:6c:36:46:50:8e:68:ba:73:43:b9:b4:
57:8c:7b:5f:6c:20:f9:1b:fd:68:41:a8:33:76:91:3f:4f:42:
88:ce:70:18:f7:f5:4e:32:b8:77:c8:2c:c8:9b:65:e9:a1:e7:
37:db:c8:0e:a4:35:ca:9e:5f:ab:fe:85:87:8c:76:88:0d:c7:
dd:01:d2:e8:a2:5d:e6:ac:7a:c4:2e:59:a9:c9:f2:23:1e:06:
c8:e0:aa:a9:4d:06:db:31:31:b7:5a:03:d2:96:73:f2:2f:98:
6e:e4:f4:44:47:0e:18:4d:41:6a:09:b3:1a:af:f2:df:93:ed:
41:c0:65:24:b3:61:cf:71:0c:e6:8d:86:bc:fa:94:8e:29:46:
76:a5:13:46:f0:75:91:77:76:fd:f8:64:59:1b:95:e3:9a:b2:
41:03:55:87:87:cd:e7:58:28:b2:93:e5:9e:01:48:1a:ae:2f:
87:bd:e8:43:6c:b8:3b:c5:7f:31:63:80:c1:18:44:27:30:10:
27:7f:c2:95:92:0e:e5:26:aa:3a:f8:97:34:ef:88:ab:18:c9:
52:6e:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:21:28 2025 by rpki-client