Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.mft
File: zQbRm7PqWdFnY-9e8LxV2-7c54U.mft (raw, json)
Hash identifier: I19BQrCL5d2zVhy0DTcxJV+8Ns+Ppgin8IuFo+sdqpU=
Subject key identifier: BC:9B:87:74:CC:A0:79:50:D2:72:5C:C5:7B:FC:53:14:D0:0C:05:97
Authority key identifier: CD:06:D1:9B:B3:EA:59:D1:67:63:EF:5E:F0:BC:55:DB:EE:DC:E7:85
Certificate issuer: /CN=cd06d19bb3ea59d16763ef5ef0bc55dbeedce785
Certificate serial: 018DC55205866939635363A6A159F93E49E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQbRm7PqWdFnY-9e8LxV2-7c54U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.mft
Manifest number: 0FEF
Signing time: Tue 20 Feb 2024 07:01:43 +0000
Manifest this update: Tue 20 Feb 2024 07:01:43 +0000
Manifest next update: Wed 21 Feb 2024 07:01:43 +0000
Files and hashes: 1: zQbRm7PqWdFnY-9e8LxV2-7c54U.crl (hash: zhxouAhpmiNEDkjFdEPbppH2ao00xq83AwRhI5A+AjI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:52:05:86:69:39:63:53:63:a6:a1:59:f9:3e:49:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd06d19bb3ea59d16763ef5ef0bc55dbeedce785
Validity
Not Before: Feb 20 07:01:43 2024 GMT
Not After : Feb 21 07:01:43 2024 GMT
Subject: CN=bc9b8774cca07950d2725cc57bfc5314d00c0597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:21:34:6e:7f:0e:7b:7a:70:47:ef:50:63:
23:e6:9b:df:bc:41:89:49:5c:97:ad:f0:86:dc:1e:
b6:82:fe:f3:c6:64:a5:0f:35:02:85:82:45:2c:d5:
fe:b8:9f:6f:8d:95:db:2c:5d:24:e9:06:d1:cc:ab:
e2:ce:e8:d4:17:fd:a2:18:1a:a5:77:ae:ba:d4:31:
37:e6:44:64:18:79:46:52:b4:72:b6:22:e0:e8:7f:
da:0a:00:72:af:57:8f:cd:05:65:7e:b8:a6:b2:02:
51:53:55:14:75:80:d1:8a:fc:18:ed:ac:1c:2a:a3:
23:ad:c8:d8:10:fa:57:bd:92:be:53:af:9e:1f:f8:
16:71:2e:91:de:a2:fe:af:de:a0:09:57:30:c3:1b:
8c:bb:d4:8b:9e:74:cb:c2:42:cc:52:d5:2e:9b:41:
03:3b:d5:ea:e4:92:14:0f:7b:bf:ff:c6:20:24:e0:
91:f0:eb:f1:87:d1:33:e8:2e:26:a2:94:16:eb:e4:
26:4f:6d:1a:5d:c2:1c:dd:fa:38:39:80:57:d9:24:
f4:4d:ef:f2:7d:4f:ad:b7:3e:d8:e8:ce:ff:9c:d4:
f7:03:e7:63:eb:76:c9:c3:84:13:df:70:c1:87:01:
e0:b1:ea:f9:f8:20:b6:29:22:cb:0d:c1:1a:c0:4c:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9B:87:74:CC:A0:79:50:D2:72:5C:C5:7B:FC:53:14:D0:0C:05:97
X509v3 Authority Key Identifier:
keyid:CD:06:D1:9B:B3:EA:59:D1:67:63:EF:5E:F0:BC:55:DB:EE:DC:E7:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQbRm7PqWdFnY-9e8LxV2-7c54U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:b0:7f:17:9f:65:14:e6:e8:a6:b8:2a:71:7c:b8:f2:0c:
27:1a:68:03:cf:48:e7:c4:e8:4f:23:23:dd:a8:74:dd:dc:76:
77:74:9a:80:35:ac:30:c3:3d:b1:6b:de:32:db:b0:2f:cc:50:
c6:75:06:40:b0:70:c0:b3:d8:66:4f:9e:17:26:16:a9:59:cc:
42:8b:71:ed:b6:c9:d5:c0:c3:dd:06:7c:8c:e0:4b:88:e2:90:
42:e5:fb:ee:e0:6a:1d:85:19:2e:b0:f6:42:1f:34:13:a0:64:
9c:2f:19:62:cf:38:e1:46:6a:fc:39:c1:f9:ad:cf:aa:9f:72:
de:40:48:60:f0:e6:c6:01:c9:ea:3b:d7:d7:0b:36:eb:c4:bf:
01:62:e1:6f:98:97:17:bf:cd:6d:49:f3:fb:15:a1:0b:94:ca:
62:8c:5c:4d:78:c3:d0:70:f9:ea:d9:b7:f8:a3:73:68:9a:01:
c0:3c:09:dc:1b:aa:cd:87:59:71:a7:08:ec:11:8e:a1:f9:30:
fb:d1:d4:cc:ca:70:c4:0f:6a:6b:84:4c:98:db:ae:fd:d9:5b:
3c:e7:91:b2:95:c6:f1:e1:5d:d4:f1:f3:06:69:2a:9c:ad:2d:
6c:65:e7:2d:bd:14:87:1f:d0:5e:1d:f6:ab:8b:f1:70:8e:1e:
3c:d4:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:44 2025 by rpki-client