Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/zjXyffPjf1Pwq_dD7sHVFmSNLdg.mft
File: zjXyffPjf1Pwq_dD7sHVFmSNLdg.mft (raw, json)
Hash identifier: tYOHVPZnwh029UnvsIwFM1134pyaam9A7Clya8W8RCA=
Subject key identifier: 8A:E1:B9:1D:E6:85:C0:AF:41:E3:B7:2A:F1:7B:FA:27:D9:AF:D0:A8
Authority key identifier: CE:35:F2:7D:F3:E3:7F:53:F0:AB:F7:43:EE:C1:D5:16:64:8D:2D:D8
Certificate issuer: /CN=ce35f27df3e37f53f0abf743eec1d516648d2dd8
Certificate serial: 018E1E283B9B2935EAFEC20C5B30D6456078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjXyffPjf1Pwq_dD7sHVFmSNLdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/zjXyffPjf1Pwq_dD7sHVFmSNLdg.mft
Manifest number: 10BC
Signing time: Fri 08 Mar 2024 13:02:16 +0000
Manifest this update: Fri 08 Mar 2024 13:02:16 +0000
Manifest next update: Sat 09 Mar 2024 13:02:16 +0000
Files and hashes: 1: lcN3WD4TJoC1H-vvQvbN9bd26Ac.roa (hash: 433ctPZnk3uaicAHOJPMK3T9q9DJm76B/tDD6Uoai9Y=)
2: zjXyffPjf1Pwq_dD7sHVFmSNLdg.crl (hash: I7qX5UStFA6+0wMCdQdfuGRYtS+Clfe7cNI75DTNbIQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1e:28:3b:9b:29:35:ea:fe:c2:0c:5b:30:d6:45:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce35f27df3e37f53f0abf743eec1d516648d2dd8
Validity
Not Before: Mar 8 13:02:16 2024 GMT
Not After : Mar 9 13:02:16 2024 GMT
Subject: CN=8ae1b91de685c0af41e3b72af17bfa27d9afd0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:95:80:1c:78:16:8e:5a:b5:e8:24:09:1b:
54:8b:71:13:8a:79:5e:3b:72:9c:1f:8d:94:7f:48:
d5:7a:76:d4:3e:5a:c1:15:af:fe:d3:44:11:80:05:
e4:77:16:65:77:28:86:bc:a2:72:5f:20:9f:05:2e:
40:1e:9b:72:1e:00:16:21:89:ae:97:e9:05:57:58:
2d:4d:c4:3b:2d:70:63:84:d7:3c:3b:69:f7:b7:48:
f7:a3:b3:d4:fd:00:3e:5b:6d:86:bd:de:1f:80:d1:
85:58:6c:59:2a:c8:f9:34:e1:56:d6:ff:e6:dc:02:
d4:16:c1:b7:ec:c6:e9:c3:aa:1f:8f:88:04:25:3b:
c6:f7:7a:e9:a2:32:0c:e6:81:2d:43:61:8c:6b:17:
dc:81:ac:d4:24:3f:ff:e0:0f:0e:f6:06:93:ae:34:
e7:ac:3e:9a:d8:f2:8c:4c:1c:89:09:cb:ac:22:b4:
09:c9:3f:9e:4a:f7:ee:10:64:ad:01:c7:a9:74:b5:
54:38:7e:06:c4:e6:b2:2b:f1:95:7b:5c:b9:45:12:
7a:69:73:24:d0:cc:b4:15:11:62:fb:cd:25:4f:8d:
eb:b4:27:99:4d:5f:60:90:0a:28:1c:bd:f4:c9:79:
e9:f4:8b:76:d8:6d:d8:11:0b:f1:ee:8b:f2:da:41:
19:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:B9:1D:E6:85:C0:AF:41:E3:B7:2A:F1:7B:FA:27:D9:AF:D0:A8
X509v3 Authority Key Identifier:
keyid:CE:35:F2:7D:F3:E3:7F:53:F0:AB:F7:43:EE:C1:D5:16:64:8D:2D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjXyffPjf1Pwq_dD7sHVFmSNLdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/zjXyffPjf1Pwq_dD7sHVFmSNLdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/zjXyffPjf1Pwq_dD7sHVFmSNLdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:bc:67:eb:5a:4b:86:cd:e5:71:7e:6b:0c:c3:d3:92:e1:
f9:4c:f2:f1:11:a6:c4:94:23:de:1b:ba:68:73:8b:e7:3c:34:
bf:5b:70:1e:86:e1:34:67:db:44:1b:08:62:f8:e4:a9:0d:0c:
e1:fd:af:d0:db:f0:be:44:ff:91:e2:9a:3f:96:c1:2e:81:31:
38:0d:99:9c:df:71:f7:ff:3a:bc:b8:3d:b9:1d:54:9f:46:62:
c1:84:5f:c2:4d:4a:a1:6c:16:e2:3b:a0:a7:a3:a7:c7:21:97:
06:56:31:cc:89:25:2a:7d:09:78:66:08:b4:92:ea:ba:a0:07:
f0:9f:cf:8d:19:a9:06:d3:cc:5a:a6:32:d3:39:3b:de:2d:71:
bc:c8:63:ab:5c:b9:47:ef:4d:8d:47:25:80:8f:b4:77:82:78:
67:60:01:a5:19:4c:31:d4:68:6b:48:2c:4e:05:bb:6f:71:e3:
e2:c4:9b:3e:77:16:6c:79:c9:c9:85:74:d0:cc:c4:21:cb:14:
37:88:38:a3:56:9c:ec:67:f5:96:58:e4:43:37:8d:3f:7b:a0:
98:12:8b:ca:5a:70:77:f1:74:40:c0:f4:83:21:02:28:25:c1:
be:ca:36:46:09:d9:82:7b:06:dc:9e:e8:4d:4d:96:dd:8c:8b:
32:5e:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:14 2024 by rpki-client on console-ams.rpki-client.org