Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/zILDml8-keoFBRuz7ZwNFq6C-gw.mft
File: zILDml8-keoFBRuz7ZwNFq6C-gw.mft (raw, json)
Hash identifier: 8iW8fj3PNAXJxvteZ3dcp9IZHl3ibDtan4/hy18U/yQ=
Subject key identifier: 81:AC:C4:05:EF:2D:78:F1:A7:76:79:48:35:24:A7:61:50:74:BE:B2
Authority key identifier: CC:82:C3:9A:5F:3E:91:EA:05:05:1B:B3:ED:9C:0D:16:AE:82:FA:0C
Certificate issuer: /CN=cc82c39a5f3e91ea05051bb3ed9c0d16ae82fa0c
Certificate serial: 018BB387D0E4F75DAF9AA842A8EC85ACB314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zILDml8-keoFBRuz7ZwNFq6C-gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/zILDml8-keoFBRuz7ZwNFq6C-gw.mft
Manifest number: 09C9
Signing time: Thu 09 Nov 2023 10:01:44 +0000
Manifest this update: Thu 09 Nov 2023 10:01:44 +0000
Manifest next update: Fri 10 Nov 2023 10:01:44 +0000
Files and hashes: 1: dQ5CeIqNmMFyT6_9_9epmZiAW_o.roa (hash: 7PsoXv4TdhRgpWrTu3PPrBHRt4ZMCFwOmDxZpcBYlfA=)
2: zILDml8-keoFBRuz7ZwNFq6C-gw.crl (hash: S2tPAlSflLG6eINoj58Bbodsv1N2tvtpN8Sdao5LeIE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:87:d0:e4:f7:5d:af:9a:a8:42:a8:ec:85:ac:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc82c39a5f3e91ea05051bb3ed9c0d16ae82fa0c
Validity
Not Before: Nov 9 10:01:44 2023 GMT
Not After : Nov 10 10:01:44 2023 GMT
Subject: CN=81acc405ef2d78f1a77679483524a7615074beb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b7:cc:c6:e7:dd:ec:5c:8f:1f:1e:25:d2:00:
c0:7e:a9:3b:4c:0d:12:fe:66:28:7d:a5:2f:35:82:
83:a8:0b:39:ff:b4:87:0f:70:d4:47:1d:02:a7:92:
32:1b:36:ae:c2:48:1e:2c:e6:54:13:81:45:3d:dc:
9f:3b:2e:0f:ca:71:b5:e8:0c:46:47:60:e5:25:a5:
c9:97:11:65:43:d0:7f:33:32:4e:6b:da:05:1e:8b:
ed:00:fb:10:9b:4e:dd:a4:14:0e:f3:f8:a0:c2:20:
d1:6c:8d:f3:91:f2:84:fd:c7:d7:28:d8:f6:54:22:
9e:50:29:a3:51:7d:40:09:2d:b1:ed:a9:ad:00:01:
f8:e8:0a:f7:d2:75:fd:11:a9:a1:e3:21:01:b8:69:
c8:74:da:1b:99:fa:fa:b9:bc:8a:84:32:96:e9:79:
a0:66:54:69:c5:e9:96:73:a9:96:8c:33:3f:16:75:
85:16:91:79:ec:47:51:ad:00:fc:5d:31:20:bf:02:
68:c7:db:de:38:73:30:56:45:6b:cb:d0:12:01:df:
79:57:1a:00:e1:06:9e:38:44:a6:dd:41:7a:c8:d1:
d9:58:71:6a:85:9c:f3:eb:b3:10:91:88:6c:7b:68:
7b:d3:7f:11:dc:49:c4:f8:fd:ab:97:1c:99:6c:04:
82:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AC:C4:05:EF:2D:78:F1:A7:76:79:48:35:24:A7:61:50:74:BE:B2
X509v3 Authority Key Identifier:
keyid:CC:82:C3:9A:5F:3E:91:EA:05:05:1B:B3:ED:9C:0D:16:AE:82:FA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zILDml8-keoFBRuz7ZwNFq6C-gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/zILDml8-keoFBRuz7ZwNFq6C-gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4c3e48-9990-4b0b-af77-7e94068450e9/1/zILDml8-keoFBRuz7ZwNFq6C-gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:62:a0:98:56:7c:b1:b4:ab:d0:6f:41:9c:dc:70:a8:eb:b1:
8c:18:94:15:f7:72:d1:df:49:1d:10:87:11:81:6e:b7:4f:74:
97:d7:b8:ef:d4:7f:e7:d9:da:86:3e:1c:90:dc:7c:dd:82:83:
09:af:ed:15:32:89:a1:a3:3d:b3:ff:41:33:34:08:25:54:86:
58:c0:1c:80:f0:54:52:c7:ac:74:b3:94:4f:1a:51:75:69:b1:
23:c3:e3:93:39:f0:cf:34:d6:d7:80:14:5a:ea:e4:50:78:c4:
c5:b9:83:85:cc:94:61:ab:93:ab:79:74:78:63:7a:ba:83:9d:
1b:15:31:b8:90:da:02:08:0c:bc:46:fd:fc:9b:b6:39:01:75:
f7:39:8d:c3:b2:c8:eb:6d:32:53:98:7e:d5:23:44:ea:5a:28:
b4:6e:cd:80:20:8d:1b:eb:b6:97:16:75:16:a8:b8:d4:e1:50:
ff:e8:ab:2e:59:0d:94:27:a5:34:7d:73:fa:f5:03:21:dc:48:
02:59:ed:45:93:f1:f0:f8:82:53:67:e6:57:c3:b9:a8:01:55:
54:78:23:54:da:9b:4f:de:b6:fa:0a:e6:d7:22:42:d8:f4:3b:
7d:7d:ba:84:d8:c1:74:1a:95:6a:5e:40:72:41:aa:75:8e:19:
cb:5e:83:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:21:22 2025 by rpki-client