Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/ZXiatNkDssc_ebL2bthqQ6lkA0A.mft
File: ZXiatNkDssc_ebL2bthqQ6lkA0A.mft (raw, json)
Hash identifier: q4/zyyPk10CveJw+ulfNG1ApR+rBi/nivYH6E04X6ds=
Subject key identifier: 92:12:9E:31:16:73:43:43:A8:19:70:E9:F5:D7:A8:52:D3:32:4F:32
Authority key identifier: 65:78:9A:B4:D9:03:B2:C7:3F:79:B2:F6:6E:D8:6A:43:A9:64:03:40
Certificate issuer: /CN=65789ab4d903b2c73f79b2f66ed86a43a9640340
Certificate serial: 0189AB018E5A12D6072137D1A05F6FE3B2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZXiatNkDssc_ebL2bthqQ6lkA0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/ZXiatNkDssc_ebL2bthqQ6lkA0A.mft
Manifest number: 0728
Signing time: Mon 31 Jul 2023 08:12:33 +0000
Manifest this update: Mon 31 Jul 2023 08:12:33 +0000
Manifest next update: Tue 01 Aug 2023 08:12:33 +0000
Files and hashes: 1: ZXiatNkDssc_ebL2bthqQ6lkA0A.crl (hash: /ixgHLDGt6hRUfq4hBRGBRiQyfDusflA5dEknJHyZEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:01:8e:5a:12:d6:07:21:37:d1:a0:5f:6f:e3:b2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65789ab4d903b2c73f79b2f66ed86a43a9640340
Validity
Not Before: Jul 31 08:12:33 2023 GMT
Not After : Aug 1 08:12:33 2023 GMT
Subject: CN=92129e3116734343a81970e9f5d7a852d3324f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:c4:f8:01:1d:a5:4f:b2:4b:3f:3c:37:09:
66:56:b1:4a:69:b0:37:eb:0f:c2:1b:47:8d:67:9c:
93:10:85:38:cb:74:f6:37:30:52:a2:02:dd:96:c0:
61:d2:9a:95:dc:e1:40:fa:f5:92:8b:a2:87:04:ab:
ff:84:90:4e:e4:33:f3:4d:0a:7c:ab:89:bd:3e:bd:
44:7e:ba:75:c2:7f:4a:0b:c9:96:f2:fb:3f:9d:54:
c5:e0:e3:97:97:3a:71:ed:2a:ae:88:6e:ec:07:51:
ba:7e:0f:a2:29:16:0e:28:d4:2c:66:6f:19:f9:5d:
ce:f2:e9:9b:59:22:58:04:95:e4:04:a4:16:56:d1:
35:46:6b:f5:a2:c3:96:68:b3:0f:26:1f:6b:91:09:
c2:2c:51:7b:59:c5:84:58:ed:5f:fe:5e:bb:04:1d:
34:56:5c:50:13:fa:a2:27:6e:09:53:e3:f0:75:7c:
a2:e8:b9:fc:c7:40:40:1b:4a:f2:f1:41:2e:85:c4:
bc:98:0e:71:f9:b3:7b:c2:37:ad:ff:da:02:94:3f:
fa:b7:de:ab:a8:87:46:2e:38:48:e0:ef:56:04:d5:
d6:d4:0a:29:be:4b:aa:b5:7c:3c:73:2a:cb:5d:7f:
e0:6f:12:77:df:47:61:54:47:e6:da:91:9b:ed:2b:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:12:9E:31:16:73:43:43:A8:19:70:E9:F5:D7:A8:52:D3:32:4F:32
X509v3 Authority Key Identifier:
keyid:65:78:9A:B4:D9:03:B2:C7:3F:79:B2:F6:6E:D8:6A:43:A9:64:03:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXiatNkDssc_ebL2bthqQ6lkA0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/ZXiatNkDssc_ebL2bthqQ6lkA0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/ZXiatNkDssc_ebL2bthqQ6lkA0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cd:67:ac:16:ad:07:c7:ca:97:33:df:4e:19:2e:05:66:ba:
40:4e:8f:91:e2:82:fc:9e:a2:be:ec:f8:ba:90:02:47:d2:e4:
64:a9:f3:8c:d6:20:45:07:b5:cb:85:08:cc:2a:28:e7:ab:3a:
18:72:8c:c2:ac:42:5f:f5:13:14:fd:c9:0d:48:54:51:e4:3e:
05:3d:74:7c:ad:78:54:6b:7b:19:df:2e:8d:51:67:20:8b:f8:
ac:ef:9b:39:86:58:af:3b:40:59:6b:1b:59:50:77:af:ad:a8:
d4:3e:1d:ef:48:a5:e4:32:ad:ac:d1:2d:44:91:85:46:b7:ed:
ab:43:66:db:eb:e1:ea:94:c5:a5:5a:38:f5:dc:3f:6f:18:9a:
9f:a0:dd:1a:47:d9:08:5f:9a:c0:2a:46:03:c0:73:af:bb:6d:
df:26:3f:0c:57:72:c7:84:6b:04:62:3f:0f:e5:81:98:39:4b:
3a:7d:d4:ed:39:4b:13:34:35:5d:4c:a3:45:1f:9c:66:02:b6:
f1:ba:4d:4d:38:69:b0:76:6c:bb:17:f2:4e:6d:ce:c2:ba:73:
63:39:48:f9:90:b3:27:4d:af:c4:a0:b5:72:fb:0f:7c:b8:89:
43:3e:fe:7e:6b:a2:d2:c4:f4:8a:99:63:d0:cc:55:75:ba:0f:
6c:2e:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:11 2025 by rpki-client