Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.mft
File: 2z9UayS327CYSgnGJmClK60od1c.mft (raw, json)
Hash identifier: /maal5MJMNmuuZnuJBSNf+n/paExASaiZT9iSay/ud0=
Subject key identifier: C6:12:81:C9:BE:0C:84:7B:DD:D2:A5:D7:6A:03:A9:3A:95:35:E1:31
Authority key identifier: DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
Certificate issuer: /CN=db3f546b24b7dbb0984a09c62660a52bad287757
Certificate serial: 0189D2CD1358E4CF40DD895F9AECBA53B3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.mft
Manifest number: 0853
Signing time: Tue 08 Aug 2023 01:40:02 +0000
Manifest this update: Tue 08 Aug 2023 01:40:02 +0000
Manifest next update: Wed 09 Aug 2023 01:40:02 +0000
Files and hashes: 1: 2z9UayS327CYSgnGJmClK60od1c.crl (hash: x0WiqJZ04sGcKKiWzYyyjcsyau2VS0lpwPJvY9kcR9o=)
2: 56Ki1ECcIadPZ8x_3lQDJ4557aI.roa (hash: TLdAKDCi+KiVdnG5s7pULSP7VIGkSPJmamlvIF00QW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d2:cd:13:58:e4:cf:40:dd:89:5f:9a:ec:ba:53:b3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db3f546b24b7dbb0984a09c62660a52bad287757
Validity
Not Before: Aug 8 01:40:02 2023 GMT
Not After : Aug 9 01:40:02 2023 GMT
Subject: CN=c61281c9be0c847bddd2a5d76a03a93a9535e131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:11:38:82:6c:f2:20:79:d9:ff:53:af:27:
70:cc:72:31:6f:37:96:6e:79:c9:c1:6a:f5:70:9d:
45:34:ef:b2:e5:59:23:88:74:c6:ad:4c:d7:1f:92:
0d:4b:ac:14:57:5e:d2:cd:18:f8:8d:0e:17:a4:c8:
ed:5c:6f:53:ae:4e:db:36:69:e1:89:03:c8:38:4d:
c0:05:8b:f0:94:6a:87:d9:22:81:03:42:07:44:ca:
34:0b:3a:a0:86:98:d2:af:b9:8b:36:3f:80:eb:bf:
c6:f3:7e:15:19:6d:73:01:e5:f4:8a:6d:c2:f4:d1:
f4:d3:10:40:3a:88:67:d0:e0:c7:75:ee:fd:33:b5:
93:aa:9e:82:6e:aa:05:e6:8c:44:87:91:47:23:82:
27:19:6a:4f:cf:72:b7:ba:93:9f:67:80:d1:54:64:
a8:f7:33:e1:9f:92:a8:9f:20:bb:1c:7e:2b:74:53:
5f:ed:10:b4:bc:29:69:fc:af:6a:49:de:0c:42:ee:
87:37:b1:68:7f:32:e7:62:97:d3:59:07:a0:e6:e7:
bc:f6:74:16:53:04:33:3b:fe:af:24:f3:8d:ff:4c:
0c:66:49:c8:cd:9b:91:4c:b9:4e:7c:c1:78:2c:fe:
d2:be:5a:a2:e5:49:13:20:cd:2d:2e:0c:2c:e7:d1:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:81:C9:BE:0C:84:7B:DD:D2:A5:D7:6A:03:A9:3A:95:35:E1:31
X509v3 Authority Key Identifier:
keyid:DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:cb:a5:02:cb:df:43:12:51:d9:91:ac:fd:41:14:50:0b:a4:
57:53:8c:9c:50:e0:6f:0d:84:20:06:43:ab:1a:07:b9:d1:59:
0b:ed:1f:96:4d:1f:0d:00:a7:7b:28:04:24:d9:f4:42:1e:40:
58:73:7f:c1:15:45:c8:d8:c7:76:8b:a5:77:f2:89:a7:20:00:
ba:49:f5:c2:73:a2:08:b1:36:90:60:90:6b:0c:76:62:59:9d:
12:73:85:c6:f4:5c:84:be:bf:d5:cd:7d:1a:5f:50:aa:bd:29:
13:84:5a:fb:8d:d7:8e:77:14:02:27:a0:8a:74:ae:22:7b:70:
7e:43:45:84:89:d8:ae:33:a3:8d:b6:82:c8:2e:45:dc:53:88:
77:e0:08:b3:fe:30:79:a9:88:5e:e7:43:46:3c:d5:17:98:3c:
52:a1:33:33:49:41:df:11:83:f1:56:ba:db:b9:21:e4:1c:2b:
b1:06:d3:30:b1:83:01:42:58:87:7b:2e:25:cb:a3:78:07:3d:
21:61:4c:66:47:20:72:1c:cd:0a:f5:fe:fa:7a:78:5c:9c:38:
63:1e:fd:8d:7f:8c:69:6e:00:c5:24:0f:d5:ae:3f:e8:3a:00:
9d:e9:53:a7:57:53:55:a8:cd:ad:5a:90:6d:2e:a3:0b:89:66:
44:40:b5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:07 2025 by rpki-client