Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9e08d6-aaa2-4cfc-a85a-e397b7138347/1/Z8_rLCE_EoUHgLMCZgrKCnIs_20.mft
File: Z8_rLCE_EoUHgLMCZgrKCnIs_20.mft (raw, json)
Hash identifier: rhtjkaN+nl9rTkr3JAnNHJlrFLUo/jsLpK+prb9eDhc=
Subject key identifier: 04:FD:94:5C:38:CC:F5:E7:D4:A0:B3:A8:DC:2E:3B:C1:2B:32:55:11
Authority key identifier: 67:CF:EB:2C:21:3F:12:85:07:80:B3:02:66:0A:CA:0A:72:2C:FF:6D
Certificate issuer: /CN=67cfeb2c213f12850780b302660aca0a722cff6d
Certificate serial: 0188E2F0B36D0592F2B0C11E64A8969427CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8_rLCE_EoUHgLMCZgrKCnIs_20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9e08d6-aaa2-4cfc-a85a-e397b7138347/1/Z8_rLCE_EoUHgLMCZgrKCnIs_20.mft
Manifest number: BF
Signing time: Thu 22 Jun 2023 11:50:05 +0000
Manifest this update: Thu 22 Jun 2023 11:50:05 +0000
Manifest next update: Fri 23 Jun 2023 11:50:05 +0000
Files and hashes: 1: Z8_rLCE_EoUHgLMCZgrKCnIs_20.crl (hash: df8niCEiN0xf15PG6W8uR0KvMCj5XZw1hifipXs/0Ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e2:f0:b3:6d:05:92:f2:b0:c1:1e:64:a8:96:94:27:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfeb2c213f12850780b302660aca0a722cff6d
Validity
Not Before: Jun 22 11:50:05 2023 GMT
Not After : Jun 23 11:50:05 2023 GMT
Subject: CN=04fd945c38ccf5e7d4a0b3a8dc2e3bc12b325511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:85:d3:7a:97:55:f6:9c:59:33:19:b5:ec:
44:cf:ce:47:88:32:b1:34:fa:a0:41:2d:cc:1f:88:
f9:79:e8:5e:95:25:80:df:b6:02:11:9c:fa:4b:f9:
7d:9a:b8:da:31:8a:ee:19:0e:46:76:ac:03:c3:d0:
4c:ef:b5:a9:60:09:2d:3a:ba:c4:d7:78:a2:dd:57:
02:08:2e:21:48:45:da:5f:dc:e9:61:b6:a0:dc:25:
27:49:fe:47:87:a6:45:d6:33:9a:8f:e8:48:97:85:
32:45:47:d7:42:0c:8a:1a:62:01:ea:66:f1:81:80:
5e:a5:dd:e0:77:e5:2d:1b:1f:1a:17:f5:b6:74:a1:
17:91:ae:98:6e:5a:ad:8a:25:49:51:50:dc:0c:fa:
bf:d1:08:9d:d2:8b:f2:d7:8c:fb:80:e7:bc:f7:62:
19:11:50:78:ff:ce:a1:08:e6:c6:da:b5:2c:4c:47:
36:df:32:70:ff:5e:7b:02:73:e0:d0:55:e5:34:1d:
06:61:8c:bc:2f:47:26:79:01:d6:4f:b5:df:cd:ed:
1d:21:1f:b4:65:fd:81:36:9e:53:98:2a:97:04:99:
6b:b6:38:7f:5c:57:60:cc:3c:c9:76:d9:4c:54:92:
51:42:83:4c:dc:83:89:63:03:a5:0e:c4:18:62:40:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:94:5C:38:CC:F5:E7:D4:A0:B3:A8:DC:2E:3B:C1:2B:32:55:11
X509v3 Authority Key Identifier:
keyid:67:CF:EB:2C:21:3F:12:85:07:80:B3:02:66:0A:CA:0A:72:2C:FF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8_rLCE_EoUHgLMCZgrKCnIs_20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9e08d6-aaa2-4cfc-a85a-e397b7138347/1/Z8_rLCE_EoUHgLMCZgrKCnIs_20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9e08d6-aaa2-4cfc-a85a-e397b7138347/1/Z8_rLCE_EoUHgLMCZgrKCnIs_20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:08:9a:ed:85:88:b9:ec:c0:c4:ac:57:9f:b5:45:ff:74:d4:
56:0d:a9:1d:f9:67:4b:55:62:21:7f:bd:6e:b3:34:28:3b:1c:
12:2f:0a:6c:bd:16:13:62:2a:17:87:62:78:77:64:c4:18:fe:
3b:6b:de:fa:4e:24:73:5f:35:d4:41:15:c9:46:7f:2c:36:c3:
30:12:58:f9:75:53:18:5b:e6:86:2c:8d:d0:be:39:33:1a:b3:
27:8a:22:11:18:1a:9f:88:16:dc:7b:4a:8d:76:fa:ef:65:11:
77:86:6d:20:ab:da:36:c6:b2:56:9f:8a:48:70:fc:a7:39:2c:
58:d4:c6:36:44:de:3d:4c:aa:07:f3:73:ce:97:0c:d0:c8:9a:
19:82:6c:68:47:d8:18:66:9c:f2:2b:e8:f2:68:4a:ae:21:02:
94:1d:1b:17:98:d9:ad:1c:b9:5d:81:07:7c:ac:ba:77:3a:96:
a4:33:bb:a7:82:12:4c:0d:6d:0d:10:2c:a4:7a:67:ed:fa:1d:
e0:64:5d:25:87:4a:d3:20:e1:03:25:bd:49:8e:38:75:23:9a:
e5:8e:ef:df:f9:5b:23:db:32:26:86:39:92:80:00:8e:85:4d:
bd:bf:c3:d4:53:af:ee:29:76:06:1a:65:7f:3b:50:37:8d:1f:
99:9b:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:20:23 2025 by rpki-client