Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/55dd84-8ba7-4b95-9db8-bdb24cbefc7f/1/ZUkPkOnJ9vukyYKylec0FBlUDck.mft
File: ZUkPkOnJ9vukyYKylec0FBlUDck.mft (raw, json)
Hash identifier: LVJH9yVqOXj8xaElyrj1WnE9dnUBuHzNDMZSYgjttw8=
Subject key identifier: 87:65:A3:C8:EF:0C:F6:BC:BE:52:07:DE:0B:F9:11:06:4A:4A:47:CB
Authority key identifier: 65:49:0F:90:E9:C9:F6:FB:A4:C9:82:B2:95:E7:34:14:19:54:0D:C9
Certificate issuer: /CN=65490f90e9c9f6fba4c982b295e7341419540dc9
Certificate serial: 05FCDEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUkPkOnJ9vukyYKylec0FBlUDck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/55dd84-8ba7-4b95-9db8-bdb24cbefc7f/1/ZUkPkOnJ9vukyYKylec0FBlUDck.mft
Manifest number: 07FE
Signing time: Fri 24 Jun 2022 05:06:39 +0000
Manifest this update: Fri 24 Jun 2022 05:06:39 +0000
Manifest next update: Sat 25 Jun 2022 05:06:39 +0000
Files and hashes: 1: RALNKrEJcICTLgZB8YlG5Pp0r6M.roa (hash: v+iWSNejEwtDXlWdeH1UprziQke9rbpwUm9jtHyc2vM=)
2: ZUkPkOnJ9vukyYKylec0FBlUDck.crl (hash: XgkgXPIMc9BJdA9EzP1F/Z5BF+G0WnXrY6e6JM9sz3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100458218 (0x5fcdeea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65490f90e9c9f6fba4c982b295e7341419540dc9
Validity
Not Before: Jun 24 05:06:39 2022 GMT
Not After : Jun 25 05:06:39 2022 GMT
Subject: CN=8765a3c8ef0cf6bcbe5207de0bf911064a4a47cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:e1:58:df:42:45:15:5a:3a:76:d4:63:5d:
b7:4b:81:ab:0a:19:19:25:30:a7:d5:fb:b1:cd:20:
1e:d9:3a:90:6d:49:f3:ff:41:71:c8:bb:61:51:21:
3e:7a:5f:39:fb:87:fb:b3:0b:02:6f:65:58:ef:3b:
9a:59:17:5f:c3:fa:91:32:da:16:61:fd:c6:e3:40:
11:47:a7:62:b0:82:d5:fe:15:13:a0:6a:91:7b:05:
ac:0f:a1:ac:32:ac:68:53:74:f4:4f:16:50:95:d0:
53:38:09:84:d9:ff:d6:99:c3:5c:b0:19:0e:89:56:
9e:e4:58:77:00:07:76:de:1f:ba:55:13:82:43:82:
7a:1c:6e:1d:91:80:be:be:dd:53:ef:86:8d:db:cd:
79:92:e3:9b:cb:c3:2f:e6:59:6b:fc:74:86:87:36:
f8:ba:67:45:4d:48:5d:5e:dd:b8:a4:9d:04:00:c6:
cd:d1:80:22:9a:14:3c:84:a9:19:29:8f:16:7b:99:
ba:86:2e:ed:28:83:36:da:55:50:41:75:b5:f7:c1:
fd:8a:51:4e:0c:b7:0c:f9:6b:92:10:fe:a6:6a:08:
91:19:cd:90:e8:a5:7c:e3:59:1d:b9:9a:45:49:2a:
6b:d6:0b:49:d6:e2:08:9e:4d:f1:06:c1:26:e5:e4:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:65:A3:C8:EF:0C:F6:BC:BE:52:07:DE:0B:F9:11:06:4A:4A:47:CB
X509v3 Authority Key Identifier:
keyid:65:49:0F:90:E9:C9:F6:FB:A4:C9:82:B2:95:E7:34:14:19:54:0D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUkPkOnJ9vukyYKylec0FBlUDck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55dd84-8ba7-4b95-9db8-bdb24cbefc7f/1/ZUkPkOnJ9vukyYKylec0FBlUDck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/55dd84-8ba7-4b95-9db8-bdb24cbefc7f/1/ZUkPkOnJ9vukyYKylec0FBlUDck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:65:1e:94:05:05:c9:bb:02:44:08:46:c4:47:18:93:26:2d:
51:60:88:1b:ad:9f:0c:4c:52:b8:40:7c:4f:86:24:f5:a4:91:
95:af:c3:4d:30:09:3c:5b:89:34:57:22:43:02:c3:81:87:95:
c8:d8:bb:0c:24:01:4a:ed:e7:d1:b5:38:5a:6a:5f:0d:00:e8:
7c:24:31:54:f9:be:25:a1:98:fb:be:89:74:f7:70:6b:eb:59:
9f:6c:dc:63:3a:56:f2:f8:c1:1d:9d:fe:ea:8c:9f:f8:9a:1f:
6e:65:66:31:df:50:23:ca:01:91:15:af:31:3d:8e:cc:05:03:
52:26:a7:76:54:6d:be:7e:2b:73:10:85:05:7b:01:12:6e:10:
7b:a9:f7:ae:4e:0e:a3:2d:fe:ac:02:57:db:00:93:68:8d:5f:
99:22:d2:d2:0b:59:43:7b:c3:cf:f0:39:c3:3f:df:95:57:48:
3d:b9:6b:f7:01:1d:28:ff:d6:40:f0:ff:59:e5:c3:48:ae:69:
4b:d4:02:d2:18:8e:91:ac:7d:7e:8b:c3:b7:f0:d3:9c:31:29:
7f:c3:28:68:30:2d:46:6f:01:91:a0:19:a8:c7:7e:87:99:43:
1c:36:ce:c2:97:6d:17:ac:f5:13:e9:ee:1a:a4:26:f5:cc:66:
c3:db:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:08 2025 by rpki-client