Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/dbf4da-d489-4bec-b228-8d529304a26e/1/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.mft
File: CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.mft (raw, json)
Hash identifier: p4NSW0vswtjeWxEzdGgg5cZyYPvT5fTlPPlM3tNTFRg=
Subject key identifier: 68:33:D2:A4:77:0D:48:EE:A4:5D:2D:46:85:0F:92:63:3C:D2:6C:AD
Authority key identifier: 09:9E:D9:C6:93:7F:D1:A2:84:33:A4:4E:EC:3A:D0:0C:4F:4D:CB:6E
Certificate issuer: /CN=099ed9c6937fd1a28433a44eec3ad00c4f4dcb6e
Certificate serial: 018DBC1774C2AFF362E4A31FD8939A8F31BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/dbf4da-d489-4bec-b228-8d529304a26e/1/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.mft
Manifest number: 02F1
Signing time: Sun 18 Feb 2024 12:01:10 +0000
Manifest this update: Sun 18 Feb 2024 12:01:10 +0000
Manifest next update: Mon 19 Feb 2024 12:01:10 +0000
Files and hashes: 1: CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.crl (hash: Qf83Xz4MNLFcRvM5TC4LpoNHaceL5tO9ayuHi+LNSkA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:bc:17:74:c2:af:f3:62:e4:a3:1f:d8:93:9a:8f:31:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099ed9c6937fd1a28433a44eec3ad00c4f4dcb6e
Validity
Not Before: Feb 18 12:01:10 2024 GMT
Not After : Feb 19 12:01:10 2024 GMT
Subject: CN=6833d2a4770d48eea45d2d46850f92633cd26cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:92:17:ed:d8:d2:49:df:92:d0:17:0d:be:
92:ed:eb:5d:1e:27:75:6c:df:83:85:58:f7:81:f6:
0d:c2:23:9e:cd:c4:54:df:2a:42:c2:ef:ca:68:45:
18:ec:f6:73:82:24:f1:b9:4f:99:c7:3a:4b:a6:17:
d6:26:d6:65:b6:0f:b1:61:12:cd:5d:64:65:83:47:
a5:87:a6:61:dd:df:fa:90:41:06:12:d2:a4:e1:6a:
1a:59:23:80:54:a3:bb:4d:3c:1b:cc:cf:32:03:22:
ed:73:2f:88:8b:79:d3:f8:32:d7:b1:dd:66:4e:4d:
18:23:0e:f7:f6:03:3c:7e:40:96:b4:c5:c4:25:3f:
a5:42:ad:82:4b:c6:35:1e:ea:f6:6c:fb:58:23:5a:
3f:30:9e:ea:a7:33:89:1e:49:eb:01:c0:48:86:3c:
ea:3d:30:53:cf:78:54:72:55:a2:37:00:03:c3:ee:
2b:6a:fc:ea:92:51:f6:4b:c2:d9:7a:1c:df:a1:9e:
7d:7b:e8:0f:9a:94:f7:60:ef:f1:be:28:13:7c:58:
20:4c:cb:a1:23:e9:8b:e3:89:c7:c0:97:50:70:02:
be:a2:08:11:32:12:d6:43:8a:27:44:d4:a5:8d:75:
85:8d:e1:60:f8:38:ad:cb:f0:63:cc:6a:88:76:db:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:33:D2:A4:77:0D:48:EE:A4:5D:2D:46:85:0F:92:63:3C:D2:6C:AD
X509v3 Authority Key Identifier:
keyid:09:9E:D9:C6:93:7F:D1:A2:84:33:A4:4E:EC:3A:D0:0C:4F:4D:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/dbf4da-d489-4bec-b228-8d529304a26e/1/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/dbf4da-d489-4bec-b228-8d529304a26e/1/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:57:66:d3:cc:29:93:3e:2c:64:cf:7c:52:64:38:bc:57:e0:
63:7d:de:09:36:b7:db:06:1b:ce:f6:2e:e1:7b:15:b6:7f:62:
86:fa:cd:73:86:f5:24:18:63:6b:82:c4:4d:44:c7:04:28:f2:
6e:a5:d7:74:2a:5f:42:53:a7:d5:f3:7a:06:93:8e:fe:ec:ec:
d2:58:f3:84:00:1e:97:c5:9e:40:6e:1a:6c:eb:a8:c0:a9:da:
c1:b8:b0:5d:64:9c:c7:e7:62:4d:23:5e:dc:e6:ea:bc:55:fb:
44:ea:83:b1:44:9f:73:8d:65:05:91:33:55:62:03:b1:46:cd:
af:23:cb:49:fb:b6:ea:2f:a6:d2:cf:37:d4:2f:d8:92:24:a3:
b0:cc:84:27:50:3f:94:cc:03:f0:af:67:6d:1d:58:ed:99:2e:
dd:b7:8a:d8:e4:c9:cb:f6:9f:47:d0:cc:8a:c8:18:fc:cc:9c:
74:ba:57:e5:fd:3e:52:ae:f0:b4:7d:78:0e:49:35:f1:ea:84:
05:92:ff:f5:33:91:c6:1d:5f:9f:29:58:d7:ab:0a:51:a1:91:
3d:bc:e7:95:52:64:07:e9:74:b0:08:66:74:e9:fe:26:5f:36:
3f:ed:01:dc:d6:fb:60:e3:96:cc:d9:34:f0:78:e8:db:29:60:
41:a9:bc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 18 19:27:34 2024 by rpki-client on console-ams.rpki-client.org