Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/ZHwJNkh-xdgD5NWppRAMRlH0VDc.mft
File: ZHwJNkh-xdgD5NWppRAMRlH0VDc.mft (raw, json)
Hash identifier: oBB24IGvKy1fvyLg472upzi10g5yKYqQpVv2AWwGzEU=
Subject key identifier: 39:50:24:42:70:57:B0:73:C4:1F:BD:53:C6:E6:D8:7C:A1:2E:A5:8C
Authority key identifier: 64:7C:09:36:48:7E:C5:D8:03:E4:D5:A9:A5:10:0C:46:51:F4:54:37
Certificate issuer: /CN=647c0936487ec5d803e4d5a9a5100c4651f45437
Certificate serial: 0188E448E55C753186957366E7A4A721F28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHwJNkh-xdgD5NWppRAMRlH0VDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/ZHwJNkh-xdgD5NWppRAMRlH0VDc.mft
Manifest number: 0850
Signing time: Thu 22 Jun 2023 18:06:02 +0000
Manifest this update: Thu 22 Jun 2023 18:06:02 +0000
Manifest next update: Fri 23 Jun 2023 18:06:02 +0000
Files and hashes: 1: ZHwJNkh-xdgD5NWppRAMRlH0VDc.crl (hash: AJTSdVoyeDK3KF46IJ63NDTvtYgQAnPzHzi2Z+Vbhqg=)
2: pziRjDzxN3fVIH1Gl8rVS285vhk.roa (hash: kIe47+wdeASSkM5THivfRhoBiE8jizIR/+ZSEZXL2lU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:48:e5:5c:75:31:86:95:73:66:e7:a4:a7:21:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647c0936487ec5d803e4d5a9a5100c4651f45437
Validity
Not Before: Jun 22 18:06:02 2023 GMT
Not After : Jun 23 18:06:02 2023 GMT
Subject: CN=395024427057b073c41fbd53c6e6d87ca12ea58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:55:bb:ba:44:a3:ab:fa:d1:71:a6:ef:4d:
3d:b1:fa:12:9d:36:26:af:b0:8f:70:fb:2d:e1:52:
e9:8c:dc:30:be:a6:7e:2e:6f:9a:81:80:be:fb:41:
9a:ac:df:19:75:1d:28:99:9e:b8:7c:59:df:f5:03:
a1:d9:b0:0e:46:ee:dd:a5:01:d8:16:6e:cd:72:38:
31:9e:e9:f2:22:23:90:4f:57:80:ce:ed:fa:0e:21:
28:25:fe:90:04:40:6c:ee:f3:f6:4c:7d:aa:6d:aa:
59:19:05:26:db:75:41:58:4d:8d:9f:b8:90:cf:8f:
93:b0:2c:83:ce:9d:c0:95:cb:0c:72:e9:2f:6b:20:
be:61:ec:20:49:56:66:c6:ea:7e:5b:17:ec:d7:69:
24:cd:ea:98:65:d2:f1:5b:35:37:3b:f4:83:94:1b:
4f:77:16:3e:a6:71:6d:a5:ee:e5:0b:d5:6a:8b:a2:
fd:e9:10:e1:08:db:c4:32:ca:03:ae:96:c6:10:4d:
0e:e6:1e:b0:a7:41:2e:5e:08:16:30:df:6b:27:b8:
ef:cf:01:58:94:30:7f:03:0f:42:00:83:1e:43:4e:
be:54:0a:f1:76:50:b9:9f:86:8a:af:21:93:12:a5:
9e:f4:b7:d7:c0:d6:5f:d7:33:be:38:09:d2:fc:d7:
ec:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:50:24:42:70:57:B0:73:C4:1F:BD:53:C6:E6:D8:7C:A1:2E:A5:8C
X509v3 Authority Key Identifier:
keyid:64:7C:09:36:48:7E:C5:D8:03:E4:D5:A9:A5:10:0C:46:51:F4:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHwJNkh-xdgD5NWppRAMRlH0VDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/ZHwJNkh-xdgD5NWppRAMRlH0VDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/ZHwJNkh-xdgD5NWppRAMRlH0VDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c2:06:b6:8d:88:9e:0f:fe:f8:c5:99:57:b5:5c:2e:f6:eb:
13:b1:9c:54:e3:01:01:ec:0a:35:e3:58:54:d1:28:02:5e:20:
bb:ea:6e:6c:d3:a1:48:83:1e:e1:20:74:53:58:d5:38:4b:ee:
45:89:d9:e3:49:49:e7:d1:7b:92:28:63:35:0f:2e:4e:fb:7e:
94:c5:a2:be:61:28:92:78:4c:5d:0c:ae:00:15:87:96:7f:7a:
43:62:24:5e:49:71:f1:de:22:e6:3c:d4:2d:b3:5c:5e:a8:2b:
78:2e:66:37:76:92:58:e1:4f:a6:23:53:c0:a9:7e:ba:78:ca:
91:d0:ff:72:79:3f:8a:d6:8d:8f:cd:9d:dd:15:9d:76:35:a2:
8e:82:5c:a5:90:ce:4a:08:70:52:9e:65:0f:79:13:8f:ac:a7:
2a:a9:06:d2:cd:2a:3d:ea:3e:56:89:05:c6:48:51:82:c3:16:
72:3b:98:39:cf:bb:a1:85:6c:53:e6:ce:99:0d:c8:81:9a:24:
97:cf:fc:4b:77:3f:a4:d2:1d:1f:96:8b:81:83:1a:54:b1:7e:
ce:2b:63:82:a9:62:93:25:91:c4:bf:b8:28:27:84:db:b4:2e:
dd:d4:af:21:4f:3f:50:83:6f:c8:7e:7e:88:29:83:3e:c7:cb:
d0:86:c9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:11:25 2025 by rpki-client