Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.mft
File: zA4Aj9yl-I333HG79ZmbAT1f3RI.mft (raw, json)
Hash identifier: LzowKeVgmOCM/nnB5VRfITYMHZZ9g38n5CvVgZk+DUs=
Subject key identifier: D5:93:0B:ED:64:83:2A:83:25:63:BD:62:B2:B8:C9:F1:77:9D:C9:2A
Authority key identifier: CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
Certificate issuer: /CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Certificate serial: 018E1D13E80C37B4C1BFBBDDE25F66C4C255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.mft
Manifest number: 10BD
Signing time: Fri 08 Mar 2024 08:00:27 +0000
Manifest this update: Fri 08 Mar 2024 08:00:27 +0000
Manifest next update: Sat 09 Mar 2024 08:00:27 +0000
Files and hashes: 1: WWlYEA_Rg2FmgfY2ODXHOWAauFc.roa (hash: X9fZSUeDQo4jhZgPjF5rGIEOyqvijrpxHeUBEDFmO/8=)
2: zA4Aj9yl-I333HG79ZmbAT1f3RI.crl (hash: sCnUPnu8x/Ndh7kn6jMAw6ABR8dB0aWUYSPsVryigLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:13:e8:0c:37:b4:c1:bf:bb:dd:e2:5f:66:c4:c2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0e008fdca5f88df7dc71bbf5999b013d5fdd12
Validity
Not Before: Mar 8 08:00:27 2024 GMT
Not After : Mar 9 08:00:27 2024 GMT
Subject: CN=d5930bed64832a832563bd62b2b8c9f1779dc92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:5a:9f:7b:dc:b5:f1:81:61:d2:66:78:43:
d1:f7:aa:52:c1:2a:b8:83:29:01:d7:47:c4:9a:36:
2b:9e:a3:f1:86:09:c4:1f:6c:97:8d:76:39:fd:93:
7e:8f:8f:30:15:bc:10:38:37:ff:d1:d3:72:95:8f:
57:f1:58:29:38:b7:00:44:99:f7:e2:17:ad:b9:2f:
d6:b0:64:8b:38:29:0d:7c:80:db:10:e6:bc:a5:a0:
2b:ec:53:f4:4e:d2:81:3a:f3:fa:49:96:3d:2f:e0:
75:52:94:91:e2:30:f0:c0:d6:d4:da:26:50:db:ef:
fd:66:98:01:7d:0d:48:40:2a:7a:d4:01:ad:3c:56:
bd:5b:a3:18:63:63:ab:57:cd:23:01:13:0f:75:b0:
13:14:59:69:2e:80:47:16:55:7b:b0:67:08:d2:b9:
5f:f2:9c:5e:11:e1:ea:fc:89:1e:25:69:4c:14:af:
6b:ba:7e:fd:51:33:f1:e1:75:bb:11:85:ee:f7:6b:
19:59:7c:b1:3d:7e:78:b3:3d:51:83:81:7c:3b:5d:
f0:05:6c:b2:a8:33:10:8a:03:e2:a5:2b:bb:16:a7:
df:0f:bc:f1:1c:86:ff:2c:4d:f6:5f:47:fc:f3:95:
60:fb:31:a6:5a:e9:0d:07:47:31:e9:08:07:03:9e:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:93:0B:ED:64:83:2A:83:25:63:BD:62:B2:B8:C9:F1:77:9D:C9:2A
X509v3 Authority Key Identifier:
keyid:CC:0E:00:8F:DC:A5:F8:8D:F7:DC:71:BB:F5:99:9B:01:3D:5F:DD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zA4Aj9yl-I333HG79ZmbAT1f3RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c78fd1-d125-4e6b-99b8-3a91172b6811/1/zA4Aj9yl-I333HG79ZmbAT1f3RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:12:e6:55:ce:21:0e:c0:a1:93:23:05:32:04:42:82:8f:19:
ea:03:80:0f:9f:f3:c6:08:3a:bf:cf:46:84:70:7e:50:68:cf:
64:19:f6:bf:80:77:33:07:ef:c6:ef:59:18:72:f2:cb:22:02:
3e:88:98:a6:37:cd:89:27:f4:25:aa:13:04:25:08:37:8f:91:
e4:10:23:46:c3:57:85:a6:b5:13:bd:34:6a:9f:ce:31:5c:31:
f4:1f:41:ca:f0:cd:cd:96:02:c2:a3:ec:41:03:c5:ca:2a:44:
5a:65:f0:6f:12:f2:1b:1c:8e:78:e9:64:d2:f1:f3:3c:ef:0c:
bc:b6:df:3a:c5:e9:fc:f4:f5:4e:fa:d4:06:ec:99:db:e5:d7:
b4:18:0a:91:1b:10:79:0e:1a:cc:28:c3:34:7a:d4:7d:5e:b4:
54:55:39:66:8e:eb:68:79:ff:2e:e7:44:6c:ca:99:9a:6b:e8:
43:02:b0:e7:ac:3d:ff:ef:14:64:7b:66:39:86:cf:de:b1:b4:
7c:ae:81:e7:48:dc:f0:d7:2f:b0:95:10:be:17:82:3d:7e:5a:
ea:00:69:38:94:c0:4e:a6:4d:5f:9f:b1:38:d1:98:d1:2f:8e:
e2:d1:df:45:b2:fe:f4:d7:fb:74:43:5b:1b:5f:ef:45:e4:31:
11:1e:38:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:25 2024 by rpki-client on console-ams.rpki-client.org