Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7f5d45-5c53-405b-af0d-0ea90e244fc2/1/Z3d9Wg3an6HzCrjg15XsfAMFiD8.mft
File: Z3d9Wg3an6HzCrjg15XsfAMFiD8.mft (raw, json)
Hash identifier: nEgexX1g7cTjem/lwu+SdIuJrmhXUbBIzNIxa+kmoJQ=
Subject key identifier: BC:22:18:FE:6F:A6:D8:AA:47:9B:F7:B9:D0:3E:4C:16:1F:6C:BD:17
Authority key identifier: 67:77:7D:5A:0D:DA:9F:A1:F3:0A:B8:E0:D7:95:EC:7C:03:05:88:3F
Certificate issuer: /CN=67777d5a0dda9fa1f30ab8e0d795ec7c0305883f
Certificate serial: 018B4271B9FC8CDB94E3210B9819EEE59AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3d9Wg3an6HzCrjg15XsfAMFiD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7f5d45-5c53-405b-af0d-0ea90e244fc2/1/Z3d9Wg3an6HzCrjg15XsfAMFiD8.mft
Manifest number: 06C2
Signing time: Wed 18 Oct 2023 11:00:31 +0000
Manifest this update: Wed 18 Oct 2023 11:00:31 +0000
Manifest next update: Thu 19 Oct 2023 11:00:31 +0000
Files and hashes: 1: Z3d9Wg3an6HzCrjg15XsfAMFiD8.crl (hash: SqfCk0ddpdFVazY9idV/5s7LhMcq7lnlQ7gQSFS0lBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:71:b9:fc:8c:db:94:e3:21:0b:98:19:ee:e5:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67777d5a0dda9fa1f30ab8e0d795ec7c0305883f
Validity
Not Before: Oct 18 11:00:31 2023 GMT
Not After : Oct 19 11:00:31 2023 GMT
Subject: CN=bc2218fe6fa6d8aa479bf7b9d03e4c161f6cbd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:06:b1:54:26:20:e9:9e:20:a8:24:d4:17:
d2:be:c7:bb:24:28:0a:0d:72:a5:91:21:50:66:f8:
b8:7e:99:8b:d5:c1:46:8b:21:7b:23:10:47:29:43:
07:b7:1f:92:c5:ab:a5:42:7c:a6:34:24:d3:27:fd:
a3:8c:70:65:2c:a2:5e:96:38:db:9f:90:43:b7:fe:
62:ff:f0:b0:ad:90:1f:f3:8e:29:e9:3a:88:02:08:
98:c7:18:76:0c:e5:4e:61:10:9f:e6:6a:01:55:c2:
95:b2:cf:92:4e:18:17:1d:d7:12:4c:ab:46:b8:cb:
f7:92:57:af:7b:89:d0:3e:f9:6a:0a:bf:78:79:12:
a9:57:fc:a9:9a:9d:d0:7b:9f:26:83:c9:50:e0:1e:
2d:ca:3f:ff:c9:8e:ea:51:90:01:7e:39:fd:82:5a:
44:cb:7a:e5:1e:73:cb:70:23:7a:d2:ea:f9:65:04:
4a:a0:ea:bc:d4:4f:0c:81:52:91:9c:71:3f:be:ed:
43:2c:10:14:4e:ce:68:b2:fc:20:9a:56:cc:32:c8:
e4:83:24:b0:f1:5a:0d:6b:7d:41:7a:9e:50:ca:0e:
21:26:78:30:84:5b:d9:74:29:e5:6d:1a:1f:8b:20:
1e:db:1f:11:cd:9a:ed:35:07:6d:3c:59:df:fc:67:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:22:18:FE:6F:A6:D8:AA:47:9B:F7:B9:D0:3E:4C:16:1F:6C:BD:17
X509v3 Authority Key Identifier:
keyid:67:77:7D:5A:0D:DA:9F:A1:F3:0A:B8:E0:D7:95:EC:7C:03:05:88:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3d9Wg3an6HzCrjg15XsfAMFiD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7f5d45-5c53-405b-af0d-0ea90e244fc2/1/Z3d9Wg3an6HzCrjg15XsfAMFiD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7f5d45-5c53-405b-af0d-0ea90e244fc2/1/Z3d9Wg3an6HzCrjg15XsfAMFiD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4a:12:a9:d4:ba:2f:cc:19:c7:2c:31:d0:d0:92:f8:4e:3e:
da:b2:2c:f4:c0:56:0c:5e:8b:69:ec:4b:bb:fe:02:30:50:6c:
06:cb:b5:0b:fc:cb:ae:10:b2:fa:0c:cd:82:4a:50:7d:80:fc:
65:7f:5c:38:5e:92:d3:f9:e9:d4:eb:ea:84:2e:51:87:12:2d:
f9:a8:6d:f3:48:96:11:57:c5:66:60:42:c0:d5:a0:ed:ae:f4:
05:e5:d4:f8:e0:b7:d2:3a:ac:db:4c:d5:bc:01:54:35:3c:07:
75:55:ad:0f:58:ea:1a:ef:52:f8:a1:f0:7c:c4:7b:d3:fc:22:
38:4d:73:f6:fb:5d:f8:85:54:24:b7:e2:2c:1c:0c:4c:1a:da:
9a:2f:43:ae:05:16:e7:ba:83:05:fc:f9:5b:e4:5f:db:63:ce:
33:02:39:70:5b:04:c4:18:0d:53:03:85:26:e6:49:f0:54:0a:
fb:7e:c4:ad:05:52:a6:37:32:78:92:59:99:c7:ba:40:ef:bd:
5d:fc:d5:86:32:94:a8:8e:e8:da:95:c1:e2:33:3c:1c:18:e4:
f5:4a:a5:a8:50:5a:fd:8a:95:10:16:63:2b:db:9e:0c:c2:86:
0d:72:7c:c7:d9:d3:a6:b2:7e:65:1f:dd:43:1c:3f:e0:64:e1:
53:fc:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:48 2025 by rpki-client