Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/febf60-22de-4168-a7e2-3bd576b7cc72/1/z8qxT8hh0UD6kYkgdsfdON-5hzw.mft
File: z8qxT8hh0UD6kYkgdsfdON-5hzw.mft (raw, json)
Hash identifier: U6X0SgPy4+4L8dyud6j6oWNNv0bwikyBh89/Zt6MUVs=
Subject key identifier: 92:6B:6A:5D:4B:46:CC:4A:DB:49:2A:C6:C1:37:EC:93:23:1B:07:08
Authority key identifier: CF:CA:B1:4F:C8:61:D1:40:FA:91:89:20:76:C7:DD:38:DF:B9:87:3C
Certificate issuer: /CN=cfcab14fc861d140fa91892076c7dd38dfb9873c
Certificate serial: 018CA96EC6DCA919F39197FFE7B15B96102E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8qxT8hh0UD6kYkgdsfdON-5hzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/febf60-22de-4168-a7e2-3bd576b7cc72/1/z8qxT8hh0UD6kYkgdsfdON-5hzw.mft
Manifest number: 0948
Signing time: Wed 27 Dec 2023 04:00:58 +0000
Manifest this update: Wed 27 Dec 2023 04:00:58 +0000
Manifest next update: Thu 28 Dec 2023 04:00:58 +0000
Files and hashes: 1: z8qxT8hh0UD6kYkgdsfdON-5hzw.crl (hash: lQ186jfdeTPBpjZCe8JQRjbD7VtCa/JqSmVQnEjWjaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:6e:c6:dc:a9:19:f3:91:97:ff:e7:b1:5b:96:10:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab14fc861d140fa91892076c7dd38dfb9873c
Validity
Not Before: Dec 27 04:00:58 2023 GMT
Not After : Dec 28 04:00:58 2023 GMT
Subject: CN=926b6a5d4b46cc4adb492ac6c137ec93231b0708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:87:c8:56:13:86:9e:52:98:44:c6:55:ea:
44:bd:80:8e:e2:a2:1d:dc:f3:53:08:9c:03:fc:a7:
23:66:5c:ae:c5:4e:2c:05:07:e5:a3:55:7c:1d:70:
9d:79:02:ea:12:83:d4:bf:fe:83:d2:89:0b:9d:ab:
22:02:eb:4d:dc:1d:83:03:48:fa:87:2d:0d:2e:45:
50:7f:d8:e8:61:44:5f:17:56:6d:89:e3:74:a5:5d:
fc:a7:84:80:fa:fc:40:98:1e:67:2c:44:bf:48:7f:
d5:86:10:02:ce:2a:b7:87:71:27:34:ca:75:ed:30:
2b:05:d7:09:74:fd:7f:84:f6:23:81:1c:41:43:9e:
13:90:70:e9:15:04:36:94:2a:e5:f2:82:12:02:8f:
a7:0d:c9:76:88:47:d4:f3:f7:65:de:a1:f6:fc:a9:
1b:d1:5a:39:79:fe:29:5b:53:a0:87:c1:47:f1:55:
1f:c1:3f:10:03:74:7d:db:4e:f0:df:d6:47:d3:ee:
1a:72:31:13:6b:7f:67:9f:22:c3:41:71:95:14:2a:
7f:2f:34:d8:6f:8e:d7:ff:cd:92:93:c1:c3:db:3c:
97:b8:10:b0:82:fb:8e:cf:12:b1:67:03:9a:97:4c:
42:69:f3:19:12:e9:b6:1c:d2:13:cf:d1:37:e4:ab:
75:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6B:6A:5D:4B:46:CC:4A:DB:49:2A:C6:C1:37:EC:93:23:1B:07:08
X509v3 Authority Key Identifier:
keyid:CF:CA:B1:4F:C8:61:D1:40:FA:91:89:20:76:C7:DD:38:DF:B9:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8qxT8hh0UD6kYkgdsfdON-5hzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/febf60-22de-4168-a7e2-3bd576b7cc72/1/z8qxT8hh0UD6kYkgdsfdON-5hzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/febf60-22de-4168-a7e2-3bd576b7cc72/1/z8qxT8hh0UD6kYkgdsfdON-5hzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8e:dd:80:4e:3b:d6:35:85:65:e1:a8:69:53:6b:18:3f:0e:
54:a7:6b:f5:c6:8b:04:b5:5c:a6:49:d7:87:ce:d3:a3:57:e5:
29:8f:a3:ce:b9:a4:35:12:fe:ff:b3:80:fb:a6:f9:af:53:7c:
b2:56:74:ab:77:e2:e1:3e:79:1c:27:ed:f1:67:29:03:a4:12:
99:e7:5f:15:16:cb:79:e4:e8:e7:5e:69:b8:5c:52:65:90:7d:
72:aa:08:c2:31:47:88:a8:7a:ad:01:12:6c:26:d0:c0:df:3f:
e0:39:bf:22:f0:46:d4:05:a9:54:dd:41:64:c6:33:94:d9:9a:
80:5e:44:b6:25:9b:03:20:25:64:84:69:28:a9:af:2b:d7:e4:
ed:14:3e:72:ef:28:a8:b9:bf:b5:aa:b4:f1:7f:9c:b7:ea:64:
4f:ce:1d:a2:e2:c3:bd:f9:b6:25:18:85:e3:3b:a1:99:81:21:
74:99:8a:46:39:2e:58:d8:aa:11:3c:4f:a7:be:f5:d4:41:b8:
89:48:c3:89:31:8f:71:be:15:cc:68:d1:dc:43:ec:7e:fd:0f:
62:c9:a3:e0:eb:57:a8:9a:20:f9:5e:70:90:0c:7a:93:04:0a:
75:87:61:59:b8:ed:24:d9:47:29:79:bf:bb:76:78:04:b9:4b:
18:43:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:12:10 2025 by rpki-client