Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/ZKaPyYy91YbBQZUAXicsNH151CM.mft
File: ZKaPyYy91YbBQZUAXicsNH151CM.mft (raw, json)
Hash identifier: jS6JqdG1WewRra6ZQN2rTEg4/gsnOPvxpe1VXvp9UIM=
Subject key identifier: D5:AD:C9:51:53:47:C3:E1:CC:E7:F5:FE:C6:FF:57:22:8B:89:04:A7
Authority key identifier: 64:A6:8F:C9:8C:BD:D5:86:C1:41:95:00:5E:27:2C:34:7D:79:D4:23
Certificate issuer: /CN=64a68fc98cbdd586c14195005e272c347d79d423
Certificate serial: 01876FEAEC3BE63E9F339DC4EE27FE161AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKaPyYy91YbBQZUAXicsNH151CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/ZKaPyYy91YbBQZUAXicsNH151CM.mft
Manifest number: 0D21
Signing time: Tue 11 Apr 2023 10:44:39 +0000
Manifest this update: Tue 11 Apr 2023 10:44:39 +0000
Manifest next update: Wed 12 Apr 2023 10:44:39 +0000
Files and hashes: 1: YU15czcygsqRhVoXex-OpC6WcJU.roa (hash: FNLf3XFDUot2Cjf7PAivdA8ufy/CzVeabWkBmqOsY9M=)
2: ZKaPyYy91YbBQZUAXicsNH151CM.crl (hash: UkcxGUQYyKbRAyfaGwkc/RXx2UldsBX2L83UQS3pyiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:ea:ec:3b:e6:3e:9f:33:9d:c4:ee:27:fe:16:1a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a68fc98cbdd586c14195005e272c347d79d423
Validity
Not Before: Apr 11 10:44:39 2023 GMT
Not After : Apr 12 10:44:39 2023 GMT
Subject: CN=d5adc9515347c3e1cce7f5fec6ff57228b8904a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:51:f8:cf:ff:a8:98:7a:7d:49:13:98:aa:
82:2f:c8:40:a7:04:c1:a0:c8:02:6c:a5:02:1a:54:
34:df:f0:f8:18:92:7e:e2:0d:0e:fe:fe:6d:70:3b:
63:eb:5b:51:b9:ba:7d:9d:96:dc:85:97:95:2d:67:
26:ba:e0:fa:2e:1c:6e:34:48:0e:18:03:8a:9d:d1:
d7:4e:55:c8:15:3f:f5:fb:88:92:26:05:ab:4f:0e:
e3:e8:30:1c:7b:10:28:a1:6e:09:0d:ad:a3:4a:35:
a9:ed:9d:fd:c1:f1:a3:79:48:00:0e:ff:24:15:09:
95:cd:44:bc:6d:6b:ac:7b:c0:05:6c:1a:de:73:c1:
43:8e:e3:9e:e0:fc:6e:f7:f2:44:73:ac:d2:34:06:
db:ac:b8:09:96:b5:01:0e:3a:00:36:79:dc:2a:6f:
3b:86:e0:25:64:6b:58:4f:ff:17:ce:e9:f4:3a:97:
c2:7a:4b:54:2e:64:6a:be:89:e7:1e:cd:1a:65:1a:
4b:0f:91:18:cc:3b:85:f5:d3:03:cf:77:be:b4:5d:
50:98:43:b6:96:20:be:b5:07:9b:b0:b1:0b:b8:21:
3a:4b:e9:1c:e1:9e:b0:38:cb:18:07:90:03:8c:27:
91:f3:cc:d3:61:9e:7c:1c:de:de:2c:ba:b3:d3:50:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AD:C9:51:53:47:C3:E1:CC:E7:F5:FE:C6:FF:57:22:8B:89:04:A7
X509v3 Authority Key Identifier:
keyid:64:A6:8F:C9:8C:BD:D5:86:C1:41:95:00:5E:27:2C:34:7D:79:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKaPyYy91YbBQZUAXicsNH151CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/ZKaPyYy91YbBQZUAXicsNH151CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/ZKaPyYy91YbBQZUAXicsNH151CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:4b:d8:58:6c:c2:56:72:fa:ee:31:29:d9:20:d9:4e:49:
93:c8:fb:8b:c0:7a:7e:a7:71:ba:67:96:64:1b:00:b3:b0:43:
d5:ed:61:43:56:4d:6c:7d:80:de:04:6c:15:19:39:22:8c:3a:
8c:d3:83:96:ad:29:82:1c:84:8b:89:92:ed:e5:59:03:64:f6:
8a:e1:ce:85:b1:84:63:f1:4b:34:c5:00:e4:04:9e:01:5e:e0:
75:42:59:dd:52:50:48:ae:fc:b0:95:1d:0c:93:9e:b7:48:9a:
69:72:96:cf:45:59:bc:5d:f7:e8:42:70:70:e8:2a:8f:63:bd:
a8:58:ab:85:70:21:be:fc:f2:cb:29:33:d6:66:b5:7a:76:00:
16:23:47:88:97:79:d4:8a:1a:1b:b7:5b:8d:69:b4:6e:a2:d0:
d3:70:f4:e0:e5:c0:45:79:b7:7c:bd:92:1e:31:59:3a:c3:65:
81:7f:51:04:c8:c1:4e:d4:29:f9:bc:13:ee:3d:63:de:17:19:
bf:7a:25:d6:57:0f:c6:85:2e:75:17:ae:dd:f9:3a:a3:6e:dc:
51:8b:c3:e4:2c:5e:cb:32:3a:8e:f8:29:05:78:5e:ec:60:09:
7f:86:fe:67:15:55:d7:50:b7:45:23:ba:ee:b5:3c:72:a6:66:
40:3f:aa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:59 2024 by rpki-client on console-fra.rpki-client.org