Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b31f26-4132-4421-a14d-1ab191b694e0/1/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.mft
File: ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.mft (raw, json)
Hash identifier: fAz2TRq+Qqs6z8tewPoGRYSMLjchEhn86qbS6Krgnjw=
Subject key identifier: 0E:DB:4F:F0:F2:EE:17:CD:53:DC:78:DC:63:AB:4B:2F:86:D5:75:50
Authority key identifier: 64:A6:05:B9:08:32:BB:15:6A:F5:E4:B2:BE:06:27:C3:96:6C:0D:7A
Certificate issuer: /CN=64a605b90832bb156af5e4b2be0627c3966c0d7a
Certificate serial: 018E06FA75856CD79580E72048367341D246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b31f26-4132-4421-a14d-1ab191b694e0/1/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.mft
Manifest number: 0C30
Signing time: Mon 04 Mar 2024 01:01:01 +0000
Manifest this update: Mon 04 Mar 2024 01:01:01 +0000
Manifest next update: Tue 05 Mar 2024 01:01:01 +0000
Files and hashes: 1: ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.crl (hash: Vpr4QzluxdT/oJCbLmAPehuUW89Ae09BEoKEJAz91Bs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:06:fa:75:85:6c:d7:95:80:e7:20:48:36:73:41:d2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a605b90832bb156af5e4b2be0627c3966c0d7a
Validity
Not Before: Mar 4 01:01:01 2024 GMT
Not After : Mar 5 01:01:01 2024 GMT
Subject: CN=0edb4ff0f2ee17cd53dc78dc63ab4b2f86d57550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:f7:fc:73:ea:b9:ac:38:a4:50:3b:0b:fe:
22:ea:62:42:ce:4c:78:1a:a5:e0:9f:41:87:53:14:
95:85:a0:82:45:25:76:4f:58:2a:3b:4a:97:79:bf:
29:4b:2a:54:c2:0b:b7:4e:ce:72:93:d2:1c:43:5f:
79:cc:1d:51:ba:5d:e2:49:67:ea:38:4d:17:0e:9b:
db:fc:2f:19:d2:ef:2a:fe:f5:e0:21:33:d5:f3:33:
3f:5c:ed:2c:7f:de:25:f0:bf:42:b0:be:18:2f:77:
3a:5c:93:ca:d9:56:9f:db:3a:44:84:37:e0:8a:8d:
b8:bb:a7:34:1f:cf:e3:69:65:ff:71:11:b4:2c:ad:
37:7c:91:d9:36:10:5f:c3:77:e5:8a:04:c9:27:d5:
df:5c:1a:09:ce:cb:d1:0b:39:ac:59:9e:f3:2d:eb:
9c:21:4a:71:37:c7:10:e9:f7:6c:96:40:1d:88:94:
27:68:74:bd:69:ac:93:3a:eb:bd:f5:86:56:04:17:
e5:c4:3c:a9:53:11:24:33:ae:4c:2c:29:6e:e0:f1:
ee:45:f7:e5:07:c8:b0:02:9a:d0:83:e2:5e:bf:60:
dc:d3:ab:74:59:52:b9:c5:8e:17:95:22:de:1a:33:
ee:ae:e2:d7:30:12:5a:ba:1c:2f:b2:af:6e:eb:a1:
a7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DB:4F:F0:F2:EE:17:CD:53:DC:78:DC:63:AB:4B:2F:86:D5:75:50
X509v3 Authority Key Identifier:
keyid:64:A6:05:B9:08:32:BB:15:6A:F5:E4:B2:BE:06:27:C3:96:6C:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b31f26-4132-4421-a14d-1ab191b694e0/1/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b31f26-4132-4421-a14d-1ab191b694e0/1/ZKYFuQgyuxVq9eSyvgYnw5ZsDXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:29:d6:3f:ef:01:be:56:d2:69:31:b2:c1:0d:05:40:cb:ad:
56:39:20:79:6d:ba:0c:d4:3c:4a:f3:e3:75:8f:71:b1:75:72:
93:e0:27:05:ea:0e:45:de:a5:f3:db:15:4d:1b:71:f3:1d:25:
e6:84:17:d9:52:3e:e9:1f:59:b1:ec:3a:4b:4d:b0:47:f4:32:
b9:ee:cf:d5:30:fa:19:26:0a:10:b2:48:3d:aa:7c:77:c0:a1:
b6:59:7a:5c:ba:d9:0d:16:3f:23:f0:9c:2d:ad:2a:fc:2b:2b:
32:99:4f:4f:39:73:43:ab:c5:99:f5:4d:71:01:87:14:19:e8:
2b:90:14:00:90:4f:70:7d:55:f8:ff:1b:5c:df:3f:40:bd:aa:
f8:5f:9c:2d:88:c3:59:df:68:1f:f3:be:f6:9f:89:86:37:67:
5e:16:16:35:33:24:09:6e:76:a1:c7:05:3a:3c:e4:b3:30:4f:
10:29:92:32:f2:60:02:06:89:ff:85:1b:d8:85:36:7b:cb:a2:
a8:37:14:0b:2f:f2:b9:f8:f3:30:fe:e1:dd:b7:22:31:0d:0a:
6e:d2:b8:08:64:0d:49:8e:82:71:9f:7f:b4:02:26:85:ed:21:
97:eb:d7:37:01:19:0e:25:ac:b0:42:a1:7f:32:eb:c4:43:d4:
27:bf:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:57 2025 by rpki-client