
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft
File: ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft (raw, json)
Hash identifier: F4SFdqFDIIWRaatxeKkpDyxfEQ779R6iETpplJXFCDc=
Subject key identifier: 02:DC:7E:55:EE:E1:C3:02:BA:18:7D:B7:FF:F3:1D:4C:EA:4C:85:C7
Authority key identifier: 65:1A:24:2B:B1:2C:67:70:AD:D6:A8:BD:69:17:02:CA:62:89:55:AB
Certificate issuer: /CN=651a242bb12c6770add6a8bd691702ca628955ab
Certificate serial: 018CC8557A6B619D40BFA3B1F985F494F782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRokK7EsZ3Ct1qi9aRcCymKJVas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft
Manifest number: 043A
Signing time: Tue 02 Jan 2024 04:01:34 +0000
Manifest this update: Tue 02 Jan 2024 04:01:34 +0000
Manifest next update: Wed 03 Jan 2024 04:01:34 +0000
Files and hashes: 1: ZRokK7EsZ3Ct1qi9aRcCymKJVas.crl (hash: uCjoVGfHA6GWvGVIWYbWix495wugqtn/S9cDqIK2YgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:55:7a:6b:61:9d:40:bf:a3:b1:f9:85:f4:94:f7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=651a242bb12c6770add6a8bd691702ca628955ab
Validity
Not Before: Jan 2 04:01:34 2024 GMT
Not After : Jan 3 04:01:34 2024 GMT
Subject: CN=02dc7e55eee1c302ba187db7fff31d4cea4c85c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:b8:0d:8a:f0:03:0e:0b:bb:b6:f2:5d:6d:
5e:05:07:53:34:2d:34:23:57:79:36:8a:6f:d6:21:
34:3a:59:79:af:16:5a:9f:ab:62:7a:27:68:10:ed:
2b:3b:a5:a9:77:8c:85:98:e4:97:a2:64:52:6f:22:
8f:2b:c6:74:7c:ee:1f:10:2c:57:29:80:9c:35:68:
54:fe:82:b6:01:1c:62:05:2b:aa:e0:c1:c1:27:0e:
38:76:f6:26:bc:2d:ea:7b:bd:bc:8a:99:76:94:0c:
e0:9a:9b:56:a5:5f:7f:0b:69:5a:91:cb:fb:c4:b2:
df:0c:80:0d:9d:2a:f1:b8:5d:8f:00:87:ae:71:04:
ea:4a:1c:3b:4b:22:f1:a5:56:5c:92:94:57:e6:f8:
83:0c:4f:8a:58:a3:06:92:25:f4:00:ac:47:3f:7d:
e0:48:fb:3e:4f:47:2e:b3:0d:c8:95:5f:43:8d:ca:
ad:d5:d7:32:0b:39:50:e6:69:75:2a:46:a6:43:d5:
e1:25:2e:dd:33:6c:74:83:af:83:95:78:e2:c7:08:
a5:45:48:20:48:52:9a:9e:03:ff:87:a5:52:eb:74:
e4:2a:35:90:43:64:df:8a:85:10:de:67:0d:f5:e5:
ad:a8:4c:c3:5c:b3:2e:39:be:eb:53:f2:38:ff:11:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:7E:55:EE:E1:C3:02:BA:18:7D:B7:FF:F3:1D:4C:EA:4C:85:C7
X509v3 Authority Key Identifier:
keyid:65:1A:24:2B:B1:2C:67:70:AD:D6:A8:BD:69:17:02:CA:62:89:55:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRokK7EsZ3Ct1qi9aRcCymKJVas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:10:3b:10:af:20:75:b1:2e:4a:7f:fc:8e:81:24:e6:d1:0b:
ed:48:1d:de:29:39:21:56:2d:52:cd:97:6a:e9:14:1f:a5:6a:
b0:38:2b:e5:f5:8a:ab:f6:74:07:07:59:e8:bc:c8:63:e2:bb:
00:35:31:31:6f:7e:56:aa:6a:a4:f3:00:0a:45:2b:8c:ad:1f:
1c:ac:8d:38:58:88:9e:fe:07:aa:32:1d:85:79:67:da:31:44:
69:38:fe:9c:df:12:87:84:83:bc:4d:9c:dd:21:6d:ab:97:c7:
b8:f3:5a:36:66:93:d6:d8:45:18:ed:33:fa:6f:24:3e:22:fd:
02:0f:50:56:15:7a:43:a5:eb:d9:ce:2f:49:29:92:48:36:3a:
26:92:17:cb:3a:37:a2:25:1d:84:c2:1c:35:52:fe:68:95:de:
fb:3a:b8:9a:f5:7a:ec:8e:be:d1:fb:35:1b:85:a1:64:60:f0:
04:db:a5:c8:18:c6:7a:c6:18:86:19:e3:96:18:8e:01:01:d6:
15:87:98:46:8a:75:74:35:b4:32:be:70:1f:05:1f:29:8a:f9:
14:4a:70:2a:c5:e3:46:1d:fb:e2:54:04:b8:07:b2:34:73:f5:
9b:d5:d0:f4:43:29:c8:46:1d:c8:97:2b:da:26:0f:b7:6b:8c:
84:0d:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:36 2025 by rpki-client