Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/KzhAtdPDUlmByGFhZmed6SDjUPU.mft
File: KzhAtdPDUlmByGFhZmed6SDjUPU.mft (raw, json)
Hash identifier: +Ae2yqUCNhI0sTEWD/YkxHiqAFzQm+9WksMisY8JdiA=
Subject key identifier: F1:CF:CA:3F:D8:F4:2E:4F:D0:41:3C:BD:56:D7:6F:5D:25:9F:02:33
Authority key identifier: 2B:38:40:B5:D3:C3:52:59:81:C8:61:61:66:67:9D:E9:20:E3:50:F5
Certificate issuer: /CN=2b3840b5d3c3525981c8616166679de920e350f5
Certificate serial: 018CACA758D7DB2B56A4DE8161EE64F08BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzhAtdPDUlmByGFhZmed6SDjUPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/KzhAtdPDUlmByGFhZmed6SDjUPU.mft
Manifest number: 1000
Signing time: Wed 27 Dec 2023 19:01:37 +0000
Manifest this update: Wed 27 Dec 2023 19:01:37 +0000
Manifest next update: Thu 28 Dec 2023 19:01:37 +0000
Files and hashes: 1: 56u-Y27gqZZWKHMBfCXt8ROeo3Q.roa (hash: X9/sPgOmMkAgqgcWKnzZFNaNEkjl/bznx/cNNXrI9V8=)
2: 69Cos5B58QzUKmeDcgaZ2MPCUwQ.roa (hash: 0Lk/eii88zc4KBkxoxAJbomiFE/tIDxEg9f8Ypq5Ha4=)
3: D0-tSozDhcx-8MXexYZMQmGQb24.roa (hash: NmvkJKLV3Md+CwnqtIDuAJCwVC8dG1sPEoH86HBnJGo=)
4: KzhAtdPDUlmByGFhZmed6SDjUPU.crl (hash: krjr1MiupSAWDpn/Br2qvrU56LPodn689/fngAUwp/g=)
5: TV5GhvIx1KB7wNQRGAmqYSNM-Go.roa (hash: oyKD+ZhmDPg6F3kjIbbqUPrnx0BO2LQDsbBWzidjLlg=)
6: q_yR2Wo2vz70zB29TnC6-RGju24.roa (hash: IeY85u4yumtrHQyk+1MEZVPXOlM3HZ/eINpH46D4xA8=)
7: yvAAj-3ONavQkOgPRWSMODgB4Do.roa (hash: ZDOQ9OG8XJajPeLHdg2kiSzoc5Xx25kJoAHFdqTMKsA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ac:a7:58:d7:db:2b:56:a4:de:81:61:ee:64:f0:8b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3840b5d3c3525981c8616166679de920e350f5
Validity
Not Before: Dec 27 19:01:37 2023 GMT
Not After : Dec 28 19:01:37 2023 GMT
Subject: CN=f1cfca3fd8f42e4fd0413cbd56d76f5d259f0233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:1a:e9:75:1e:da:8f:35:08:8a:9e:31:4b:
ab:b9:6d:16:ce:77:9a:a5:a8:e7:bb:0b:3c:72:ed:
65:e8:a1:0f:3e:f1:f0:e0:ff:4c:9e:98:03:06:b7:
45:be:0c:f7:3b:1b:ff:0c:5d:d0:be:6d:53:de:be:
ca:e9:81:a0:14:57:51:48:02:14:f8:a6:a8:84:ca:
e7:c5:5d:4b:82:bd:be:35:9f:67:10:2d:b2:c0:96:
99:3e:3e:1c:ee:83:f5:4c:c8:95:d0:3d:eb:f8:09:
e8:f4:b9:c5:fa:8a:1c:86:fb:15:75:82:e2:9f:ea:
6f:b2:d6:8c:f3:f3:43:ef:0e:1e:7d:fc:54:2e:09:
21:07:67:56:f4:aa:a1:b7:18:b6:7a:90:72:e9:13:
4a:74:a4:b2:98:0b:31:c1:f9:21:94:50:b2:4b:38:
4b:3c:db:a2:71:56:a7:71:ea:c2:07:0a:3c:8f:0a:
13:0a:79:ed:a7:d2:27:fa:8d:9a:37:82:ee:f6:e9:
bc:a8:1c:a1:fc:75:f6:f6:5d:c3:c3:80:6a:45:d1:
97:0c:97:c5:49:5c:db:93:20:31:50:66:e9:72:e8:
c0:2e:69:d2:71:78:fe:a3:aa:d9:40:2e:1e:95:ed:
07:43:6e:e8:96:6d:dc:da:69:c8:9f:58:e3:bb:c5:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CF:CA:3F:D8:F4:2E:4F:D0:41:3C:BD:56:D7:6F:5D:25:9F:02:33
X509v3 Authority Key Identifier:
keyid:2B:38:40:B5:D3:C3:52:59:81:C8:61:61:66:67:9D:E9:20:E3:50:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzhAtdPDUlmByGFhZmed6SDjUPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/KzhAtdPDUlmByGFhZmed6SDjUPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2b95ed-9882-42fa-a9f5-ad80e756d256/1/KzhAtdPDUlmByGFhZmed6SDjUPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f1:62:c5:5e:2d:72:82:7e:07:8f:e2:e7:40:c0:c3:63:23:
6a:48:84:e5:b7:7e:9d:6d:46:d7:c6:fe:41:f6:86:63:16:cc:
9d:cc:54:44:b6:1a:d4:36:c4:72:62:d5:e7:ec:b7:cc:4a:84:
65:a0:f7:62:0e:0e:98:ed:ea:a1:5b:7a:bf:17:64:35:dc:95:
9c:9b:a4:8a:47:8d:67:ae:c1:5a:7c:57:43:32:0b:a8:2f:14:
c0:bf:18:22:82:61:a3:c0:d6:4f:33:12:95:97:a1:32:ef:49:
6c:2c:f0:81:c6:c6:42:92:ec:62:98:59:c5:e2:4d:e4:ee:a0:
40:19:0a:7a:eb:0e:73:0e:42:2d:2b:27:2f:44:65:09:88:5a:
0a:ac:e0:ea:c2:97:97:f1:43:d7:da:69:a5:3f:b3:46:ae:66:
99:e8:20:db:02:e5:65:db:dd:25:f3:99:f2:7b:97:b9:62:99:
d4:7c:81:8e:c9:64:f5:53:b6:35:5b:23:89:de:00:0d:99:29:
94:94:9c:11:5c:8e:9a:3c:7d:03:f4:11:40:ad:2a:36:a4:50:
31:01:6b:be:6f:f8:59:07:05:cc:6d:46:80:7f:1e:17:8d:84:
ad:99:d8:00:09:bd:30:73:1a:0d:b5:53:4f:ba:5d:36:b1:f9:
88:d0:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:16 2024 by rpki-client on console-ams.rpki-client.org