Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft
File: zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft (raw, json)
Hash identifier: ve0Ueva8FqQWHuOft9kIul/gx72BGai8Rto6Zu7ll5M=
Subject key identifier: B6:3E:81:F3:30:AE:E4:22:92:DB:EE:6A:E6:28:C8:49:A4:09:38:3B
Authority key identifier: CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
Certificate issuer: /CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Certificate serial: 018D874E1C1E21E1B481A0CB5EA9B38B1A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft
Manifest number: 0865
Signing time: Thu 08 Feb 2024 06:00:59 +0000
Manifest this update: Thu 08 Feb 2024 06:00:59 +0000
Manifest next update: Fri 09 Feb 2024 06:00:59 +0000
Files and hashes: 1: W0qLRHOE5k24kl98ujtEhbjHGLw.roa (hash: wVFLEE+htopApzZykaDFo8mO0zMpvnT5Q/dNg5W9xsE=)
2: nHv4qEVzNqdaRlspY6PdI5CNZ1I.roa (hash: FH5OwOR2G/9uNVAs7JPM2Tgs2I6umwMWDcZyp4AbBj0=)
3: zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl (hash: WhA6eO1cuOL6VqbrMj4OI+w9CT5QttYwzmTDPpGWqzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:4e:1c:1e:21:e1:b4:81:a0:cb:5e:a9:b3:8b:1a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Validity
Not Before: Feb 8 06:00:59 2024 GMT
Not After : Feb 9 06:00:59 2024 GMT
Subject: CN=b63e81f330aee42292dbee6ae628c849a409383b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:21:69:bc:39:5e:a7:d4:51:b9:74:45:46:
26:a6:4b:29:4a:34:47:00:2f:53:52:0b:ff:12:1d:
02:35:a2:cf:a9:49:0d:7c:68:27:5f:a8:4d:92:d6:
d0:50:d6:90:7c:a8:c9:fb:25:14:56:b8:33:02:96:
86:d0:ff:fd:5f:8e:c2:e8:94:be:6c:75:f5:0c:99:
a0:b8:6d:63:fb:69:5d:be:97:e4:cf:bd:73:73:47:
9b:2a:fd:4a:b2:cf:d9:02:7d:0c:cd:55:0e:ff:a6:
c3:c1:10:83:5b:39:3b:1f:0f:d2:de:94:2e:2d:36:
5b:a4:bc:5f:b1:e5:de:49:53:d5:05:af:c1:41:85:
79:e4:5b:2d:da:a7:72:79:1d:1e:9e:76:59:d2:1f:
76:1a:d2:aa:de:d1:fd:33:8c:85:9c:38:48:e4:4e:
b7:60:32:49:5b:27:39:16:84:bc:97:10:0a:08:8f:
31:70:7b:f1:53:82:4e:1d:d1:26:f0:a4:8f:46:d4:
44:ef:e5:19:45:67:41:cf:cf:89:e8:64:7f:63:2a:
2d:7d:05:69:76:b1:a8:65:12:fb:31:38:65:9d:8a:
89:20:ca:41:ca:a9:1a:06:9a:e2:74:b7:85:95:7b:
c2:63:22:31:21:05:b6:29:ee:f0:f8:96:4f:53:a6:
21:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3E:81:F3:30:AE:E4:22:92:DB:EE:6A:E6:28:C8:49:A4:09:38:3B
X509v3 Authority Key Identifier:
keyid:CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:88:3b:77:42:57:c9:0a:65:ae:6a:28:56:06:fc:56:23:fd:
ce:18:3c:6b:75:09:d9:1f:cc:8e:0a:4d:b5:9b:ed:c1:94:d9:
c6:72:ae:b1:9d:2c:d9:fd:28:fc:b0:85:42:d2:57:9b:e7:d1:
c8:89:89:0e:ed:7a:8f:55:04:ce:d3:d1:f7:ec:df:f3:6b:45:
b3:ec:f6:1b:45:16:cb:51:b6:87:41:96:c9:0a:2c:a8:e0:f6:
e3:86:77:b1:5e:4f:79:79:3e:c3:a1:b2:a1:ec:7a:57:34:61:
d4:29:25:a3:80:8c:fe:fd:02:6b:73:79:9a:a3:6e:b5:ae:75:
ec:39:10:ba:e5:ed:f0:8b:a6:f5:91:63:1a:c5:a3:ca:36:99:
b3:5c:5e:65:5c:2c:46:8f:29:ba:4d:5f:9e:87:f2:8d:bb:e9:
eb:24:06:92:f3:38:a5:fd:d6:47:e2:32:a8:46:04:18:00:b8:
b2:0b:48:45:c5:bf:de:a8:ea:a4:a0:d0:52:06:9b:28:98:f1:
78:16:70:47:22:05:34:f5:ef:30:c1:02:32:78:51:91:7f:bf:
9c:ce:13:70:5e:ea:5e:60:a0:1e:b0:a3:5e:db:f5:68:e6:d9:
15:dd:de:0f:54:9a:39:18:09:d5:7c:ab:a4:88:8f:ee:c5:44:
a9:e7:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org