Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.mft
File: 4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.mft (raw, json)
Hash identifier: Pd1IQP3FE/d0T7U+r6JIHUQT5Yq63rB8F1D+P+Jasow=
Subject key identifier: 8B:96:92:3F:40:03:D8:44:33:96:5C:DC:26:6D:61:B7:8A:2A:26:E3
Authority key identifier: E2:8F:F3:27:F6:5E:CE:51:CB:4E:03:1F:DE:74:37:A0:A1:73:F6:8C
Certificate issuer: /CN=e28ff327f65ece51cb4e031fde7437a0a173f68c
Certificate serial: 018C6833105512A576EC99FBC19E5D91220E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.mft
Manifest number: 0ECC
Signing time: Thu 14 Dec 2023 12:00:26 +0000
Manifest this update: Thu 14 Dec 2023 12:00:26 +0000
Manifest next update: Fri 15 Dec 2023 12:00:26 +0000
Files and hashes: 1: 4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.crl (hash: UVOGxt/57tBOEE7iMfHZoZrXpb5FD0gPphFB+AJFKSM=)
2: GYB9PIdRDV7vh-6LuJYd-UUUdAk.roa (hash: FYkvE/0vbytWgkDCofI/wDPaK9AojtVv8f6iK8L9y8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:33:10:55:12:a5:76:ec:99:fb:c1:9e:5d:91:22:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28ff327f65ece51cb4e031fde7437a0a173f68c
Validity
Not Before: Dec 14 12:00:26 2023 GMT
Not After : Dec 15 12:00:26 2023 GMT
Subject: CN=8b96923f4003d84433965cdc266d61b78a2a26e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5c:10:0f:d5:ea:fd:d2:c2:2b:97:d8:e0:fb:
31:ea:fd:0b:20:fe:39:ac:3b:ce:b1:e8:68:a3:34:
3f:69:14:d7:1b:06:23:cc:9b:d7:e3:2e:8f:74:24:
cb:7c:14:51:99:e4:2e:4c:3f:20:d9:c6:81:66:f7:
53:31:75:79:f9:b8:a4:49:f4:74:2f:75:ec:b3:7a:
9d:a2:fd:81:13:55:33:c2:8a:2b:74:c7:b1:88:05:
c8:0d:32:78:43:87:90:52:89:90:40:b6:70:9a:90:
47:34:6d:5a:a0:e0:3c:22:7e:e9:6d:25:ef:97:22:
14:64:aa:3e:e1:ed:b5:25:0d:f6:23:2d:2b:eb:02:
35:2f:b3:78:24:09:91:ba:6b:9c:48:a6:9f:4a:57:
6d:70:12:49:c2:c9:73:f7:27:fe:c8:f8:c8:f6:9f:
3f:8c:87:41:6f:0f:c1:29:02:8a:71:a2:79:d5:1f:
03:93:d8:01:4c:cb:a1:25:bb:92:1e:f5:0f:5e:d2:
e0:4c:b0:38:d0:92:d5:12:70:97:a5:b7:db:f2:db:
90:64:90:6d:ac:fd:01:bc:7c:af:99:c9:af:7c:0d:
b0:e0:6d:76:59:60:d1:28:fb:95:79:64:6e:0e:eb:
7c:4b:09:aa:a5:e0:61:cc:ad:c1:25:b3:95:a5:47:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:92:3F:40:03:D8:44:33:96:5C:DC:26:6D:61:B7:8A:2A:26:E3
X509v3 Authority Key Identifier:
keyid:E2:8F:F3:27:F6:5E:CE:51:CB:4E:03:1F:DE:74:37:A0:A1:73:F6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c761f4-0903-4ab2-8f7b-99dbf2d7648a/1/4o_zJ_ZezlHLTgMf3nQ3oKFz9ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:07:e7:99:78:d7:bd:ff:d5:88:1c:a8:4d:9d:10:85:2c:c9:
63:f3:20:c0:5b:19:6f:5a:db:14:c9:48:ed:0c:ee:b2:bc:a6:
16:b5:68:cb:7f:51:43:98:97:3e:a6:9c:d1:76:0b:42:23:c3:
ea:8e:27:01:5b:49:78:8a:e9:d0:d5:a0:99:8e:a9:75:34:21:
28:34:09:3c:bf:bd:c8:95:ee:a7:75:ce:75:c7:ed:bd:28:15:
5e:8e:48:b7:0c:52:fb:7c:cb:2d:fc:a6:1b:08:54:e8:09:22:
e3:50:f9:e2:ab:3e:57:b5:4a:68:6b:2c:ec:cb:38:df:cc:e6:
54:77:64:2e:49:fd:cc:10:ed:92:79:79:c7:69:32:7a:83:9f:
49:8f:dc:af:8c:ad:03:93:35:de:65:2d:ec:a4:1e:af:59:3f:
8a:67:cd:04:0c:37:38:af:2b:20:94:8e:d4:7f:1f:34:8d:70:
70:28:f1:d1:c6:88:42:87:08:97:33:8c:76:c5:3b:af:4a:22:
49:4b:3d:74:e6:8b:44:a7:a4:5b:d9:71:f9:3b:59:13:de:13:
ca:c5:17:25:eb:90:b3:84:d7:0e:6e:0b:86:83:98:57:3b:b3:
b8:ac:cc:f1:5b:2e:19:cf:44:50:fd:2d:6e:29:b7:18:da:7d:
19:67:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:08:21 2025 by rpki-client