Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.mft
File: ZPOimPfekgVI6CUd52uAc4fi1Dw.mft (raw, json)
Hash identifier: 4G0Qfb9nI/kuT39qEX75cDyBEW/5IpKAbzPVqoE1QRo=
Subject key identifier: CA:A6:A9:C9:E2:1B:8D:73:3A:8E:8E:E0:31:C4:54:D2:6B:91:96:0F
Authority key identifier: 64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
Certificate issuer: /CN=64f3a298f7de920548e8251de76b807387e2d43c
Certificate serial: 018C20BF1B1AD6D741A065768467CE94C94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.mft
Manifest number: 0875
Signing time: Thu 30 Nov 2023 15:00:44 +0000
Manifest this update: Thu 30 Nov 2023 15:00:44 +0000
Manifest next update: Fri 01 Dec 2023 15:00:44 +0000
Files and hashes: 1: ZPOimPfekgVI6CUd52uAc4fi1Dw.crl (hash: DlGdsf4DwXOhPaQnzrok704TKnCE23w4p3UE7yJF030=)
2: wp8CwnNsQrzmm_wjk7ZKFcioTQE.roa (hash: wQT3X98aJu6peawpqC7GZXgzBMbbguXRVLWL0QSI9ZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:bf:1b:1a:d6:d7:41:a0:65:76:84:67:ce:94:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f3a298f7de920548e8251de76b807387e2d43c
Validity
Not Before: Nov 30 15:00:44 2023 GMT
Not After : Dec 1 15:00:44 2023 GMT
Subject: CN=caa6a9c9e21b8d733a8e8ee031c454d26b91960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:2a:cc:99:24:3c:d4:1f:f4:aa:b8:b4:ce:
36:76:8b:f5:50:da:4c:0d:7b:88:72:c0:86:98:c7:
85:53:5b:1f:35:05:32:21:e5:4a:11:04:14:be:a9:
63:e8:3c:49:df:47:e9:eb:63:a0:19:7a:bc:52:17:
23:73:df:d3:d4:cf:52:0e:9e:31:ff:07:c2:9b:af:
6a:89:f7:2e:49:a1:be:c5:8b:90:53:7a:64:c4:0d:
f0:09:48:de:81:0f:c7:6e:5e:46:2e:bc:06:93:aa:
5e:11:f4:f1:6d:60:54:a1:28:34:e1:53:d3:8b:b8:
01:bf:97:4a:c6:0e:92:fd:74:f6:f0:9a:db:1a:7b:
ba:20:7f:2d:9f:44:5f:71:77:c4:5e:4e:20:66:6d:
9b:7e:dd:8b:6f:93:b2:c8:8c:f3:37:c4:c9:2d:ea:
10:5d:4e:16:f1:15:84:27:a4:4f:13:09:41:d9:72:
f9:d3:78:12:6c:12:61:4d:8a:5d:95:10:2a:31:1e:
07:19:a8:ad:ca:a7:cb:70:df:5a:de:1d:16:dd:9f:
97:4e:34:6f:73:04:9d:a5:3b:ef:54:e5:86:b6:0e:
eb:d5:31:eb:06:3a:94:c9:51:f8:31:80:8d:d7:53:
4c:ce:b5:dc:35:8f:08:0e:48:25:1b:e6:76:90:cd:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:A9:C9:E2:1B:8D:73:3A:8E:8E:E0:31:C4:54:D2:6B:91:96:0F
X509v3 Authority Key Identifier:
keyid:64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:ce:43:2a:b8:3e:c2:e0:06:4a:17:23:8d:2f:93:da:2f:
bc:b6:92:73:8a:1b:ff:b9:94:8b:ed:7d:86:f2:64:54:46:73:
48:58:7c:37:13:b0:6c:a0:21:cc:22:f2:bf:60:54:a6:b0:97:
57:03:01:58:77:a7:db:7d:2d:d0:05:8a:67:e8:99:35:dd:bb:
05:ed:44:73:14:b5:08:ed:5c:6c:80:81:e6:14:8a:8c:bb:8a:
42:23:ca:dc:96:85:d8:01:0d:16:0c:c4:58:d6:fd:7b:1d:bd:
f5:fa:59:4b:fe:f8:8a:bf:c3:30:10:04:87:13:a3:56:01:15:
1e:e9:6f:ca:07:76:e8:2d:83:da:30:73:e7:3b:d5:fa:8b:e2:
b8:ad:68:40:89:da:48:36:01:57:8e:7d:4e:eb:e3:7a:50:88:
63:8e:0f:c3:72:4a:83:9b:1e:d5:36:37:3f:85:2d:17:06:ad:
be:14:ef:fb:bc:c2:12:e5:6f:b5:5b:40:d6:c4:d5:bf:37:89:
db:6e:de:0c:c6:5d:5d:8f:70:ca:58:13:a0:88:da:ea:29:5e:
49:2d:dc:08:b6:7f:b6:26:9c:93:d1:61:f5:9a:76:d4:b8:50:
7a:22:14:8d:bd:73:4b:4c:61:65:94:87:5d:ac:63:cc:3e:5f:
ce:87:be:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:50 2025 by rpki-client