Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
File: Z6FPJDBIdf8VT-Kysstuugr5RSM.mft (raw, json)
Hash identifier: PPt9RK4AUO8XkzdCq8xwcIOYbND4yUXwA8rXWGeNsRg=
Subject key identifier: FA:2E:F4:F1:AF:3B:A0:01:CC:50:EC:CB:A2:52:A2:9B:A8:17:ED:F7
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Certificate issuer: /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial: 01948E8744E5878DFBB0C163D8AB4A91F0B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
Manifest number: 12EB
Signing time: Wed 22 Jan 2025 15:00:17 +0000
Manifest this update: Wed 22 Jan 2025 15:00:17 +0000
Manifest next update: Thu 23 Jan 2025 15:00:17 +0000
Files and hashes: 1: Z6FPJDBIdf8VT-Kysstuugr5RSM.crl (hash: yxhQLJFIdf2wUP0j7cQWoUF9anfvNf9m9V5rs0mFSZY=)
2: pl66MpODxtxRoZhLJAW-nkoD_Sc.roa (hash: sJLlhjSfYMWQixCxG3V31R8LPRit/+p4sujJjRjMO3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:87:44:e5:87:8d:fb:b0:c1:63:d8:ab:4a:91:f0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Validity
Not Before: Jan 22 15:00:17 2025 GMT
Not After : Jan 23 15:00:17 2025 GMT
Subject: CN=fa2ef4f1af3ba001cc50eccba252a29ba817edf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:d1:b9:f3:ad:cc:a3:29:6d:71:08:38:21:
a7:d4:c6:98:dd:b7:26:46:fc:43:7e:e7:ca:ed:e1:
c0:4e:b8:95:9f:85:e8:e6:9c:73:69:39:25:ad:3c:
00:e3:98:1d:30:5b:bc:0e:f5:b7:35:86:7a:53:e5:
c6:00:d6:b5:41:10:66:84:f8:12:f6:ef:c7:94:cf:
85:9d:96:0c:0a:7e:63:f3:63:86:80:d1:79:62:80:
f2:9a:05:ce:2f:6f:96:82:d3:15:e7:c5:23:88:60:
24:60:a5:7a:71:46:c4:89:7f:31:75:04:96:e1:b6:
b4:a4:01:ef:be:0f:a5:d4:12:43:43:8a:68:b3:a6:
fe:37:62:23:59:de:8e:01:8a:f4:fa:78:e3:04:57:
63:4b:6f:9f:b7:75:94:8a:06:7b:7c:44:31:19:83:
7a:61:a5:43:e4:97:57:0f:db:21:0c:57:3b:7a:d0:
7c:bc:8e:64:70:c6:f3:fd:77:d8:a2:9c:79:be:05:
d8:9d:d1:cd:7d:17:aa:80:8c:ea:fe:1d:5d:85:dd:
e4:5d:e0:1f:5c:5c:b8:b6:60:92:32:41:44:6a:9c:
c0:38:a5:f7:61:3e:55:22:c2:d2:2c:f5:f5:13:32:
00:b7:ae:82:d8:66:5c:f5:8b:57:21:84:7c:24:cc:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:F4:F1:AF:3B:A0:01:CC:50:EC:CB:A2:52:A2:9B:A8:17:ED:F7
X509v3 Authority Key Identifier:
keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e3:69:ed:24:c9:0d:ea:28:64:6d:6f:19:22:2b:06:58:12:
53:b1:80:15:d1:61:f6:9e:ee:7d:6c:0d:0e:99:58:c3:8b:09:
2e:92:b5:c5:24:df:92:02:ca:06:c4:9b:4d:89:44:ce:43:1d:
6e:46:79:c2:73:b0:2a:e6:ba:80:12:c6:63:d0:05:96:62:89:
87:1b:f0:a7:93:7e:3e:18:a2:32:1d:d6:83:69:48:c7:7a:36:
7d:3f:64:31:77:bd:5d:25:0c:d2:4f:52:5c:88:a7:cc:88:44:
45:b0:e8:5e:58:2a:9c:ce:bf:1c:ba:b5:0f:8e:32:d9:2e:e0:
d5:84:64:72:63:36:99:b9:9b:14:1e:e0:20:65:01:0f:c6:fb:
f1:fb:76:a6:b0:72:b2:49:72:a3:90:2f:03:74:25:e7:8a:39:
2d:be:5c:15:cf:bd:b4:3b:16:92:7a:55:cd:b5:0c:4d:61:29:
53:57:a6:ec:98:6b:b4:e6:d4:b0:1d:f7:82:e4:ab:90:56:30:
35:fa:a0:9c:25:3b:f9:99:fd:ad:fd:f3:98:dd:22:46:ae:53:
f7:92:8e:31:62:2a:d4:a3:83:f2:78:92:fe:f4:f1:8c:7e:d8:
c5:c0:6d:48:7f:c5:4d:d6:8e:c1:0c:d0:e8:a4:07:65:2c:f8:
fd:47:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:40 2025 by rpki-client on console.sobornost.net