Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89ba06-49b1-4fe0-8b48-a80134172e10/1/zdG_laKzv9pF4QgNqfbD6FjmKRE.mft
File: zdG_laKzv9pF4QgNqfbD6FjmKRE.mft (raw, json)
Hash identifier: /zXrXZuuTUMRu74CyoFPSp9/++I6qtkVK+KWpT6ATMI=
Subject key identifier: 1B:C0:51:31:A6:BB:D8:22:AE:CE:F4:6E:9F:22:5F:3B:0E:DC:4F:71
Authority key identifier: CD:D1:BF:95:A2:B3:BF:DA:45:E1:08:0D:A9:F6:C3:E8:58:E6:29:11
Certificate issuer: /CN=cdd1bf95a2b3bfda45e1080da9f6c3e858e62911
Certificate serial: 018AF8DBB78020F07F067B728EDAEFD64BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdG_laKzv9pF4QgNqfbD6FjmKRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89ba06-49b1-4fe0-8b48-a80134172e10/1/zdG_laKzv9pF4QgNqfbD6FjmKRE.mft
Manifest number: 087D
Signing time: Wed 04 Oct 2023 04:04:23 +0000
Manifest this update: Wed 04 Oct 2023 04:04:23 +0000
Manifest next update: Thu 05 Oct 2023 04:04:23 +0000
Files and hashes: 1: 0Zg_hW4kyQxGYQd03s-tyHvfCHQ.roa (hash: jA7SjU7ZofHn6QYZGrqJh1z6BuMxfd0bE78OVZSpsCI=)
2: zdG_laKzv9pF4QgNqfbD6FjmKRE.crl (hash: ldI5Mw1b+bSzNLDU0kEofPwvWRqHpeTvdqzWIIKxow4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:db:b7:80:20:f0:7f:06:7b:72:8e:da:ef:d6:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd1bf95a2b3bfda45e1080da9f6c3e858e62911
Validity
Not Before: Oct 4 04:04:23 2023 GMT
Not After : Oct 5 04:04:23 2023 GMT
Subject: CN=1bc05131a6bbd822aecef46e9f225f3b0edc4f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:9b:38:8a:c3:78:7b:b0:95:d9:d1:6d:70:
68:e8:4a:ee:56:11:9a:0e:4d:94:f9:42:52:77:7f:
fe:a8:b2:d7:b6:1b:e5:fd:88:15:80:59:64:95:a4:
1c:f9:7d:f7:d4:0d:93:e9:85:21:b1:d1:5b:1a:e0:
ae:4b:b4:cf:71:76:40:be:2e:83:1b:a7:92:db:a4:
e8:5d:89:e6:b0:fa:0b:92:d1:6e:75:fc:60:58:90:
e9:20:b0:92:d4:33:65:cb:45:21:3d:75:f3:75:af:
c2:f7:2d:20:d6:86:db:e7:f0:b4:42:d5:a3:96:73:
4a:45:6a:7c:21:1e:5e:a4:d5:0a:de:c9:56:33:6f:
f9:33:70:b2:5f:9e:5e:16:44:63:b5:d2:ac:2d:d2:
b7:cc:6c:b4:ae:76:75:46:30:13:10:fc:78:f5:07:
b1:2f:7c:1e:5d:af:8b:cb:ba:a1:79:aa:ff:51:e1:
ff:8d:a5:b4:d6:27:b7:56:95:46:45:a3:b9:83:cd:
d8:00:8c:e8:aa:ad:44:25:f2:3b:fa:09:59:55:ac:
d3:ae:ab:27:b4:55:05:76:ce:09:0f:6a:22:4a:b8:
48:96:6d:aa:12:3e:11:f3:4c:a2:01:a5:36:1a:24:
93:a5:f4:34:35:12:cd:27:10:82:cf:aa:9d:07:41:
fc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C0:51:31:A6:BB:D8:22:AE:CE:F4:6E:9F:22:5F:3B:0E:DC:4F:71
X509v3 Authority Key Identifier:
keyid:CD:D1:BF:95:A2:B3:BF:DA:45:E1:08:0D:A9:F6:C3:E8:58:E6:29:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdG_laKzv9pF4QgNqfbD6FjmKRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89ba06-49b1-4fe0-8b48-a80134172e10/1/zdG_laKzv9pF4QgNqfbD6FjmKRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89ba06-49b1-4fe0-8b48-a80134172e10/1/zdG_laKzv9pF4QgNqfbD6FjmKRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:90:db:94:fe:23:81:06:53:b8:05:a7:85:0d:25:05:46:b1:
c1:36:8b:70:bf:4f:b3:7b:4d:85:f2:af:43:00:ed:b9:70:84:
f7:14:ed:04:73:e3:02:32:5f:e3:1b:88:f3:d1:a4:42:2a:91:
2b:06:f5:1c:a2:b2:b5:57:6d:b7:4d:11:fd:9a:cf:30:7a:b5:
59:2e:4a:2f:16:e9:ec:b5:e6:63:a2:66:2d:31:59:b9:2e:3e:
cd:63:80:15:34:3d:19:b9:6c:47:17:8c:5d:ec:b5:bf:50:f6:
1f:93:f6:41:90:09:23:3e:43:69:e4:af:ad:7a:a8:c7:c7:6b:
aa:fb:f3:e0:8b:7c:71:7a:2e:57:23:5c:4a:a4:1d:e0:35:89:
21:d6:36:1e:dd:d9:16:bc:4d:0c:ae:1f:1e:a8:23:c0:8f:0b:
be:ad:d6:a4:9c:75:20:ac:69:fa:a7:4f:64:39:c1:b4:46:95:
ec:01:a0:7a:b1:49:db:ad:33:2d:09:f8:52:c0:d5:9d:ea:b4:
60:00:a3:a2:12:62:a8:fc:54:b9:1a:ec:b6:ee:89:2a:c7:dd:
d0:f6:1c:ee:e9:91:4d:e9:9a:65:9f:32:20:bd:f0:94:51:a1:
71:8d:72:01:45:91:20:31:99:75:fb:2b:fa:44:ad:c1:2c:70:
6d:03:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net