Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/ZHIYPkNkgX8WVu9iQAJZtblF52M.mft
File: ZHIYPkNkgX8WVu9iQAJZtblF52M.mft (raw, json)
Hash identifier: nMXb2y40XOxi/etScIBypct7gWzu6kPknb91UTrnY9k=
Subject key identifier: 35:CC:48:13:0E:B4:64:AF:5B:87:21:5F:56:0B:E0:68:3A:96:EC:C0
Authority key identifier: 64:72:18:3E:43:64:81:7F:16:56:EF:62:40:02:59:B5:B9:45:E7:63
Certificate issuer: /CN=6472183e4364817f1656ef62400259b5b945e763
Certificate serial: 018CED063BC28436CA03920A0F83F105C06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHIYPkNkgX8WVu9iQAJZtblF52M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/ZHIYPkNkgX8WVu9iQAJZtblF52M.mft
Manifest number: 101D
Signing time: Tue 09 Jan 2024 07:00:57 +0000
Manifest this update: Tue 09 Jan 2024 07:00:57 +0000
Manifest next update: Wed 10 Jan 2024 07:00:57 +0000
Files and hashes: 1: ZHIYPkNkgX8WVu9iQAJZtblF52M.crl (hash: n9qDh7juDO2oQQmcuPW53DesXXOjLQScWFX8mB58/3Q=)
2: mn8f_AtLl_7lSjA_wJfXP2dARNE.roa (hash: 7nYmZjIrO4onWbL+xiYkSrPydEETF49eofTjG9YQiSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:06:3b:c2:84:36:ca:03:92:0a:0f:83:f1:05:c0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6472183e4364817f1656ef62400259b5b945e763
Validity
Not Before: Jan 9 07:00:57 2024 GMT
Not After : Jan 10 07:00:57 2024 GMT
Subject: CN=35cc48130eb464af5b87215f560be0683a96ecc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0e:ad:84:df:42:28:de:f4:d8:8f:e9:e2:bb:
5a:4f:95:36:56:c7:de:7d:f8:9f:27:25:03:c5:75:
64:8d:ad:e8:d5:c8:2b:58:42:04:d3:ed:f3:df:4c:
37:fa:9f:84:d1:e6:11:e3:0e:ef:93:3f:1f:7f:59:
67:44:4b:0a:5f:70:44:e8:95:fc:92:12:5a:d3:0d:
2c:1b:f4:51:41:f8:85:ec:a4:6c:b1:39:38:79:f5:
71:30:29:79:02:45:b4:6e:2f:4d:8d:1f:f3:83:7b:
1f:2d:6d:ed:6a:59:ac:9f:85:56:25:05:c4:7d:80:
24:74:47:79:ea:9d:cf:74:76:32:d8:c2:15:ac:da:
5a:9b:29:0e:f5:6b:90:d5:0b:79:37:ac:6e:f3:0b:
47:e1:d3:d9:5c:04:48:48:94:d5:e0:55:f5:50:5c:
af:e7:c8:8a:e8:da:21:15:68:85:86:21:ce:5c:2d:
e2:39:c5:4c:dc:a6:05:86:04:29:68:6b:38:91:45:
c8:cc:5c:89:98:2b:a7:84:42:69:f1:e7:c9:cd:9b:
09:fe:e0:3d:c8:32:eb:ac:55:22:9f:7b:63:d1:b9:
48:5b:d2:3f:a7:61:d8:7e:06:a0:70:f6:1a:35:80:
54:79:86:a2:06:7d:e5:78:1d:56:9e:cb:0c:39:a8:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CC:48:13:0E:B4:64:AF:5B:87:21:5F:56:0B:E0:68:3A:96:EC:C0
X509v3 Authority Key Identifier:
keyid:64:72:18:3E:43:64:81:7F:16:56:EF:62:40:02:59:B5:B9:45:E7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHIYPkNkgX8WVu9iQAJZtblF52M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/ZHIYPkNkgX8WVu9iQAJZtblF52M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/ZHIYPkNkgX8WVu9iQAJZtblF52M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c5:c8:d8:b5:4c:d9:82:0c:a2:07:e1:af:5e:f1:29:0d:51:
8c:f5:a7:4b:d8:2f:7c:d0:5b:1f:61:37:59:a5:d8:65:90:76:
89:dd:04:bb:65:7d:d2:a5:3b:37:6d:d8:98:db:92:fd:d7:d8:
2e:cb:b0:84:b4:6e:fc:59:d8:d3:19:48:23:11:aa:80:29:90:
8b:d0:25:cd:f4:4e:a4:cd:d1:7a:2e:42:38:79:9d:f8:89:9e:
ce:d7:d6:e2:f7:6d:bb:d0:36:fc:13:27:13:a1:c5:5e:90:4c:
f8:a1:1c:df:6d:63:6f:52:cd:fd:57:41:84:ec:c1:5c:cb:ed:
05:6c:7c:36:e1:bd:ed:62:b1:5d:0c:ee:c4:80:84:45:ba:a1:
29:7c:2e:02:5d:fc:e4:69:32:65:9b:09:5e:b0:1d:a4:79:d7:
1d:be:07:0d:f6:11:cd:e4:3b:dc:6d:0e:c5:08:36:29:62:aa:
65:47:84:a1:a9:8d:03:66:ae:5e:2e:2c:fe:e5:b8:de:cb:1d:
2a:1e:f4:7b:1c:72:b4:7a:cd:58:3d:46:25:9d:2a:50:0b:e7:
e1:94:69:2c:bf:88:32:82:c0:37:ac:a1:7b:0e:bb:0c:70:5e:
56:65:12:92:b0:c0:9f:ee:69:2c:01:b0:02:be:87:80:b3:fc:
22:8d:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:30 2024 by rpki-client on console.sobornost.net