Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/157bb3-3d69-4464-9577-7069654ab79a/1/Z5Pfhs_KH1GhMgMStblhsmzETEI.mft
File: Z5Pfhs_KH1GhMgMStblhsmzETEI.mft (raw, json)
Hash identifier: knUYA21CEX6hNbi7GeWlKK3ENQrC2duX1LFlKSsu8eI=
Subject key identifier: C6:58:03:F1:31:0A:DB:EE:C3:7C:20:24:54:50:AB:51:3A:C3:E3:CA
Authority key identifier: 67:93:DF:86:CF:CA:1F:51:A1:32:03:12:B5:B9:61:B2:6C:C4:4C:42
Certificate issuer: /CN=6793df86cfca1f51a1320312b5b961b26cc44c42
Certificate serial: 0192F5F9AA5AD3383606FC095231B30DFFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5Pfhs_KH1GhMgMStblhsmzETEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/157bb3-3d69-4464-9577-7069654ab79a/1/Z5Pfhs_KH1GhMgMStblhsmzETEI.mft
Manifest number: 066B
Signing time: Mon 04 Nov 2024 07:00:32 +0000
Manifest this update: Mon 04 Nov 2024 07:00:32 +0000
Manifest next update: Tue 05 Nov 2024 07:00:32 +0000
Files and hashes: 1: Z5Pfhs_KH1GhMgMStblhsmzETEI.crl (hash: 3m97qIwcCCp/ma87LlCuf4a+tq4NIBmL14hDES9a0TY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f5:f9:aa:5a:d3:38:36:06:fc:09:52:31:b3:0d:ff:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6793df86cfca1f51a1320312b5b961b26cc44c42
Validity
Not Before: Nov 4 07:00:32 2024 GMT
Not After : Nov 5 07:00:32 2024 GMT
Subject: CN=c65803f1310adbeec37c20245450ab513ac3e3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:f2:1c:e7:b9:9c:18:74:99:a3:f4:51:d6:
1c:13:27:50:62:0d:6d:cc:73:f1:d0:59:77:2e:ac:
c3:7b:e6:da:3c:7a:50:50:f8:18:f9:9c:38:38:77:
2d:dd:6c:c7:2b:29:43:32:b7:be:aa:f0:63:39:9e:
d0:f3:d4:ac:02:85:c0:cd:3a:38:bc:00:06:63:b0:
81:11:cc:10:d3:48:09:12:43:6a:bc:00:d9:54:6b:
9d:67:62:fc:1a:b6:cd:43:3f:0d:a7:be:22:79:90:
8b:80:1a:da:e2:4c:0b:c5:84:32:7f:6d:d0:47:7c:
ce:b7:91:23:62:a2:6e:28:7b:0f:0d:48:6c:a5:de:
91:0e:82:9a:f8:eb:4d:17:6b:ec:48:b4:60:78:e8:
77:c1:37:93:f4:28:cc:0f:be:f6:39:5f:91:04:3f:
18:8b:c9:bb:48:e2:c3:59:17:61:6f:82:b1:09:f6:
4d:2d:26:82:2e:1f:96:5a:55:f0:1e:9b:fe:3a:b3:
07:dd:38:47:fe:d1:be:ba:68:5e:d7:02:88:e4:2c:
3b:d1:ba:e0:7d:e6:72:51:f3:8e:b3:2e:3e:9b:25:
2a:1b:e2:50:c1:eb:bd:17:8f:6c:d5:47:f0:d1:d7:
fa:e1:c1:10:13:12:bf:f9:0b:fd:6d:7e:ad:33:7b:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:58:03:F1:31:0A:DB:EE:C3:7C:20:24:54:50:AB:51:3A:C3:E3:CA
X509v3 Authority Key Identifier:
keyid:67:93:DF:86:CF:CA:1F:51:A1:32:03:12:B5:B9:61:B2:6C:C4:4C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5Pfhs_KH1GhMgMStblhsmzETEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/157bb3-3d69-4464-9577-7069654ab79a/1/Z5Pfhs_KH1GhMgMStblhsmzETEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/157bb3-3d69-4464-9577-7069654ab79a/1/Z5Pfhs_KH1GhMgMStblhsmzETEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fa:7e:72:12:50:c8:bc:e4:aa:a6:ec:13:53:b7:e2:2f:11:
22:5b:81:02:8a:c6:64:13:da:bb:51:bb:1a:9f:7f:00:43:20:
bd:7c:07:fd:2f:43:6a:50:8c:2c:c4:b3:32:f5:f8:50:4e:60:
19:01:3c:89:c6:76:4f:f6:42:be:ae:00:1a:d6:b7:1b:d9:81:
29:49:28:53:5e:76:17:54:7f:97:34:5a:ee:99:b8:ed:f1:33:
20:c8:6a:88:5d:10:32:3a:9a:b7:2b:ed:b1:b5:c5:57:d1:ca:
3a:08:c8:42:be:c9:c0:04:9f:cd:1e:aa:e6:7b:2e:3a:cd:ec:
a2:d9:33:a6:2c:e9:7f:f3:0f:20:fb:1c:72:83:ae:13:65:95:
55:f2:62:f5:4f:12:ce:5f:7d:21:0a:12:ca:52:74:5c:6d:72:
b3:e1:b1:27:37:fd:b1:e6:aa:1d:99:8e:84:67:49:7c:db:07:
dd:08:7f:88:bc:cf:02:8a:b4:d0:14:d8:63:25:9e:9b:e5:5b:
11:5e:0b:3c:4b:b5:e0:d7:ad:6a:b1:33:e8:56:24:b7:ff:f2:
f1:6e:a4:f4:42:56:04:b6:e0:b1:11:9c:73:0f:b2:73:88:40:
4b:2b:57:a8:20:62:bd:11:e2:f6:11:82:dd:3e:c5:ca:b9:dc:
fb:f5:73:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZL1+apa0zg2BvwJUjGzDf+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTNkZjg2Y2ZjYTFmNTFhMTMyMDMxMmI1Yjk2MWIyNmNj
NDRjNDIwHhcNMjQxMTA0MDcwMDMyWhcNMjQxMTA1MDcwMDMyWjAzMTEwLwYDVQQD
EyhjNjU4MDNmMTMxMGFkYmVlYzM3YzIwMjQ1NDUwYWI1MTNhYzNlM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz7yHOe5nBh0maP0UdYcEydQYg1t
zHPx0Fl3LqzDe+baPHpQUPgY+Zw4OHct3WzHKylDMre+qvBjOZ7Q89SsAoXAzTo4
vAAGY7CBEcwQ00gJEkNqvADZVGudZ2L8GrbNQz8Np74ieZCLgBra4kwLxYQyf23Q
R3zOt5EjYqJuKHsPDUhspd6RDoKa+OtNF2vsSLRgeOh3wTeT9CjMD772OV+RBD8Y
i8m7SOLDWRdhb4KxCfZNLSaCLh+WWlXwHpv+OrMH3ThH/tG+umhe1wKI5Cw70brg
feZyUfOOsy4+myUqG+JQweu9F49s1Ufw0df64cEQExK/+Qv9bX6tM3soAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZYA/ExCtvuw3wgJFRQq1E6w+PKMB8GA1UdIwQY
MBaAFGeT34bPyh9RoTIDErW5YbJsxExCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVQZmhzX0tIMUdoTWdNU3RibGhzbXpFVEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xNTdiYjMtM2Q2OS00NDY0LTk1Nzct
NzA2OTY1NGFiNzlhLzEvWjVQZmhzX0tIMUdoTWdNU3RibGhzbXpFVEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xNTdiYjMtM2Q2OS00NDY0LTk1NzctNzA2OTY1NGFiNzlh
LzEvWjVQZmhzX0tIMUdoTWdNU3RibGhzbXpFVEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPp+chJQ
yLzkqqbsE1O34i8RIluBAorGZBPau1G7Gp9/AEMgvXwH/S9DalCMLMSzMvX4UE5g
GQE8icZ2T/ZCvq4AGta3G9mBKUkoU152F1R/lzRa7pm47fEzIMhqiF0QMjqatyvt
sbXFV9HKOgjIQr7JwASfzR6q5nsuOs3sotkzpizpf/MPIPsccoOuE2WVVfJi9U8S
zl99IQoSylJ0XG1ys+GxJzf9seaqHZmOhGdJfNsH3Qh/iLzPAoq00BTYYyWem+Vb
EV4LPEu14NetarEz6FYkt//y8W6k9EJWBLbgsRGccw+yc4hASytXqCBivRHi9hGC
3T7Fyrnc+/VzbQ==
-----END CERTIFICATE-----
Generated at Tue May 13 08:07:04 2025 by rpki-client