Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/ITjI6nbgb4KDL7JSvunIXFft-64.mft
File: ITjI6nbgb4KDL7JSvunIXFft-64.mft (raw, json)
Hash identifier: fSKu/b0XJHshvVgfUxYz5Yo7m6maNm3IdWKpyfwy89Y=
Subject key identifier: 6D:84:2E:55:F4:AA:B4:9D:AB:E9:F2:73:F1:E3:B8:0B:BF:5B:F7:33
Authority key identifier: 21:38:C8:EA:76:E0:6F:82:83:2F:B2:52:BE:E9:C8:5C:57:ED:FB:AE
Certificate issuer: /CN=2138c8ea76e06f82832fb252bee9c85c57edfbae
Certificate serial: 0186E8DB210065E191FBAD69907A38EC91F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITjI6nbgb4KDL7JSvunIXFft-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/ITjI6nbgb4KDL7JSvunIXFft-64.mft
Manifest number: 0C65
Signing time: Thu 16 Mar 2023 05:18:40 +0000
Manifest this update: Thu 16 Mar 2023 05:18:40 +0000
Manifest next update: Fri 17 Mar 2023 05:18:40 +0000
Files and hashes: 1: ITjI6nbgb4KDL7JSvunIXFft-64.crl (hash: ikX1KQk8bt5ezTGvypD6//0oLlcfZBwXQJYOIeuBUlA=)
2: lyv-MR_awE0YJfSYhQ0CrTLXVN0.roa (hash: EcGr479ARWlXGwJ5JN9uC2yN7ZQn37TPcVh3EVlD9+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e8:db:21:00:65:e1:91:fb:ad:69:90:7a:38:ec:91:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2138c8ea76e06f82832fb252bee9c85c57edfbae
Validity
Not Before: Mar 16 05:18:40 2023 GMT
Not After : Mar 17 05:18:40 2023 GMT
Subject: CN=6d842e55f4aab49dabe9f273f1e3b80bbf5bf733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:78:2d:6f:60:cb:79:4f:f4:8e:2d:88:fa:1c:
6d:e4:cb:02:dc:bd:dd:c7:c4:0b:25:cc:d8:f0:ed:
f7:44:f6:b8:dd:29:70:ff:1e:e8:1c:e1:04:0e:f0:
79:ec:59:ae:cb:f9:bb:01:3f:b1:f2:b2:07:30:77:
f0:81:ea:1c:a7:72:39:c3:66:2a:4c:e8:d4:d3:9e:
e7:38:a0:4b:af:f3:10:c0:e7:bd:c6:e8:27:cb:08:
87:6e:5d:a4:e8:0b:6f:b7:35:c6:86:92:a0:88:66:
2a:d3:42:6c:3c:35:bc:6e:be:e2:95:d8:f7:04:b1:
01:96:94:2f:50:60:ec:0a:cf:cf:5e:35:49:0a:ff:
ea:9b:23:ce:61:69:66:b7:f3:0b:85:5c:9a:07:05:
2d:5e:81:ca:c6:da:a2:84:8b:6d:57:72:ab:a7:39:
70:a3:7a:f2:e6:07:2c:ad:46:de:2c:86:0f:69:3e:
50:e2:d6:5f:f4:2b:c0:ad:95:ff:a8:0d:b0:62:b9:
d4:f6:25:27:82:d3:35:d6:ee:3d:c6:e1:dc:dc:44:
05:38:dd:cf:63:f7:5e:97:53:a9:e2:f6:5e:9c:79:
17:86:3e:12:83:6c:9b:07:ab:7e:dc:a1:20:69:74:
8f:14:28:cc:99:93:f5:ce:85:b8:94:8e:de:66:ed:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:2E:55:F4:AA:B4:9D:AB:E9:F2:73:F1:E3:B8:0B:BF:5B:F7:33
X509v3 Authority Key Identifier:
keyid:21:38:C8:EA:76:E0:6F:82:83:2F:B2:52:BE:E9:C8:5C:57:ED:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITjI6nbgb4KDL7JSvunIXFft-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/ITjI6nbgb4KDL7JSvunIXFft-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ad195b-63cc-4fff-9e7f-5914438351b6/1/ITjI6nbgb4KDL7JSvunIXFft-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:87:f0:d7:76:00:4f:10:82:0b:f5:37:11:5f:94:a8:26:f9:
fd:d0:3b:39:f6:25:55:b7:da:60:77:ca:0b:5c:e3:1b:9d:88:
8e:5d:8d:fa:0c:2f:cc:fd:27:64:e7:62:b0:29:4a:28:59:66:
c9:32:7d:a0:ca:e0:8a:c0:bb:ee:9b:5e:e7:44:42:ac:97:c4:
6b:9f:63:02:d3:ce:9b:ab:ab:f2:cd:1a:7b:a9:a3:46:01:f7:
ea:23:61:74:b5:44:3e:6c:fd:4e:1a:bc:bf:e5:ec:02:3c:23:
3f:4c:a2:ee:ce:37:c1:d2:2c:b6:d9:ff:9b:ec:17:f6:bb:02:
a8:25:b6:2f:c1:31:c4:25:c5:ff:22:74:51:c0:00:bd:71:88:
91:7f:da:ef:04:6d:16:1c:ca:16:49:b4:30:23:08:c4:75:4f:
76:98:49:eb:4c:9e:03:15:aa:73:a4:a9:8d:0a:d1:ad:b1:86:
d5:0c:36:5c:c1:6f:a4:9e:4e:ad:d0:fc:49:ae:e7:e8:5c:2e:
07:23:b1:e5:cc:52:c6:0c:18:7b:c7:77:33:5d:7d:a3:83:2c:
48:6f:c7:9d:4f:0f:0b:3c:34:46:44:45:84:fb:ee:bf:03:b0:
60:16:c3:b2:7d:33:0e:86:9f:3e:bb:8b:2c:a9:41:cd:1f:33:
46:96:81:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:38 2025 by rpki-client