Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/_JwKN-7uGIhHQ-r73lHD42pe30M.mft
File: _JwKN-7uGIhHQ-r73lHD42pe30M.mft (raw, json)
Hash identifier: QltH3vt7xwRjdDuC2ljAmGZINB6SjgxwrpFBPJGmyDU=
Subject key identifier: FA:63:E7:A2:B3:96:BB:65:5C:15:D1:50:22:D5:4C:89:F8:7A:CB:03
Authority key identifier: FC:9C:0A:37:EE:EE:18:88:47:43:EA:FB:DE:51:C3:E3:6A:5E:DF:43
Certificate issuer: /CN=fc9c0a37eeee18884743eafbde51c3e36a5edf43
Certificate serial: 018D8CE18B3F6FD188DEA69F40676CE45B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JwKN-7uGIhHQ-r73lHD42pe30M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/_JwKN-7uGIhHQ-r73lHD42pe30M.mft
Manifest number: 0864
Signing time: Fri 09 Feb 2024 08:00:07 +0000
Manifest this update: Fri 09 Feb 2024 08:00:07 +0000
Manifest next update: Sat 10 Feb 2024 08:00:07 +0000
Files and hashes: 1: Hm1jQlj3-I-SnLT0lJLFXbnT-I0.roa (hash: +Z2WDieOaU1SfdzQA0qL9FAXHHSFuu2MiEGvuubUpcI=)
2: _JwKN-7uGIhHQ-r73lHD42pe30M.crl (hash: j5DTguP9ZYdTroVhwQIbeyrGrEfe668hpGbRLJGLCjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:e1:8b:3f:6f:d1:88:de:a6:9f:40:67:6c:e4:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9c0a37eeee18884743eafbde51c3e36a5edf43
Validity
Not Before: Feb 9 08:00:07 2024 GMT
Not After : Feb 10 08:00:07 2024 GMT
Subject: CN=fa63e7a2b396bb655c15d15022d54c89f87acb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:38:a3:10:e7:1d:85:6d:fb:a2:11:90:c6:
ae:21:16:23:ac:3e:a4:af:b0:50:7f:13:be:d8:d8:
85:28:53:72:53:55:51:95:7e:de:63:e9:fa:8a:93:
2d:37:20:7f:fa:23:9f:5e:7b:01:f4:35:e4:eb:83:
04:ca:6c:50:13:d7:fd:eb:b3:6b:d2:65:c5:97:8c:
3c:98:b1:33:ef:a7:2d:4a:e8:b7:c6:5d:29:a8:41:
26:09:d2:02:27:cb:4c:1e:ee:d8:47:14:64:13:aa:
c9:79:55:fb:58:8c:32:03:26:f2:53:dc:9d:41:e5:
f0:c7:d7:e4:3d:b5:43:af:3f:3c:9d:99:58:c3:38:
6e:5c:d2:0f:a1:49:6f:c3:00:f2:81:ef:67:32:2e:
d4:66:ac:28:f0:b5:cc:63:f2:1c:45:ac:b0:57:38:
f3:19:70:4f:27:5c:54:ac:85:05:dd:aa:63:f4:a0:
97:a3:cc:64:0c:b0:5d:24:39:13:ef:95:1f:29:d9:
dd:98:72:01:07:b3:5d:c1:43:2b:b3:c1:18:dc:0f:
fc:17:07:25:18:85:df:bd:c7:47:5c:4b:86:3c:dd:
bd:e2:5a:69:c1:e8:eb:0d:76:3f:5e:17:ec:b2:e3:
63:39:f9:20:2a:c6:51:d8:ae:55:53:94:7f:b4:9c:
9b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:E7:A2:B3:96:BB:65:5C:15:D1:50:22:D5:4C:89:F8:7A:CB:03
X509v3 Authority Key Identifier:
keyid:FC:9C:0A:37:EE:EE:18:88:47:43:EA:FB:DE:51:C3:E3:6A:5E:DF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JwKN-7uGIhHQ-r73lHD42pe30M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/_JwKN-7uGIhHQ-r73lHD42pe30M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/168a06-6560-4a59-b84c-eb1561cd8bfe/1/_JwKN-7uGIhHQ-r73lHD42pe30M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:84:1d:60:66:9c:35:10:39:0a:16:73:77:56:15:6a:f9:cf:
18:f7:33:83:3d:6a:a0:17:b9:42:fb:7d:8a:8a:28:ef:9f:6a:
e8:98:10:9e:07:04:81:5e:d3:bf:97:7d:76:54:65:fa:9a:15:
e8:aa:60:33:ae:11:d9:d5:da:d8:67:34:d9:ca:2a:7d:b2:1d:
6d:da:0d:93:71:9d:8d:f2:92:59:77:2d:37:41:4c:19:e0:94:
24:e1:0e:33:1d:13:51:a5:44:f1:a2:ac:cd:af:94:37:43:5f:
4b:08:04:77:5a:85:77:de:2d:24:5b:db:07:49:f1:10:40:25:
92:f1:36:b1:1f:e8:ef:19:6d:e4:3c:38:d9:00:2a:82:91:1d:
83:7d:b4:09:32:3e:d3:44:04:66:54:1d:57:59:15:8b:98:89:
2e:fa:9d:bd:5d:ae:fb:c7:ca:9f:e5:44:27:52:89:86:85:94:
b5:b2:ad:28:83:56:ab:8b:da:2c:14:e7:47:8a:81:b4:01:53:
5c:6f:fa:a5:10:37:0a:ba:83:85:05:f0:b5:08:f2:78:bf:04:
a9:0f:ff:28:08:28:b2:44:77:86:24:b7:31:13:b7:8b:64:d2:
f0:86:54:d8:c0:fd:0f:bb:07:53:07:d3:b2:7b:54:22:9f:28:
91:a9:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:07 2024 by rpki-client on console-ams.rpki-client.org