Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/CQDssMpkp4wzppsERutai0sTM6U.mft
File: CQDssMpkp4wzppsERutai0sTM6U.mft (raw, json)
Hash identifier: lt+1JYrMbktbnR9X9OwY/BFXlGF8LeixTmCFc1ouYXg=
Subject key identifier: A8:3F:B5:05:A3:06:F1:7A:A9:DE:32:CA:7B:B8:34:BC:67:0E:52:61
Authority key identifier: 09:00:EC:B0:CA:64:A7:8C:33:A6:9B:04:46:EB:5A:8B:4B:13:33:A5
Certificate issuer: /CN=0900ecb0ca64a78c33a69b0446eb5a8b4b1333a5
Certificate serial: 0186122CAE0511A0BD4E2BBEE1465CFBD8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQDssMpkp4wzppsERutai0sTM6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/CQDssMpkp4wzppsERutai0sTM6U.mft
Manifest number: 0C5D
Signing time: Thu 02 Feb 2023 12:49:23 +0000
Manifest this update: Thu 02 Feb 2023 12:49:23 +0000
Manifest next update: Fri 03 Feb 2023 12:49:23 +0000
Files and hashes: 1: CQDssMpkp4wzppsERutai0sTM6U.crl (hash: CqwJavCcm2mGSUyciL0rIeKaRB0vF3EgTNqbbKlklrU=)
2: TELOfkKOTghjldwxLA9CtDAK-ws.roa (hash: Ju8E2HdtAw+vpGHJAIGsa/SJLTadhPQU4ZY2f89DaAM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:2c:ae:05:11:a0:bd:4e:2b:be:e1:46:5c:fb:d8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0900ecb0ca64a78c33a69b0446eb5a8b4b1333a5
Validity
Not Before: Feb 2 12:49:23 2023 GMT
Not After : Feb 3 12:49:23 2023 GMT
Subject: CN=a83fb505a306f17aa9de32ca7bb834bc670e5261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:f8:27:53:b1:9c:18:7e:42:ea:4e:93:7f:
8e:6d:85:98:a2:d6:ba:06:94:4e:f1:80:31:72:59:
5c:6d:56:16:ac:ce:de:94:dd:e7:01:d1:20:4b:90:
4c:62:b0:85:39:11:f5:ac:9d:25:b7:6f:34:c7:49:
43:c6:2c:17:43:a1:6f:89:6c:e0:69:30:28:b3:51:
27:6a:3b:dd:94:e4:90:dd:56:33:df:92:69:90:2b:
a6:da:d1:ff:e4:1a:4e:77:dd:50:c7:ae:41:83:8f:
81:d3:d4:11:52:32:42:cb:0a:20:df:28:28:68:7d:
12:dd:cc:3e:8a:ed:8e:e7:9b:02:6b:88:b7:d1:16:
ec:af:86:72:be:7e:9d:cc:11:69:5d:40:fb:c7:cd:
a6:69:a0:03:fb:15:d8:12:5e:fc:d8:bc:32:b0:00:
9d:28:9c:7f:01:50:59:88:97:f3:f2:74:5a:f6:d8:
f1:d2:b5:ca:28:45:99:37:f7:c7:e3:07:fc:29:3a:
4e:6c:af:4b:a3:af:67:c6:de:57:fe:c6:6e:b9:a3:
98:68:4d:db:c7:15:85:db:3d:8f:af:37:d7:5a:bd:
a1:cb:e6:ab:af:7a:02:94:53:cb:f3:73:19:4c:fb:
23:16:5c:89:18:5c:1e:8b:82:eb:04:14:c0:68:6a:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3F:B5:05:A3:06:F1:7A:A9:DE:32:CA:7B:B8:34:BC:67:0E:52:61
X509v3 Authority Key Identifier:
keyid:09:00:EC:B0:CA:64:A7:8C:33:A6:9B:04:46:EB:5A:8B:4B:13:33:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQDssMpkp4wzppsERutai0sTM6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/CQDssMpkp4wzppsERutai0sTM6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b8e62b-bbc5-433b-9a27-0c84ea2695ad/1/CQDssMpkp4wzppsERutai0sTM6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2d:7d:93:6e:a0:03:b7:18:71:ca:e2:8f:6e:8f:9b:78:c8:
bc:5d:d1:eb:1a:2c:70:fd:91:d6:6d:3c:73:d0:b1:53:ed:88:
59:85:7a:ea:00:60:c2:e6:9c:7a:3b:14:09:0a:b3:59:3e:d2:
7c:06:58:a4:38:18:99:c9:53:9f:32:a4:3b:5b:5c:e3:d2:ef:
86:18:65:fc:43:a8:b0:c3:cc:1b:86:28:a3:38:6c:b7:fb:11:
44:c3:58:d3:22:44:97:79:b0:6c:ee:3a:52:d8:ab:56:77:20:
2c:44:96:a8:04:b1:1e:4b:fc:a5:4a:2e:66:ae:ff:9d:e7:81:
f4:c2:d5:1e:63:19:71:7a:fd:55:be:e6:d0:1f:23:14:d4:c1:
2c:d1:61:6b:2b:81:ca:f4:1f:36:f6:a1:93:77:2e:6c:12:90:
b5:ca:f7:36:1a:63:80:fb:81:dc:93:59:2a:55:90:0a:53:43:
33:41:fc:c5:0b:66:c4:1d:a2:7e:ce:ff:f6:57:30:18:c6:10:
b8:05:10:0b:4d:ca:54:e0:70:66:2c:59:5e:0a:28:3a:d3:6d:
49:50:04:f3:02:64:2d:48:86:ba:69:34:e1:e5:c6:e0:70:01:
8c:dc:c3:ef:02:86:e0:56:0d:c8:9b:da:6c:e8:fc:ea:69:eb:
60:05:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:54 2024 by rpki-client on console-fra.rpki-client.org