Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/n43nIeOqRsAqOGurlONNilgAWDo.mft
File: n43nIeOqRsAqOGurlONNilgAWDo.mft (raw, json)
Hash identifier: bnX3iQDVirC6u1djzJKb34CuFBTxJw3ZLYuPsP/TAQg=
Subject key identifier: 2E:52:3E:6A:17:F9:EB:46:9F:71:85:8E:FC:C0:57:54:42:3E:24:0E
Authority key identifier: 9F:8D:E7:21:E3:AA:46:C0:2A:38:6B:AB:94:E3:4D:8A:58:00:58:3A
Certificate issuer: /CN=9f8de721e3aa46c02a386bab94e34d8a5800583a
Certificate serial: 018D8D19052156603B82466183F1E9551FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n43nIeOqRsAqOGurlONNilgAWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/n43nIeOqRsAqOGurlONNilgAWDo.mft
Manifest number: 0556
Signing time: Fri 09 Feb 2024 09:00:43 +0000
Manifest this update: Fri 09 Feb 2024 09:00:43 +0000
Manifest next update: Sat 10 Feb 2024 09:00:43 +0000
Files and hashes: 1: iKVSHb9ITBug4Bw3uElJbKGd6zE.roa (hash: /NHLNYIIqk5d3xQUlqsublj4gz7ojBwg8qdgTBpNtCI=)
2: n43nIeOqRsAqOGurlONNilgAWDo.crl (hash: 6ghh/Uy4Qv/TyytnrL3xY09244/Cy/ovvMFbopYfpo8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:19:05:21:56:60:3b:82:46:61:83:f1:e9:55:1f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8de721e3aa46c02a386bab94e34d8a5800583a
Validity
Not Before: Feb 9 09:00:43 2024 GMT
Not After : Feb 10 09:00:43 2024 GMT
Subject: CN=2e523e6a17f9eb469f71858efcc05754423e240e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:8e:ab:36:15:dc:ff:d5:92:5b:b6:07:01:
8e:41:f9:c0:68:34:3f:74:34:7c:63:ed:7d:70:b5:
de:cc:6a:4c:c4:6b:6c:ba:8f:84:92:be:ad:9c:fd:
32:1d:c5:5b:91:14:3d:86:53:d2:1b:f1:1c:59:9c:
5a:be:9e:94:81:a1:3b:d6:e1:1c:77:68:22:d9:b1:
81:cb:ba:e7:8e:5d:a7:6a:14:e0:db:9f:55:74:3e:
b0:5a:8f:21:60:8c:9d:17:5b:5f:9f:9e:a6:31:81:
6b:4a:b5:26:e8:fe:96:0e:0c:5c:28:3a:91:f2:f3:
bd:1f:93:d9:a5:e6:b2:98:7e:3b:b1:b6:32:87:b6:
0c:4c:43:65:ec:ed:0f:83:8a:62:ce:5a:82:5c:ba:
dc:c7:70:be:f2:1f:a1:41:45:af:94:59:ad:d0:5c:
9b:a0:e8:3c:45:fd:5a:7e:4d:ce:8a:b8:d2:27:e2:
a5:69:f1:56:85:01:44:53:8c:35:48:e2:70:09:99:
35:0a:f9:61:a3:1f:56:ce:a5:f6:81:0d:e5:f8:98:
78:7a:e1:ca:fc:a4:8a:1d:4b:f0:16:e9:95:a6:86:
68:31:8c:20:81:dc:38:c7:e9:31:a4:63:c0:bc:c1:
a7:41:3f:17:7c:7f:2e:05:2e:e9:df:57:aa:cf:ce:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:3E:6A:17:F9:EB:46:9F:71:85:8E:FC:C0:57:54:42:3E:24:0E
X509v3 Authority Key Identifier:
keyid:9F:8D:E7:21:E3:AA:46:C0:2A:38:6B:AB:94:E3:4D:8A:58:00:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n43nIeOqRsAqOGurlONNilgAWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/n43nIeOqRsAqOGurlONNilgAWDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c7bd5a-422b-44aa-8715-2103f4191930/1/n43nIeOqRsAqOGurlONNilgAWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1a:a7:7c:a0:c0:34:9c:31:cf:9e:f2:19:4f:d9:90:6e:2b:
ea:3f:33:a2:96:51:ab:37:7f:7f:20:59:ca:13:df:76:48:16:
8b:39:73:b1:08:09:8a:8d:51:ef:2f:b9:02:9f:b5:5e:e1:1f:
54:98:c0:e2:47:36:f8:70:e7:d9:7a:99:78:89:51:f0:cb:1c:
05:5f:b8:0d:f4:e0:60:cc:1e:17:a9:6c:8a:50:91:f5:8d:aa:
7b:2a:89:b7:37:b2:fa:8b:36:77:d4:e4:2e:0e:52:54:57:ca:
e7:0d:61:6c:4f:7e:9d:92:25:cd:14:73:5a:66:9e:9f:38:77:
52:6d:ad:69:45:58:47:54:fe:9f:a4:96:fc:bc:af:f4:45:b7:
f7:c7:62:2c:e2:0c:9c:a8:05:18:40:4e:14:d9:a2:bc:f1:27:
06:a8:8a:d1:e7:e5:09:92:b0:59:90:5d:d3:4e:33:eb:8d:08:
0b:c9:14:5b:28:67:4d:02:cc:86:1a:98:bc:32:39:ab:4f:3b:
8f:24:03:91:fe:ef:37:66:c6:a3:5e:ad:70:e5:8c:23:13:f1:
e5:e9:cd:58:0e:7b:ac:7e:23:5d:99:e5:cb:d7:36:04:e6:05:
0e:38:9d:d3:bb:b7:ab:b7:12:7a:34:80:84:62:30:b9:53:33:
02:94:66:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:16 2024 by rpki-client on console-ams.rpki-client.org