Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59ed36-ca8c-4dfb-aa42-0d055d36a2e0/1/KPtZHsME-u2cItoULVJELN1kLiY.mft
File: KPtZHsME-u2cItoULVJELN1kLiY.mft (raw, json)
Hash identifier: AgJNW2gTdEkohJ8gCcAhNi6NaHdR5FfcleCqakqjS4E=
Subject key identifier: 85:4A:54:7A:51:07:CF:15:A6:0E:99:E8:D3:0F:27:46:E9:A0:57:94
Authority key identifier: 28:FB:59:1E:C3:04:FA:ED:9C:22:DA:14:2D:52:44:2C:DD:64:2E:26
Certificate issuer: /CN=28fb591ec304faed9c22da142d52442cdd642e26
Certificate serial: 0188B9215C57E3DA4BBA77F28802B5AABFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPtZHsME-u2cItoULVJELN1kLiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/59ed36-ca8c-4dfb-aa42-0d055d36a2e0/1/KPtZHsME-u2cItoULVJELN1kLiY.mft
Manifest number: 04C2
Signing time: Wed 14 Jun 2023 08:59:11 +0000
Manifest this update: Wed 14 Jun 2023 08:59:11 +0000
Manifest next update: Thu 15 Jun 2023 08:59:11 +0000
Files and hashes: 1: F-72g5ABfa7gSHDCR_mXqGGOIu8.roa (hash: +3FsA17sRuvFZnkAIVQaw/cnbci3J5zdqmli8la6q9k=)
2: KPtZHsME-u2cItoULVJELN1kLiY.crl (hash: 4FD7JrwhyuUY+4ufZhH5dWfI8kvOsbjXcI11kHm0898=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:21:5c:57:e3:da:4b:ba:77:f2:88:02:b5:aa:bf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fb591ec304faed9c22da142d52442cdd642e26
Validity
Not Before: Jun 14 08:59:11 2023 GMT
Not After : Jun 15 08:59:11 2023 GMT
Subject: CN=854a547a5107cf15a60e99e8d30f2746e9a05794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:ba:fe:dc:71:4b:34:ed:2f:07:ca:52:a9:
8f:01:58:dd:58:b1:61:2b:f0:fb:48:80:fd:8d:e9:
df:56:d1:a0:f4:76:06:33:17:c4:65:5f:03:a1:ee:
de:83:0d:84:c9:8c:a6:64:69:3b:13:fd:66:ee:5b:
7d:2e:17:eb:7d:c8:b0:1b:66:f0:08:90:34:f6:d7:
2c:95:cb:d3:62:a1:80:72:93:ac:9f:c4:1a:48:5d:
14:13:d8:d1:39:12:c5:ae:d4:72:ba:0b:04:44:b6:
36:fc:f8:bf:e6:46:d8:99:6b:b1:31:6a:9c:4c:fc:
7c:ad:0c:18:2c:6e:c1:12:6f:28:c9:56:c7:f1:c7:
62:c6:17:cd:56:e5:b2:5b:11:74:6a:77:b2:de:fb:
ed:0c:88:94:a3:ed:8c:56:b1:5a:b3:0d:05:3d:18:
34:4b:5c:d8:a5:96:f3:74:f6:4c:80:ec:0b:a3:38:
3b:03:77:c1:47:eb:13:45:3a:f9:f4:1f:58:92:e1:
41:42:92:58:4e:b8:8b:d5:0e:8b:8c:0f:f0:b8:0e:
d0:87:22:de:24:56:aa:e0:a1:af:43:15:47:d1:94:
b9:dd:64:62:bb:ef:43:60:97:f0:8a:53:0b:32:22:
4a:40:bd:4d:d1:4d:ee:75:26:1c:d9:ae:cc:13:8f:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4A:54:7A:51:07:CF:15:A6:0E:99:E8:D3:0F:27:46:E9:A0:57:94
X509v3 Authority Key Identifier:
keyid:28:FB:59:1E:C3:04:FA:ED:9C:22:DA:14:2D:52:44:2C:DD:64:2E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPtZHsME-u2cItoULVJELN1kLiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59ed36-ca8c-4dfb-aa42-0d055d36a2e0/1/KPtZHsME-u2cItoULVJELN1kLiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59ed36-ca8c-4dfb-aa42-0d055d36a2e0/1/KPtZHsME-u2cItoULVJELN1kLiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:06:e7:da:43:aa:fc:84:d3:ac:19:b0:73:da:64:bb:4a:6e:
13:6b:d5:9e:27:3d:74:9d:76:9e:5a:1d:6c:08:cd:40:94:6c:
95:1d:a1:24:05:8f:8b:02:ab:35:e9:17:d1:c9:66:02:fa:26:
46:98:fe:3a:40:9a:87:07:3a:59:1d:87:c9:e8:24:ea:c6:e5:
89:8f:3c:4e:01:be:64:7c:b0:db:4d:b2:77:d4:26:ad:e0:af:
10:02:c8:f1:5d:34:b4:26:fd:57:13:77:92:6e:a7:68:54:98:
27:ff:9e:a0:a9:28:2f:3a:f3:20:19:54:6b:e5:cb:d6:4b:76:
a0:3b:d4:13:37:32:6f:d2:49:43:80:40:f5:c3:59:c8:7c:df:
30:18:de:0c:a3:4c:a3:aa:ba:20:1e:1f:df:4b:1f:b2:85:11:
b9:13:2f:52:cf:e7:bd:7b:c9:81:47:d6:7f:1e:45:3d:17:76:
e6:ed:0c:4a:bc:11:96:24:6f:36:dd:0e:59:38:55:67:ae:c4:
0f:a7:9b:c0:44:3a:f5:57:a0:ce:8e:ea:e4:1a:e6:41:e6:35:
51:eb:39:05:77:81:dd:88:f9:bf:d7:31:fa:ab:81:aa:7a:b4:
fc:09:f2:72:dd:a3:76:cf:01:5d:49:3c:d0:28:3b:21:7a:51:
07:8d:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:46 2024 by rpki-client on console-ams.rpki-client.org