Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f2ed3d-97f6-4a10-9010-6aff06d368e9/1/PxhD3NCms2_K1qoOJvcHx0G9F1U.mft
File: PxhD3NCms2_K1qoOJvcHx0G9F1U.mft (raw, json)
Hash identifier: OyqWPoS3FFiyWnGDNkyWL+LXWZRaVtC0cuZ6YtVPMzQ=
Subject key identifier: C2:F9:73:73:6F:DC:8E:4D:BD:F0:7E:17:E8:04:16:EF:56:E3:F8:C3
Authority key identifier: 3F:18:43:DC:D0:A6:B3:6F:CA:D6:AA:0E:26:F7:07:C7:41:BD:17:55
Certificate issuer: /CN=3f1843dcd0a6b36fcad6aa0e26f707c741bd1755
Certificate serial: 0185958F803BFEB59F9A147930366B963A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxhD3NCms2_K1qoOJvcHx0G9F1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f2ed3d-97f6-4a10-9010-6aff06d368e9/1/PxhD3NCms2_K1qoOJvcHx0G9F1U.mft
Manifest number: 0C11
Signing time: Mon 09 Jan 2023 08:04:47 +0000
Manifest this update: Mon 09 Jan 2023 08:04:47 +0000
Manifest next update: Tue 10 Jan 2023 08:04:47 +0000
Files and hashes: 1: DYK5ujGxP_s7HoLdkDRPIa4-TV4.roa (hash: FJmEPMNcetF8fNPSluzkQ4LJS07a24o7rOKT6LiK/bU=)
2: PxhD3NCms2_K1qoOJvcHx0G9F1U.crl (hash: 2FjSfth9oimKq6bK5GIs5KLuqUj7LPdMOqG7mJ+l4TY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:8f:80:3b:fe:b5:9f:9a:14:79:30:36:6b:96:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1843dcd0a6b36fcad6aa0e26f707c741bd1755
Validity
Not Before: Jan 9 08:04:47 2023 GMT
Not After : Jan 10 08:04:47 2023 GMT
Subject: CN=c2f973736fdc8e4dbdf07e17e80416ef56e3f8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:ac:fc:5a:29:0c:af:fb:3f:65:bf:52:9a:
57:19:e2:c7:bb:51:7a:d2:69:de:23:79:5d:00:c8:
6d:c4:e5:3d:93:1a:41:aa:7a:61:06:40:df:2b:a5:
02:9c:a9:8b:b1:98:e4:46:de:bd:b9:9c:60:15:88:
bd:d6:0f:17:eb:4e:f1:32:6b:17:ce:de:a7:e6:cf:
cb:8c:60:2f:4c:ba:d0:d5:50:98:0a:80:7b:f7:0c:
cb:d2:3f:3f:a6:99:6d:34:9b:7e:67:5f:0e:66:40:
c0:4f:43:87:7e:11:27:17:85:ee:a5:ab:ff:13:af:
1c:90:80:3c:2b:dd:8f:da:dd:39:f2:aa:d7:fe:99:
cd:14:06:0d:b8:42:b2:74:bb:8c:d9:cb:2d:1e:8c:
9a:10:4d:a7:01:bb:20:70:c3:13:d2:01:16:a3:52:
b2:02:72:eb:2c:43:ad:b8:67:9b:09:07:a3:3d:28:
35:7d:b2:05:85:66:c4:29:41:cf:3d:88:11:c8:70:
aa:ec:3f:94:3d:57:b1:91:68:c8:c8:54:66:5c:d0:
0c:b5:b6:e6:76:6c:7d:1b:e3:72:1b:92:5e:db:a8:
e1:01:83:ad:b7:8e:80:e8:70:ba:ca:70:ab:91:00:
d9:ce:2d:0a:d7:e4:70:ad:f3:6b:5d:1a:f5:8e:7d:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F9:73:73:6F:DC:8E:4D:BD:F0:7E:17:E8:04:16:EF:56:E3:F8:C3
X509v3 Authority Key Identifier:
keyid:3F:18:43:DC:D0:A6:B3:6F:CA:D6:AA:0E:26:F7:07:C7:41:BD:17:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxhD3NCms2_K1qoOJvcHx0G9F1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f2ed3d-97f6-4a10-9010-6aff06d368e9/1/PxhD3NCms2_K1qoOJvcHx0G9F1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f2ed3d-97f6-4a10-9010-6aff06d368e9/1/PxhD3NCms2_K1qoOJvcHx0G9F1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d6:ca:ef:06:4d:0f:df:68:4d:76:bc:6b:76:6c:1d:1e:66:
51:01:b3:dd:a2:72:df:39:4b:5c:db:51:df:93:b6:e9:8e:0c:
19:d3:6f:d0:81:02:38:47:74:ad:1e:58:7c:dd:92:eb:f3:5f:
d0:14:de:d1:fb:ec:48:59:05:b3:75:05:d2:14:32:69:20:f9:
b2:42:5b:f5:8c:6c:18:60:4d:dd:6d:28:7c:ad:df:fa:d7:8a:
55:19:46:08:a0:8c:bc:bb:fe:41:a6:2d:6b:fa:31:e2:47:1e:
26:2d:34:cf:a5:7d:89:16:42:02:b3:19:29:67:54:1b:96:2c:
db:72:30:30:43:b1:92:0d:87:35:86:01:2d:e0:56:12:4f:be:
e8:95:93:cd:f7:4d:a1:b6:33:e9:4d:7b:72:3e:5a:59:4a:ff:
6d:21:63:d5:41:92:e4:4c:bc:1d:8e:30:a2:f4:19:62:4f:b9:
eb:4e:c3:19:ba:bb:18:52:41:e4:6d:71:c1:fe:c1:fd:a7:f8:
f2:3a:8b:a4:35:4e:f6:ac:7e:03:e3:d6:3b:63:65:04:dd:fb:
a6:e2:3d:0e:44:44:4c:fc:e3:a3:12:24:63:99:75:de:99:ee:
76:b8:31:02:a3:fc:22:98:17:47:15:12:7c:49:f8:ce:41:70:
44:56:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:32 2024 by rpki-client on console-fra.rpki-client.org