Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/fCATKIPEEkTqsdjzIYBwnFZAyvo.mft
File: fCATKIPEEkTqsdjzIYBwnFZAyvo.mft (raw, json)
Hash identifier: lQmfrFCmfDA1ndexVUzYQs3u0w23rSZv96+3o/LRYb0=
Subject key identifier: 68:33:46:17:4C:19:D6:5E:28:30:D8:61:67:E2:E1:AF:C3:46:40:9C
Authority key identifier: 7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA
Certificate issuer: /CN=7c20132883c41244eab1d8f32180709c5640cafa
Certificate serial: 018C33A104DA53450A952EB173F06B73155E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/fCATKIPEEkTqsdjzIYBwnFZAyvo.mft
Manifest number: 0676
Signing time: Mon 04 Dec 2023 07:00:39 +0000
Manifest this update: Mon 04 Dec 2023 07:00:39 +0000
Manifest next update: Tue 05 Dec 2023 07:00:39 +0000
Files and hashes: 1: GvB2uyDZQKQBw0_uSW58Z7UzMIU.roa (hash: LLahDYAKoIx9yC4hF5zhrdoL/7VSGQ4uYFS9DcbzXMk=)
2: fCATKIPEEkTqsdjzIYBwnFZAyvo.crl (hash: 7z3nHmT4jqvyaaSfBV2tTKg5n2UqqRzNNRaVmP+txQU=)
3: uk8Ylojnh_HCWQl2M4GvUOFiiJU.roa (hash: J7V2bHb1QWUrUdcAFPHK6QS/vk4Qyu62VxAfZqmYzvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:a1:04:da:53:45:0a:95:2e:b1:73:f0:6b:73:15:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c20132883c41244eab1d8f32180709c5640cafa
Validity
Not Before: Dec 4 07:00:39 2023 GMT
Not After : Dec 5 07:00:39 2023 GMT
Subject: CN=683346174c19d65e2830d86167e2e1afc346409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:be:69:3c:7b:87:55:9e:b6:52:c8:55:f8:
d1:7d:5d:ef:e8:07:19:79:5e:c1:ae:18:ff:51:6e:
11:a5:9c:9b:46:d0:a0:9c:0d:a6:69:49:7d:79:18:
b1:65:f1:5e:ee:8a:a1:12:b3:ea:e0:1c:39:bf:97:
ee:13:dc:e1:0a:ac:fe:e8:f7:2e:c4:c0:8f:01:78:
76:b3:df:d4:75:63:08:db:03:b6:32:79:f5:f3:8b:
b4:42:d6:b9:30:d6:21:7e:40:e3:a6:31:24:87:59:
7a:c6:fc:9d:dd:8e:20:a1:88:39:fb:ec:b3:d0:ac:
37:94:36:2b:61:65:3d:7b:8a:ce:3f:e7:02:87:93:
ea:4a:d6:27:9d:67:4f:75:c9:63:dd:88:0f:5c:ed:
d3:3e:a9:40:58:f2:e9:47:68:cf:1d:6c:80:f2:9d:
d0:1a:b3:75:85:24:d7:c4:bb:a8:86:51:f8:e3:66:
3b:3f:09:6f:1c:19:9f:95:9f:4e:7e:56:ee:8c:bf:
92:e3:a0:85:a2:69:c5:58:2c:cc:19:69:b7:71:96:
4a:4b:8c:4d:ff:d3:53:99:96:43:0a:ab:e9:b7:be:
85:63:ac:e4:22:70:c2:1e:db:2e:22:ae:58:f9:bc:
68:04:48:f5:79:7f:d7:cb:d7:01:41:0c:e6:03:61:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:33:46:17:4C:19:D6:5E:28:30:D8:61:67:E2:E1:AF:C3:46:40:9C
X509v3 Authority Key Identifier:
keyid:7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/fCATKIPEEkTqsdjzIYBwnFZAyvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/fCATKIPEEkTqsdjzIYBwnFZAyvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4d:ab:e7:3c:a7:a3:be:b4:da:1a:0a:7d:51:5d:66:a1:90:
cc:e3:14:cb:31:4d:c0:21:ac:46:5c:ac:90:4f:ba:85:8f:31:
ef:74:38:46:4c:69:4a:18:4b:41:c0:4c:4e:1e:69:dc:10:36:
c8:c3:1b:d5:53:34:1a:2f:99:08:95:b4:5a:34:3a:d8:45:46:
c0:ec:88:1e:83:91:90:df:62:59:73:81:82:ab:d9:2a:84:ae:
29:6e:8c:af:7b:a7:2c:0d:de:43:94:9d:da:4c:42:32:31:84:
3b:40:ad:99:73:92:84:d1:8b:c6:ee:ad:67:d3:d6:23:bf:eb:
e5:04:5e:4c:29:93:a2:11:d8:03:fa:52:c0:d8:ba:70:31:e4:
7e:ec:61:3a:e1:e3:f5:dd:e5:d5:60:5d:de:d2:84:55:e6:b2:
47:70:51:77:29:2e:10:2c:b7:e6:18:a1:49:dd:f7:4e:ee:a5:
09:34:b1:8c:dd:3b:6f:4f:41:df:68:11:09:83:de:72:58:10:
fe:d5:e3:e5:6f:36:f2:55:b2:82:f5:f9:5c:2f:96:e0:ee:6a:
b2:43:ad:c7:56:a7:62:d8:ee:bb:81:a9:15:82:5d:f3:8f:26:
4c:2a:1d:e8:f1:da:cc:45:76:bf:a6:53:12:fd:e5:2f:f6:60:
45:63:c7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:56 2024 by rpki-client on console-ams.rpki-client.org