Manifest
$ rpki-client -vvf 0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.mft
File: 20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.mft (raw, json)
Hash identifier: INABqvchpZW+FumM33o8Pb7TL9cuPjmpaq+O0x+Co+A=
Subject key identifier: E7:3D:B8:A0:8C:3C:71:53:43:3F:2C:41:10:85:DC:46:B1:1F:FD:77
Authority key identifier: 20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
Certificate issuer: /CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Certificate serial: 17FD407888EBBD7162E278B38663EA424F3DFD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject info access: rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.mft
Manifest number: 046E
Signing time: Thu 14 Dec 2023 08:31:37 +0000
Manifest this update: Thu 14 Dec 2023 08:26:37 +0000
Manifest next update: Fri 15 Dec 2023 10:26:37 +0000
Files and hashes: 1: 20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.crl (hash: qU6boE5MjbRfGhem4bneyB/rlItliHIgHjiDUNgjzio=)
2: 3134362e31392e3131322e302f32342d3234203d3e203136353039.roa (hash: DJWuOBgr6HtU3vOSU6Idrojmbog9S50TfqPyQB3hO8o=)
3: 3134362e31392e3131322e302f32342d3234203d3e203134363138.roa (hash: 1A/O0jceHye+ft9mj+W+lxmNUFj7p2y/QBQbg1EFuG8=)
4: 3134362e31392e3131322e302f32342d3234203d3e20313937373330.roa (hash: zE1aWg6ptHN80Ar+QIpuUVjP658S+VKAUtmizbep29Y=)
5: 3134362e31392e3131322e302f32342d3234203d3e2038383838.roa (hash: IfvSmdX+Qj8xaMTNY5px/uDtN5RQ1WJdrJw7VSz9r80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fd:40:78:88:eb:bd:71:62:e2:78:b3:86:63:ea:42:4f:3d:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20baaf431ea61948b2ae98af6fe4223e912f2df3
Validity
Not Before: Dec 14 08:26:37 2023 GMT
Not After : Dec 15 10:26:37 2023 GMT
Subject: CN=E73DB8A08C3C7153433F2C411085DC46B11FFD77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:94:78:88:0d:24:a1:e3:0d:a0:48:7f:33:
c0:05:08:2a:8e:a8:dc:ae:ea:b3:de:84:74:c4:10:
50:32:5f:12:f2:0c:a8:9f:a2:2c:54:2c:c8:90:b8:
4d:8d:ca:5a:03:4c:12:19:e1:8d:3d:b9:97:ff:7a:
f3:5f:eb:1f:d8:e6:7e:7c:78:05:a0:02:cd:3c:05:
5f:a6:29:7f:79:53:a3:6e:be:dc:d9:6f:f2:b0:62:
bc:46:fc:b4:e5:7a:a9:b0:48:86:de:4e:0a:13:fd:
f2:b0:47:7f:93:fe:9e:02:c6:07:4a:c0:3c:0d:bf:
aa:28:f3:e9:7f:0d:4c:c6:28:78:2e:1b:2e:e6:e0:
42:56:e0:a4:b4:dc:b3:94:cd:5b:01:fa:27:40:ed:
98:4a:c3:7b:76:5a:f3:4b:0e:92:cf:50:43:02:5e:
0e:e9:61:49:f1:46:40:45:e8:71:ff:93:61:eb:80:
e3:d3:19:5f:5e:36:f7:2b:c7:69:34:ef:3b:83:72:
a5:ef:1e:ef:b8:db:3e:05:f0:c4:51:ad:e6:ba:e8:
b6:3a:ec:62:89:e3:b4:9c:ad:7c:66:da:88:ef:c3:
f0:c3:42:54:70:01:c2:d7:9b:10:32:fd:26:f6:a0:
a3:e5:d7:87:4d:9a:53:3a:d1:03:6c:c2:ee:f5:e7:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3D:B8:A0:8C:3C:71:53:43:3F:2C:41:10:85:DC:46:B1:1F:FD:77
X509v3 Authority Key Identifier:
keyid:20:BA:AF:43:1E:A6:19:48:B2:AE:98:AF:6F:E4:22:3E:91:2F:2D:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILqvQx6mGUiyrpivb-QiPpEvLfM.cer
Subject Information Access:
Signed Object - URI:rsync://0.sb/repo/sb/8/20BAAF431EA61948B2AE98AF6FE4223E912F2DF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:05:b9:c0:0e:e0:87:7d:3f:01:f2:48:f1:54:73:af:21:0d:
55:76:db:78:db:48:3e:ea:20:52:71:ef:58:8f:c5:e7:63:b0:
95:56:61:54:03:f0:4e:c1:56:b2:0d:29:8b:e9:a5:b2:c0:d9:
5e:b0:d3:63:68:86:c8:37:f1:7c:ae:67:78:24:4d:0c:a4:57:
56:bd:e7:60:16:d3:6a:35:b5:f7:0c:d4:84:52:58:b3:e7:1f:
22:8e:1e:13:bf:67:32:7f:a5:dd:65:df:0a:df:9a:cc:4d:47:
94:72:3a:14:cd:c1:cd:46:ad:ae:32:4b:dd:ba:8b:87:39:8a:
be:eb:cc:fb:29:84:1f:43:ac:62:38:3a:31:03:18:00:c0:1f:
a5:2d:0b:01:08:41:8c:31:47:a1:8f:b0:13:70:e4:6c:26:90:
4e:36:15:73:71:66:df:c9:18:60:7c:09:65:71:2b:cd:c9:27:
47:18:b7:79:35:8c:94:d8:5c:dc:4f:67:51:3b:8f:e6:79:78:
fa:f4:6f:9b:fe:6c:57:82:ce:fb:fc:a5:9a:3a:29:cf:a7:e6:
28:48:08:12:29:07:76:58:80:51:fe:43:2c:1e:80:8c:b5:fc:
85:86:f3:b9:0d:1c:4b:b1:a2:82:76:3a:fc:ac:c4:09:9d:88:
dd:ff:50:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org