Manifest
$ rpki-client -vvf rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft
File: 0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft (raw, json)
Hash identifier: oWlUs8dLFkqot6ttD61mqGyW77GNeMiUpLAwaTRGoCc=
Subject key identifier: D0:F8:B5:7A:B0:0D:65:64:A8:2D:0B:01:C7:F2:DB:3A:CF:08:A7:A0
Authority key identifier: 0C:BB:01:C9:58:FE:5C:38:B1:B6:40:AA:5D:04:67:84:5C:45:1F:50
Certificate issuer: /CN=0cbb01c958fe5c38b1b640aa5d0467845c451f50
Certificate serial: 26B07947E1B90F1A583A1C69D7AF18DD93866F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLsByVj-XDixtkCqXQRnhFxFH1A.cer
Subject info access: rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft
Manifest number: A5
Signing time: Fri 19 Apr 2024 06:27:27 +0000
Manifest this update: Fri 19 Apr 2024 06:22:27 +0000
Manifest next update: Sat 20 Apr 2024 07:29:27 +0000
Files and hashes: 1: AS215978.asa (hash: RiYDnxikAsa0aOSTDpGZrLBlQCpZQamFJfWyzJxvwvE=)
2: 0CBB01C958FE5C38B1B640AA5D0467845C451F50.crl (hash: 19g97aUJM9IMRwCI0zkC3po9D+fj8Ur0vLqJke5AOIU=)
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:b0:79:47:e1:b9:0f:1a:58:3a:1c:69:d7:af:18:dd:93:86:6f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbb01c958fe5c38b1b640aa5d0467845c451f50
Validity
Not Before: Apr 19 06:22:27 2024 GMT
Not After : Apr 20 07:29:27 2024 GMT
Subject: CN=D0F8B57AB00D6564A82D0B01C7F2DB3ACF08A7A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:9c:d1:06:be:02:dc:56:08:fb:a1:b3:3c:
3e:db:9b:30:eb:39:06:ab:86:a9:23:25:b7:f8:df:
38:25:3b:d4:ca:9f:fc:87:dc:a7:04:93:43:3e:de:
3d:f8:57:f9:5c:62:eb:d8:b9:85:4c:d0:6a:36:88:
f1:71:9a:68:31:d8:b4:10:72:fc:63:9e:0e:00:a1:
4a:51:1d:25:2d:8d:ea:fa:7f:72:52:5e:35:bd:a8:
e9:d5:1c:a2:4e:4f:d5:b7:7e:25:91:d9:ff:b1:cb:
f5:50:18:44:5f:9f:ce:99:d0:cb:38:25:d3:b1:79:
99:99:a7:e4:27:44:7a:88:85:c3:ed:77:40:23:15:
67:7b:a5:74:23:8f:e9:08:40:f1:59:66:28:65:22:
ad:ad:bf:90:2c:3c:b0:c7:28:c1:99:31:86:b8:f6:
f6:6b:24:dd:a4:2a:f4:dc:6c:d4:d4:48:41:cb:62:
8c:06:b8:84:03:12:2c:d6:c7:08:52:14:e5:0e:09:
c7:61:cf:4e:0b:bd:d0:1d:ec:46:fb:58:d5:e3:3a:
d1:52:5f:2f:ad:72:69:15:f7:79:ff:79:ea:89:e1:
b0:47:1c:dc:aa:6b:ea:05:91:97:5c:00:1f:d1:ff:
e7:bc:e9:cc:e7:08:d6:0c:b5:9d:34:5d:af:58:c9:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:B5:7A:B0:0D:65:64:A8:2D:0B:01:C7:F2:DB:3A:CF:08:A7:A0
X509v3 Authority Key Identifier:
keyid:0C:BB:01:C9:58:FE:5C:38:B1:B6:40:AA:5D:04:67:84:5C:45:1F:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLsByVj-XDixtkCqXQRnhFxFH1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8e:94:82:77:6a:b8:0e:44:e0:22:a0:d1:95:26:c8:46:34:
64:da:f4:52:e7:3f:26:86:ab:29:63:31:87:fd:40:6f:06:ff:
5d:8b:d3:04:54:e4:b5:62:48:fb:0f:c9:e3:d9:20:33:56:a0:
39:32:01:b5:ac:ae:f3:81:b3:c7:16:73:89:20:86:33:8a:03:
13:57:ac:ad:d7:46:fe:b5:7d:59:22:6d:9f:cc:d2:0e:39:9e:
4a:ea:6a:d2:ff:bc:65:a5:46:7c:db:5b:4d:03:fa:98:9b:6c:
57:88:bb:a9:bc:8b:76:24:72:3c:38:f7:44:d6:89:34:e4:5a:
7a:24:b5:b1:2c:ac:d4:14:e7:8a:60:18:73:ae:e5:38:e7:d4:
af:9e:4d:66:7a:8b:9e:5a:4c:d9:ae:06:d7:1b:ea:77:a4:bf:
c8:f9:21:76:bc:d4:2c:be:38:c7:a9:74:48:bf:25:06:9f:dc:
a9:bb:84:33:0f:c2:4e:55:ee:b0:e3:cd:35:ef:9f:6e:98:fc:
a5:f0:9b:85:f5:fd:66:10:77:dc:64:c2:0d:23:70:29:d2:3e:
31:1a:b7:18:f4:57:19:a6:71:1d:bd:22:39:05:c6:23:21:f0:
33:13:eb:93:b9:66:71:83:dc:2a:a2:a6:61:79:b1:36:05:ee:
21:33:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 21:44:05 2024 by rpki-client on console-fra.rpki-client.org