Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.mft
File: a0teaRSKMxDDSHEyS8Vv6EuJHf8.mft (raw, json)
Hash identifier: t5A9ZRoVQe70dS/8aJdJD+p6XqtLP175ioiU53HmO88=
Subject key identifier: 41:DA:57:E3:D8:A3:98:E5:F6:B6:5A:A5:19:9A:FB:25:38:E0:1D:2F
Authority key identifier: 6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
Certificate issuer: /CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Certificate serial: 018C14BAB9F9A7DD7004C802511CB49B835C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.mft
Manifest number: 084D
Signing time: Tue 28 Nov 2023 07:00:30 +0000
Manifest this update: Tue 28 Nov 2023 07:00:30 +0000
Manifest next update: Wed 29 Nov 2023 07:00:30 +0000
Files and hashes: 1: a0teaRSKMxDDSHEyS8Vv6EuJHf8.crl (hash: 2iRSsB9oOgpYZKpmHB0RoJZmR5Lt2MGY2JNHTxM99jU=)
2: tKGfme2L4ZEZsCgffCwS12kYkwY.roa (hash: HZ2mXMqxzQH0rNOYAG50atcNrB76+SIwAaizVPxx5YQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:14:ba:b9:f9:a7:dd:70:04:c8:02:51:1c:b4:9b:83:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4b5e69148a3310c34871324bc56fe84b891dff
Validity
Not Before: Nov 28 07:00:30 2023 GMT
Not After : Nov 29 07:00:30 2023 GMT
Subject: CN=41da57e3d8a398e5f6b65aa5199afb2538e01d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:73:66:9a:65:03:a0:e1:34:df:77:42:71:
e9:6f:85:3c:b5:f1:ca:1a:8d:0f:8e:d8:ef:35:85:
63:35:da:63:ae:47:0c:5e:81:9f:a2:1d:b6:c2:6d:
ca:cc:43:87:2b:48:68:e6:29:67:4b:00:7d:91:0c:
5d:e0:a6:fc:13:c3:4b:40:20:cd:0b:f9:61:1a:5c:
4c:d8:ef:7f:8a:a8:f9:e8:11:4d:dc:56:8f:47:39:
50:72:f4:e1:4b:52:93:c4:27:c1:dc:e6:68:ec:39:
a5:d6:2f:18:3d:4a:f6:40:67:aa:cf:94:8e:1c:fd:
c9:6d:62:7b:8b:f3:22:11:78:8e:a2:5b:d2:a5:09:
00:f2:28:a4:ff:8b:69:76:0d:40:f9:6a:e1:77:e0:
5e:de:37:31:61:0c:61:c0:b9:51:f4:50:33:be:02:
c8:b5:99:61:17:f6:03:6f:0c:6c:9f:e8:11:02:54:
89:a1:3c:3f:aa:f2:d6:4e:ef:5b:c0:69:35:28:63:
df:13:3b:54:6c:c7:f0:42:a7:e4:7e:9c:24:63:d9:
48:c9:a9:90:c9:bc:3c:b5:ff:81:60:e0:cd:71:e7:
6b:35:35:e9:20:cb:ee:79:8d:67:ec:cc:57:2a:11:
b4:06:3e:5a:64:b5:8b:df:ec:46:39:ba:7f:e5:96:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DA:57:E3:D8:A3:98:E5:F6:B6:5A:A5:19:9A:FB:25:38:E0:1D:2F
X509v3 Authority Key Identifier:
keyid:6B:4B:5E:69:14:8A:33:10:C3:48:71:32:4B:C5:6F:E8:4B:89:1D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0teaRSKMxDDSHEyS8Vv6EuJHf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/36c7b9-be29-46c7-834c-3d8f39022e44/1/a0teaRSKMxDDSHEyS8Vv6EuJHf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:02:40:ed:c4:03:22:a4:83:27:1a:a7:12:f2:7d:6d:64:6a:
19:bb:d6:25:94:f7:14:cf:3f:0e:a2:f3:6f:3f:f7:f8:f4:dd:
96:f8:7b:b2:b7:01:a6:c4:ee:15:ba:37:7e:b5:6a:d2:37:ac:
d9:39:00:f1:0f:f8:74:cb:93:c3:f7:2f:44:3e:56:81:df:4c:
f8:4c:2b:61:a1:cc:6e:66:e8:41:4e:05:35:8c:64:e6:25:6a:
77:d5:c4:51:91:5c:bb:ce:df:90:a6:da:8a:fb:8c:fa:be:28:
a5:3d:6f:e8:52:cd:49:3f:17:56:8a:3d:9c:b0:6d:da:ab:ec:
6f:1d:12:b9:48:4e:32:4b:38:2a:52:e8:59:9d:40:95:c9:11:
ee:4b:ce:5c:7e:54:47:aa:43:a1:57:f3:15:ac:63:dc:53:40:
e0:11:35:44:03:ca:39:70:b6:71:90:54:e8:4c:b9:28:5a:10:
61:43:f4:6e:03:b2:b4:3c:43:15:b4:45:8c:8c:c9:94:cf:04:
e9:e6:33:e6:0b:40:1e:57:0c:db:1d:83:30:bb:6d:9a:0f:4f:
b5:62:2c:19:28:54:40:a8:19:89:fa:e0:55:c5:1c:97:00:b7:
78:1c:3a:c5:64:f2:1a:7e:79:e1:bc:44:00:43:cb:53:cb:19:
74:92:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:38 2025 by rpki-client