Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/AdB1pOUTf4eVY8WJl8p1drQFnt4.mft
File: AdB1pOUTf4eVY8WJl8p1drQFnt4.mft (raw, json)
Hash identifier: J4TBfhGsXqzMdlHlqvF1LYH+Dz5uW3XViYVkmF29dJI=
Subject key identifier: 13:70:68:06:53:DC:18:7A:76:2C:30:2E:FA:C9:B3:F0:9B:5D:3D:29
Authority key identifier: 01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
Certificate issuer: /CN=01d075a4e5137f879563c58997ca7576b4059ede
Certificate serial: 018B859BE9183283880E783F022FB692CC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/AdB1pOUTf4eVY8WJl8p1drQFnt4.mft
Manifest number: 02AC
Signing time: Tue 31 Oct 2023 12:01:09 +0000
Manifest this update: Tue 31 Oct 2023 12:01:09 +0000
Manifest next update: Wed 01 Nov 2023 12:01:09 +0000
Files and hashes: 1: 1-k3N6b8vOhrdEOi3rSD-D8T9B8U.roa (hash: xtPG6awMOmxwt9FJlTX+feqHbTUS2IBG2ZtxpoTtHmY=)
2: AdB1pOUTf4eVY8WJl8p1drQFnt4.crl (hash: U8arMwH+rqPQZgx+69BVWNUFBEaHaGMgllEW2c7/hbE=)
3: hZXyRYc6EDJZA5fCGxiViXHtQm0.roa (hash: S4NWkC1Yc0I7mYGtYcdmGxZSRrIVtPWBEQb84AzILn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:9b:e9:18:32:83:88:0e:78:3f:02:2f:b6:92:cc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d075a4e5137f879563c58997ca7576b4059ede
Validity
Not Before: Oct 31 12:01:09 2023 GMT
Not After : Nov 1 12:01:09 2023 GMT
Subject: CN=1370680653dc187a762c302efac9b3f09b5d3d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:2f:f0:8a:96:46:45:01:6b:05:83:a4:06:
3f:ba:78:02:e5:0b:c1:f6:bc:b1:f1:7f:bf:bc:9a:
5c:0b:87:44:41:c4:75:92:3e:a3:a0:50:3a:23:fc:
15:59:75:f7:ad:60:3c:df:c2:6c:18:49:25:ab:5d:
2c:d2:ed:87:40:a5:5e:e7:99:87:96:b6:ff:71:35:
fe:4a:ed:e7:82:da:65:69:fb:a8:fd:11:1e:39:d6:
27:ff:8a:0a:13:df:d0:16:0d:55:1f:8e:be:77:32:
e5:aa:93:23:de:21:ce:d9:7c:bb:41:c6:08:25:ad:
8d:9b:45:1b:9c:6f:67:a7:af:16:f4:e1:04:fb:b0:
76:04:78:b7:05:c9:c1:06:f2:55:97:91:94:4c:3d:
a5:39:a7:73:1c:16:05:45:51:98:9d:4c:82:39:88:
2c:60:a8:bb:60:d6:49:7a:c0:15:ab:c7:79:ae:9f:
47:88:be:e3:76:2a:94:86:eb:be:d0:67:22:3c:d8:
24:cc:64:a4:56:66:3e:9e:b2:7e:07:a8:9d:65:d9:
5e:2f:28:e8:c0:0c:81:6e:0c:71:38:6e:dd:94:b3:
ca:95:eb:08:8b:32:03:1d:94:aa:95:84:86:33:ee:
7c:a1:85:8a:25:6f:94:7f:88:af:3b:84:a2:e9:11:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:68:06:53:DC:18:7A:76:2C:30:2E:FA:C9:B3:F0:9B:5D:3D:29
X509v3 Authority Key Identifier:
keyid:01:D0:75:A4:E5:13:7F:87:95:63:C5:89:97:CA:75:76:B4:05:9E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdB1pOUTf4eVY8WJl8p1drQFnt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/AdB1pOUTf4eVY8WJl8p1drQFnt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c81b84-5b9e-4aa8-ba96-1e89bec44e10/1/AdB1pOUTf4eVY8WJl8p1drQFnt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:5a:65:4a:de:59:90:74:5b:6e:0e:30:26:57:53:2d:f8:
7c:31:3c:d1:da:05:44:5f:8d:3c:e2:f4:46:2a:2b:60:f4:c7:
8f:f0:c3:5a:8f:0a:f4:33:d5:7a:77:d6:96:df:d2:40:8c:5f:
1a:64:45:24:6e:97:78:ca:3c:ba:86:a9:1f:04:1a:2d:fd:26:
09:98:95:fc:82:42:a5:6c:c9:72:65:d0:2a:f5:d6:6b:4c:1e:
73:12:44:8d:d1:3e:75:6b:ad:05:41:12:bf:f1:d5:23:d7:40:
02:f3:a4:28:b5:14:a4:dd:e9:2e:3b:6c:75:bd:0e:c6:fe:b1:
32:9d:02:37:a4:70:79:f5:4b:d0:7a:c9:ea:6a:12:6e:1f:e5:
36:b7:19:b0:d2:e5:a9:3c:65:31:6c:b4:8a:70:7c:97:af:2a:
a4:76:34:04:95:5d:23:73:1f:a1:91:c2:0e:4d:c0:e3:14:d2:
23:6a:4d:f8:9c:b6:76:68:ff:c7:a1:e2:f2:93:ff:c5:a1:7d:
64:c0:0d:bf:2c:43:f3:5a:95:55:54:b8:a8:6f:15:e6:5a:ca:
c9:e1:ba:cc:f2:1d:9a:63:a5:9f:29:a7:9f:ff:ff:ec:96:a6:
f1:dc:8f:f0:a7:0d:ec:77:0a:07:b4:55:a1:39:f5:5b:50:c6:
13:a7:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:05 2025 by rpki-client