Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
File: 2qFwhybTI0m_uyoSD1jaog0dLMo.mft (raw, json)
Hash identifier: F/TxThJ+ntV2alL4aGWhzm47nQSWHmWFCvuuvU/cwtw=
Subject key identifier: 50:6B:3A:EB:9D:7E:09:A4:C6:80:9E:04:F7:74:8B:47:90:B1:74:39
Authority key identifier: DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
Certificate issuer: /CN=daa1708726d32349bfbb2a120f58daa20d1d2cca
Certificate serial: 018D5DE41A0B79891A7EF7896D5FD57B5420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qFwhybTI0m_uyoSD1jaog0dLMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
Manifest number: 08FE
Signing time: Wed 31 Jan 2024 05:00:46 +0000
Manifest this update: Wed 31 Jan 2024 05:00:46 +0000
Manifest next update: Thu 01 Feb 2024 05:00:46 +0000
Files and hashes: 1: 2qFwhybTI0m_uyoSD1jaog0dLMo.crl (hash: YTrsZChtbIROlmoMJ/dHsQqac1ujpoJ/ZXqvCoqop8s=)
2: IqOnciWjVKlRggyTDQBReT5eRzE.roa (hash: ZlaMTgpmwmOdBn7m6Qm+9tkwYqslRi+4i/0bBxxhVL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5d:e4:1a:0b:79:89:1a:7e:f7:89:6d:5f:d5:7b:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa1708726d32349bfbb2a120f58daa20d1d2cca
Validity
Not Before: Jan 31 05:00:46 2024 GMT
Not After : Feb 1 05:00:46 2024 GMT
Subject: CN=506b3aeb9d7e09a4c6809e04f7748b4790b17439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:90:e5:03:44:49:0d:d6:24:0b:4f:a8:de:
d7:28:cf:e6:ea:76:27:8c:d4:25:92:94:01:9b:1c:
55:0b:4f:f6:ec:bc:46:85:c8:a3:6a:08:a5:80:3a:
a3:74:c0:da:dc:b9:0b:f4:08:d8:3a:3f:55:cb:70:
40:af:41:9e:d3:b7:04:1c:11:20:ca:ab:33:25:8f:
ae:83:63:4d:59:15:81:ca:a0:81:bf:0e:5f:a3:c4:
50:85:10:f2:50:ea:bf:06:b1:5f:85:8d:9a:dd:33:
9c:51:4e:7e:73:b5:b5:e4:2d:30:c6:65:d0:da:48:
43:6a:4d:9d:6d:19:02:37:f0:9b:bc:ff:69:3a:6b:
19:c8:28:88:b6:13:04:69:bf:fb:cc:5e:eb:3a:da:
74:1b:d2:f7:8c:44:c2:cb:82:72:c5:6b:64:f0:cd:
07:db:e5:37:5b:f3:81:97:21:0b:98:88:e3:09:89:
62:26:75:4b:84:d3:5f:17:ff:c7:23:94:e5:52:5a:
28:ba:8a:36:0c:be:50:39:16:3b:eb:ab:63:e7:7c:
96:28:4d:96:d5:f6:47:75:49:c9:86:c8:24:cf:fb:
d2:da:c6:8b:c9:ec:aa:df:99:ff:e1:9f:fb:40:2b:
91:b6:97:a5:82:3c:42:d5:81:3c:5e:d3:b2:f5:16:
72:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6B:3A:EB:9D:7E:09:A4:C6:80:9E:04:F7:74:8B:47:90:B1:74:39
X509v3 Authority Key Identifier:
keyid:DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qFwhybTI0m_uyoSD1jaog0dLMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:37:d3:de:92:07:d5:03:04:8c:97:74:e6:83:7e:b2:05:ee:
55:55:b2:5d:8a:1d:a9:64:38:50:ed:79:32:84:a3:45:d8:bf:
0e:ff:55:b6:48:5b:e1:04:a4:9c:21:17:26:6f:df:03:77:cc:
27:7a:45:0e:14:9a:db:ec:f7:d5:9d:b7:eb:b0:10:07:43:24:
a5:81:f7:52:c1:19:72:bc:34:c5:cc:50:68:23:11:db:6f:cf:
d4:90:59:d8:33:6e:e5:9c:fd:b3:08:1e:b6:b0:88:7d:08:fc:
b5:c7:8f:0e:1e:d5:ba:1f:9a:e4:d2:cc:39:c6:56:8f:a5:bf:
70:e0:f5:dd:3b:b7:48:05:7a:2a:84:c7:f5:08:df:88:ec:a8:
0c:1e:18:19:68:3b:ed:9f:2b:75:7a:6a:31:0a:ec:24:c6:99:
63:86:07:96:4e:5e:e4:d8:5d:b3:59:10:de:a3:7e:11:38:f6:
37:5a:0c:d6:65:b9:f9:3c:50:18:96:08:78:3c:f7:55:e3:b7:
b6:42:94:ac:ae:6c:48:35:a4:d8:74:e1:66:2d:0f:13:ac:bc:
a3:5f:17:16:c1:65:37:e8:22:d4:3d:e4:d8:f4:0f:76:ac:69:
5a:2a:30:45:96:2c:c2:ac:b1:3e:83:a9:cf:a5:ca:8a:e1:06:
12:b9:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:51:06 2024 by rpki-client on console-fra.rpki-client.org