Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/DkH5oMhs68xjxD-gU51CSYFKt0A.mft
File: DkH5oMhs68xjxD-gU51CSYFKt0A.mft (raw, json)
Hash identifier: csdvnP3Dr0Ignj5eMHQfwvUn4RKOVpVqQvG2FXeWIX0=
Subject key identifier: 36:C2:9D:AE:8B:D1:E0:62:A4:C6:F5:B1:64:D2:86:B6:7D:61:67:10
Authority key identifier: 0E:41:F9:A0:C8:6C:EB:CC:63:C4:3F:A0:53:9D:42:49:81:4A:B7:40
Certificate issuer: /CN=0e41f9a0c86cebcc63c43fa0539d4249814ab740
Certificate serial: 018C22E48B06990019128DE78989B7E3C0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkH5oMhs68xjxD-gU51CSYFKt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/DkH5oMhs68xjxD-gU51CSYFKt0A.mft
Manifest number: 07CB
Signing time: Fri 01 Dec 2023 01:00:52 +0000
Manifest this update: Fri 01 Dec 2023 01:00:52 +0000
Manifest next update: Sat 02 Dec 2023 01:00:52 +0000
Files and hashes: 1: DkH5oMhs68xjxD-gU51CSYFKt0A.crl (hash: rZdtXP+c0N6e8zlzsCkJnxuusdOvXtFqiItDRCPDPdA=)
2: lYo3TgJPZrYER3hhHUqLTW-6__4.roa (hash: AHy1pskztSefe50SDBe2IuAy0vfzMGKu75vYlr38vtM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:22:e4:8b:06:99:00:19:12:8d:e7:89:89:b7:e3:c0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41f9a0c86cebcc63c43fa0539d4249814ab740
Validity
Not Before: Dec 1 01:00:52 2023 GMT
Not After : Dec 2 01:00:52 2023 GMT
Subject: CN=36c29dae8bd1e062a4c6f5b164d286b67d616710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:bb:25:40:dc:26:12:27:11:8d:aa:c5:42:
40:ab:2b:82:89:27:e9:f8:4c:f1:11:ce:03:d4:b7:
c7:71:33:78:21:fc:36:29:84:4c:44:7c:08:5d:44:
43:53:c7:ec:32:8a:63:a9:a2:82:42:b4:87:8d:a4:
7e:fb:1e:e7:a9:ab:a3:cb:fd:d4:65:3d:24:ed:7a:
69:07:3a:ec:85:5d:d0:06:cb:f4:c2:d8:9e:af:6b:
b5:d7:ff:cd:cf:d0:88:d4:79:89:da:61:25:ca:29:
c4:f1:f2:b5:fd:60:94:0e:f0:ab:ac:66:d7:27:80:
10:84:08:e5:00:54:b3:da:28:31:7d:bf:09:b3:27:
d6:26:9e:2d:c8:04:38:98:02:46:08:04:17:d6:09:
1d:6e:c7:72:56:d5:f3:e8:4f:8a:ae:1f:4a:7a:1b:
7e:a9:87:5d:ad:22:33:4b:0e:c1:61:bc:e3:32:99:
4b:c2:b3:0d:7b:eb:ca:25:7a:6d:53:cf:04:eb:60:
e0:1e:22:df:32:30:21:0f:4d:4c:ad:4c:70:a5:ad:
dd:cf:78:0a:22:6a:4d:88:b9:31:d7:10:18:4c:10:
a5:36:3d:e7:ef:9b:42:7e:da:01:12:a2:56:81:f0:
37:13:cc:f7:b9:10:7c:c0:8d:bf:fb:9b:54:a4:fa:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C2:9D:AE:8B:D1:E0:62:A4:C6:F5:B1:64:D2:86:B6:7D:61:67:10
X509v3 Authority Key Identifier:
keyid:0E:41:F9:A0:C8:6C:EB:CC:63:C4:3F:A0:53:9D:42:49:81:4A:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkH5oMhs68xjxD-gU51CSYFKt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/DkH5oMhs68xjxD-gU51CSYFKt0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/DkH5oMhs68xjxD-gU51CSYFKt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f6:5e:82:5f:7c:72:b0:bd:c9:1f:69:3a:b9:35:ff:87:ba:
fd:c0:20:d0:f5:1a:ce:31:d5:14:f2:13:0e:02:b3:ad:ce:d1:
d0:36:d4:32:0d:34:3a:6a:a0:e9:c0:ac:b9:58:58:2a:a5:94:
e6:b2:cd:7d:5a:7a:eb:26:6b:2c:21:c8:ec:2b:e3:5a:a7:d5:
16:10:dd:20:93:fe:df:11:a2:a9:69:8a:93:ce:33:41:66:a2:
03:75:4d:0b:5a:4c:8a:1b:a5:b3:55:08:ec:a5:76:c3:9b:46:
d4:be:ee:86:bb:34:f9:46:7e:2e:09:92:25:7f:af:89:2a:a8:
92:75:d3:82:8e:b6:70:d5:f5:22:ac:ad:b6:a9:81:80:df:35:
31:a6:43:1b:b4:55:41:7b:ec:fc:6c:73:d9:c2:4a:16:99:f4:
f7:59:49:0a:84:f0:1e:6d:ee:84:8e:2e:62:61:6c:d4:52:2b:
d7:b8:de:0c:e7:ac:98:f4:d1:11:e1:33:a2:c9:99:39:f0:25:
c4:0d:8d:a8:1e:26:63:f3:31:0e:53:8d:04:53:38:f8:e9:e4:
e3:cd:24:90:d6:5e:ab:51:61:d1:58:a6:fb:92:98:51:ce:a6:
65:85:cd:bf:32:77:22:a3:a2:25:3d:c2:6b:62:65:4c:61:8b:
88:f5:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 10:27:44 2023 by rpki-client on console-fra.rpki-client.org