Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.mft
File: 2qv8kBeos21pESDjc_CM5AH2r0A.mft (raw, json)
Hash identifier: 2W3O//PiXIJ4IdYDzSUCADB0KV3RMOl0REy/fPCIGeg=
Subject key identifier: 23:AD:BA:E4:F1:61:B1:7B:4E:81:A6:1D:6A:48:8F:2D:E5:B6:56:B3
Authority key identifier: DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
Certificate issuer: /CN=daabfc9017a8b36d691120e373f08ce401f6af40
Certificate serial: 018DF1BE015FB098366C3FCBCA38A2D99C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.mft
Manifest number: 082D
Signing time: Wed 28 Feb 2024 22:02:57 +0000
Manifest this update: Wed 28 Feb 2024 22:02:57 +0000
Manifest next update: Thu 29 Feb 2024 22:02:57 +0000
Files and hashes: 1: 2qv8kBeos21pESDjc_CM5AH2r0A.crl (hash: 5UH8yB1bLz38EGZSGGR5Fxi4G1S1FsU2zB4PTXI+4ZU=)
2: ddnj4lu0sQTNFIbeAWt1xIKZtdE.roa (hash: DWjFt2gA1aouapBU+5+4CCQ1iZ1B8tieiegVSKlm17k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f1:be:01:5f:b0:98:36:6c:3f:cb:ca:38:a2:d9:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daabfc9017a8b36d691120e373f08ce401f6af40
Validity
Not Before: Feb 28 22:02:57 2024 GMT
Not After : Feb 29 22:02:57 2024 GMT
Subject: CN=23adbae4f161b17b4e81a61d6a488f2de5b656b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bd:63:94:3b:25:1f:25:a9:23:c8:c4:91:a5:
a3:ae:e0:8d:27:b8:32:e8:ea:03:5c:80:57:1b:29:
3f:41:13:94:71:0f:fa:59:a1:18:61:90:e7:95:43:
48:a1:f1:93:83:ba:60:24:8b:91:32:7e:45:36:9e:
c5:dd:bb:24:2d:a7:85:62:d0:dc:75:6e:32:74:63:
fa:27:66:80:69:41:1e:54:d0:33:f7:c6:71:c4:41:
c2:d1:c9:ba:a0:e8:8a:b8:4a:b0:a0:95:1f:7a:ba:
14:24:30:f7:ee:1e:44:c7:2a:e8:f7:bf:91:33:a0:
53:41:50:cc:e0:20:13:cf:ff:45:83:ac:f4:fa:a1:
5b:2c:f3:bb:ff:24:4e:a0:24:5d:09:92:64:83:59:
c7:61:1a:61:20:5b:6d:bf:c3:0e:ed:c5:f9:ae:fe:
bb:bc:40:6e:b7:13:37:05:26:39:65:a8:00:6c:cf:
66:4a:7a:68:44:c9:a0:d3:8f:c3:0e:47:d6:19:05:
8c:5d:68:ee:65:96:4b:e9:8f:3f:b8:be:e6:ce:57:
7e:42:6f:5e:4e:8f:fb:e1:ac:a4:95:71:2d:63:0b:
ca:d1:5b:00:49:2d:3e:70:71:51:89:ef:4a:dc:02:
bd:92:41:fe:31:f5:96:3b:c0:ce:a7:48:87:43:f1:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AD:BA:E4:F1:61:B1:7B:4E:81:A6:1D:6A:48:8F:2D:E5:B6:56:B3
X509v3 Authority Key Identifier:
keyid:DA:AB:FC:90:17:A8:B3:6D:69:11:20:E3:73:F0:8C:E4:01:F6:AF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qv8kBeos21pESDjc_CM5AH2r0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d96f4c-a0fc-4f25-98d8-b6239d6561e4/1/2qv8kBeos21pESDjc_CM5AH2r0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ab:e9:a6:27:68:59:69:21:8b:27:a5:08:80:e8:20:4d:95:
53:3e:56:08:c8:ce:e4:5f:c3:42:da:81:6f:c0:da:6b:1b:98:
f9:92:60:27:55:e9:75:7f:ef:6c:7f:ac:35:a6:b8:1f:a0:cd:
60:f4:07:23:64:8d:a5:cb:ff:15:6e:e3:36:8a:b2:a4:fa:17:
58:50:a8:70:bd:a7:44:dd:60:58:5c:82:7b:cd:22:e0:cd:97:
26:37:8f:b5:7a:fe:87:0c:fe:c8:67:c5:cc:2f:ff:07:3b:f7:
ba:a4:0f:6a:29:03:de:23:0e:b3:2c:57:ab:1e:a8:25:28:f6:
61:80:10:1b:0c:c1:a1:38:5d:ff:a1:f2:22:8f:25:50:98:ac:
d6:bf:9f:f9:a0:3c:cb:60:f7:f4:10:9c:88:95:2c:9d:1a:4b:
26:93:09:e7:33:01:a0:55:1c:e7:46:a8:d2:91:0a:a8:30:2e:
f3:85:51:e5:2a:a3:89:9b:16:a2:ed:a5:70:7d:66:f4:2b:de:
88:a9:31:cf:bb:9c:07:43:98:c5:40:b2:3d:d8:39:48:f1:ea:
c3:20:f8:f7:11:d4:b4:10:c3:ff:84:bd:3c:fa:ab:98:61:4c:
4b:59:81:06:45:71:c6:9d:90:d0:c8:22:de:94:01:d8:fb:6e:
e8:2c:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 11:29:11 2024 by rpki-client on console-ams.rpki-client.org