Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/j5QiOhXtZeUg9ewsZPlCNjDMr7w.mft
File: j5QiOhXtZeUg9ewsZPlCNjDMr7w.mft (raw, json)
Hash identifier: klHNEiaEGiMHssMs+Xg8Pbqb8Ob+yPIv4As1JbL1tTo=
Subject key identifier: A8:5E:BF:37:51:04:4D:37:2C:3D:4E:47:DF:66:A6:A2:6A:E9:82:1E
Authority key identifier: 8F:94:22:3A:15:ED:65:E5:20:F5:EC:2C:64:F9:42:36:30:CC:AF:BC
Certificate issuer: /CN=8f94223a15ed65e520f5ec2c64f9423630ccafbc
Certificate serial: 018C8B649FF660EFAB3D7273394A67DA4F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5QiOhXtZeUg9ewsZPlCNjDMr7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/j5QiOhXtZeUg9ewsZPlCNjDMr7w.mft
Manifest number: 0145
Signing time: Thu 21 Dec 2023 08:01:16 +0000
Manifest this update: Thu 21 Dec 2023 08:01:16 +0000
Manifest next update: Fri 22 Dec 2023 08:01:16 +0000
Files and hashes: 1: 5okpLQzNkzodaUtXj1urzw6e6TY.roa (hash: op4axQt0kikXYwU0VD9jdjtz8aToO9yLLl5tyGj6lvA=)
2: j5QiOhXtZeUg9ewsZPlCNjDMr7w.crl (hash: 2dEnlIOcQ0ep825LcHjqz5Dg8T1jC1QHdvZOkTSlmvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:64:9f:f6:60:ef:ab:3d:72:73:39:4a:67:da:4f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f94223a15ed65e520f5ec2c64f9423630ccafbc
Validity
Not Before: Dec 21 08:01:16 2023 GMT
Not After : Dec 22 08:01:16 2023 GMT
Subject: CN=a85ebf3751044d372c3d4e47df66a6a26ae9821e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:ac:0e:b1:3d:a5:b4:dc:5b:4e:8d:57:2f:
b2:5e:22:a3:ae:82:d1:32:40:c2:34:9b:c2:77:2f:
ca:53:49:0b:63:c9:21:8a:20:54:83:b9:3d:5a:bb:
e7:5e:02:f0:f3:a5:30:76:49:92:93:37:5a:7a:a0:
db:b9:85:b2:20:b3:0d:3c:46:f4:2d:78:1e:c0:89:
10:34:0b:81:29:26:4a:b8:a9:2b:6d:0b:a0:af:7b:
a8:f9:1b:88:84:3a:c9:12:2f:91:e4:55:6e:75:2a:
f5:09:b3:f2:c0:8d:53:87:77:9e:28:7f:ba:99:ea:
26:dd:d6:c3:0f:c8:19:60:97:6a:21:ae:c4:e1:9e:
cf:1e:cc:b6:b4:a3:8b:92:aa:f6:52:00:2c:fd:9e:
32:90:3c:87:e1:17:54:b6:a1:c5:a0:9a:a8:1f:6a:
69:2e:08:9e:b9:25:8b:21:c9:46:4e:94:fc:8a:84:
97:60:3e:b7:3a:d7:e2:34:8d:a3:9e:77:35:c8:a9:
dd:c0:ed:3b:cf:1b:31:58:3f:f2:fc:22:bc:3b:63:
2a:b9:dd:94:8a:c5:6c:be:e6:7b:14:f7:0e:ed:d0:
0a:8b:16:ec:4a:a1:26:09:10:09:59:5b:3e:51:52:
3e:36:e0:3a:80:d8:e9:f1:78:da:c4:b3:09:c6:90:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:BF:37:51:04:4D:37:2C:3D:4E:47:DF:66:A6:A2:6A:E9:82:1E
X509v3 Authority Key Identifier:
keyid:8F:94:22:3A:15:ED:65:E5:20:F5:EC:2C:64:F9:42:36:30:CC:AF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5QiOhXtZeUg9ewsZPlCNjDMr7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/j5QiOhXtZeUg9ewsZPlCNjDMr7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/526871-a026-4ad0-87e2-02c0c1d9f88a/1/j5QiOhXtZeUg9ewsZPlCNjDMr7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:85:b3:0d:bc:9f:36:a7:2a:1c:87:f2:36:d3:47:7e:9c:9e:
3e:d7:13:36:2a:5e:45:de:d2:5f:43:e3:77:58:13:3b:5f:82:
9a:9f:65:34:85:1e:d4:a8:33:5b:81:8a:e6:31:6c:32:5e:42:
18:34:1b:94:f6:f0:45:eb:62:fa:b2:fe:93:df:e5:9b:e4:d8:
fe:8b:f9:8b:99:a9:1e:c1:bc:ec:a5:42:23:f7:9a:06:30:f9:
2c:de:ba:78:82:b3:34:44:b8:4f:37:ff:d8:27:e0:4d:48:6f:
4e:41:5d:69:a8:f4:bf:d5:0e:fc:2d:72:ea:db:bf:cf:ff:d5:
61:57:98:02:aa:fa:99:e3:8f:1f:f3:d6:35:3f:ad:e2:a6:39:
3f:62:f8:b7:f5:2a:48:11:82:67:44:68:3e:88:27:dd:97:6c:
a3:b5:89:4a:fe:13:bb:ae:fe:b3:82:39:d1:26:3a:60:a9:9e:
92:0c:0c:01:7b:8b:a0:84:49:2c:af:7b:06:7e:0a:32:6c:e6:
21:d4:7f:55:4b:e0:c8:72:67:05:1d:82:9a:6c:4f:7f:93:18:
20:de:fd:82:fc:a4:f8:b8:85:71:74:16:3f:a7:1e:b7:f4:d6:
ac:0c:88:ee:60:30:94:b4:03:53:06:d9:9a:8d:6c:da:ed:18:
74:2e:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:51 2024 by rpki-client on console-ams.rpki-client.org