Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ed4d1-0705-43e5-a60a-be100907f106/1/HrNSjWHyzwK6qytA0MwzJVtABvQ.mft
File: HrNSjWHyzwK6qytA0MwzJVtABvQ.mft (raw, json)
Hash identifier: TB0OQvS0Co+Ks5pFkLXGkYbnNSxZkEssoGkzIez4LPU=
Subject key identifier: D6:7D:AC:FE:EC:4D:7D:79:2F:95:D1:0D:A3:79:2A:B5:73:41:A1:1F
Authority key identifier: 1E:B3:52:8D:61:F2:CF:02:BA:AB:2B:40:D0:CC:33:25:5B:40:06:F4
Certificate issuer: /CN=1eb3528d61f2cf02baab2b40d0cc33255b4006f4
Certificate serial: 018A21A4C9B011C25191EC38E93A8124FE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrNSjWHyzwK6qytA0MwzJVtABvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ed4d1-0705-43e5-a60a-be100907f106/1/HrNSjWHyzwK6qytA0MwzJVtABvQ.mft
Manifest number: 0402
Signing time: Wed 23 Aug 2023 09:06:02 +0000
Manifest this update: Wed 23 Aug 2023 09:06:02 +0000
Manifest next update: Thu 24 Aug 2023 09:06:02 +0000
Files and hashes: 1: HrNSjWHyzwK6qytA0MwzJVtABvQ.crl (hash: MGz8hzIHQ/Ac7zKiUl3pJBEDKmXtwGgOqLmL3DovODc=)
2: hdBY8LLPCMcLlFz90vBHJHoCocA.roa (hash: /kJAJQyb22o7qtK075tksjCjYi0TJ1uZDffkd0+X3Vk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:a4:c9:b0:11:c2:51:91:ec:38:e9:3a:81:24:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb3528d61f2cf02baab2b40d0cc33255b4006f4
Validity
Not Before: Aug 23 09:06:02 2023 GMT
Not After : Aug 24 09:06:02 2023 GMT
Subject: CN=d67dacfeec4d7d792f95d10da3792ab57341a11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:6b:e5:73:3e:b2:72:1b:89:73:27:5b:f1:
10:83:e2:49:67:02:d0:4a:e2:fd:15:cc:c5:f2:00:
f5:56:a5:ed:da:54:98:25:5f:26:db:92:60:4d:fa:
67:16:3f:10:06:96:d9:3a:a3:08:c3:6f:b4:85:1c:
6e:96:37:6a:11:33:94:c6:cc:c3:d8:7e:7e:5d:0f:
4d:1a:4d:0f:5d:4f:bd:d0:ba:4b:85:35:75:94:a6:
e9:fd:af:86:33:8b:92:b0:ed:c2:23:df:98:26:bf:
a8:4d:c2:31:e0:55:e7:b0:16:70:31:2c:11:6c:b8:
58:12:87:22:cc:b3:0e:a0:e4:f1:e8:e3:a5:4f:cc:
60:70:32:b6:0a:ba:2f:e4:4e:26:83:ba:bc:73:71:
2d:1a:5a:f2:29:66:c3:9b:fd:da:48:e3:a1:13:55:
2e:f0:6b:1b:76:88:01:96:72:d5:37:69:96:69:82:
89:12:67:c0:4d:fa:ef:45:e1:85:da:19:ff:ea:dc:
24:84:60:5f:a1:3e:18:75:4e:7d:89:ab:d3:64:78:
15:60:38:db:78:b7:82:65:31:4b:84:fe:19:c7:88:
a7:67:81:fd:b4:1f:4e:de:d9:54:b9:6a:37:c9:c8:
5a:5e:4b:7d:d3:f6:20:c9:3e:d2:61:2e:f1:5d:15:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:AC:FE:EC:4D:7D:79:2F:95:D1:0D:A3:79:2A:B5:73:41:A1:1F
X509v3 Authority Key Identifier:
keyid:1E:B3:52:8D:61:F2:CF:02:BA:AB:2B:40:D0:CC:33:25:5B:40:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrNSjWHyzwK6qytA0MwzJVtABvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ed4d1-0705-43e5-a60a-be100907f106/1/HrNSjWHyzwK6qytA0MwzJVtABvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ed4d1-0705-43e5-a60a-be100907f106/1/HrNSjWHyzwK6qytA0MwzJVtABvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ba:c0:93:60:a3:23:b1:30:6e:bc:22:4b:af:b0:d4:02:01:
cb:41:29:60:dc:f2:48:13:d5:a8:34:12:98:a2:14:9f:00:b7:
15:f5:2a:26:5d:79:eb:63:eb:e2:10:1d:64:f6:5f:7c:7b:c6:
1d:ea:2c:b1:dd:df:66:c8:24:89:88:a4:40:c5:bf:7d:5a:cc:
60:9a:78:66:67:3b:58:30:81:f3:d4:24:0d:ec:c4:eb:d2:da:
4f:13:bb:4d:2a:96:f0:04:be:b7:dc:1a:dc:7a:bc:66:90:06:
90:b4:ff:c2:37:dc:cb:28:80:50:4f:3c:89:cb:87:8b:de:68:
76:42:b8:c0:bc:79:83:6b:3b:61:57:85:0c:d2:45:e7:eb:48:
f7:ce:68:ea:30:58:88:4e:9c:52:d7:bb:f6:e0:24:13:ab:73:
98:fa:96:e0:a8:21:20:bb:57:e8:67:9a:d8:a2:6f:27:a5:f2:
07:a2:22:42:53:ed:dd:7a:f8:93:3f:a0:e4:bb:d7:18:74:c5:
4c:6c:10:34:83:b6:95:ea:8a:59:84:b7:d4:2f:4c:aa:79:c0:
f7:42:c5:cf:03:71:2e:fb:35:73:a9:84:ba:a5:58:3a:25:bd:
8e:ab:63:5c:8b:8c:36:18:bf:52:b7:62:7c:bf:c6:60:96:f7:
c1:bd:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:43 2024 by rpki-client on console-fra.rpki-client.org