Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.mft
File: NE9esO_FF9bKrrfHSoR_llwOFNk.mft (raw, json)
Hash identifier: gbv1MYWHaMRIZ/r/HKqmqIA1biJkVUhOXfHfpdPc3yA=
Subject key identifier: D5:D0:0F:89:AD:DA:5A:17:C5:C1:63:17:1B:7F:2B:42:07:60:98:44
Authority key identifier: 34:4F:5E:B0:EF:C5:17:D6:CA:AE:B7:C7:4A:84:7F:96:5C:0E:14:D9
Certificate issuer: /CN=344f5eb0efc517d6caaeb7c74a847f965c0e14d9
Certificate serial: 018A4A9BA5A24A4C3617786E2D6EBE451313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE9esO_FF9bKrrfHSoR_llwOFNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.mft
Manifest number: 0C0E
Signing time: Thu 31 Aug 2023 08:00:28 +0000
Manifest this update: Thu 31 Aug 2023 08:00:28 +0000
Manifest next update: Fri 01 Sep 2023 08:00:28 +0000
Files and hashes: 1: NE9esO_FF9bKrrfHSoR_llwOFNk.crl (hash: YRvct3tNoMKF4TuPqfopx9fB78nk8FympI/EFZhFzFo=)
2: blV0PoyS7a4eJtdf2-B7PmHKZhY.roa (hash: jjqp3/FqkhbOC36XFl9/+7/DFO7IMYNtVlBTqn9Svuk=)
3: j7-iblN5JOeJyLdHecq0S1ivdqw.roa (hash: CheuFxIqng2yjFQNcKCwttoUt/f2nW5FWlg7QfmAb5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:9b:a5:a2:4a:4c:36:17:78:6e:2d:6e:be:45:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344f5eb0efc517d6caaeb7c74a847f965c0e14d9
Validity
Not Before: Aug 31 08:00:28 2023 GMT
Not After : Sep 1 08:00:28 2023 GMT
Subject: CN=d5d00f89adda5a17c5c163171b7f2b4207609844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:3d:55:74:b7:42:94:24:05:5c:7b:86:fb:
fb:ec:71:6d:a7:f5:c4:72:63:c0:5c:c9:90:37:19:
b7:f5:08:38:53:7d:05:0c:bb:2f:6e:4d:4b:e6:b1:
b9:9f:f5:0b:f4:fd:2b:d4:9d:c1:92:e1:ee:ab:d2:
1b:67:72:ce:cf:44:2b:20:d5:cb:77:1c:1b:81:f8:
fa:cf:70:57:97:e9:17:15:01:8f:8c:5a:06:dc:71:
db:d4:0f:29:35:c7:4a:81:0d:81:83:8f:5e:a4:78:
db:9e:e0:0a:88:28:31:67:b9:b6:22:6b:3c:e6:9b:
85:45:26:5e:7d:d5:69:c2:ae:45:70:02:6b:5f:78:
6d:81:7b:51:4d:e0:fe:bb:62:71:56:37:a2:be:9b:
c0:8b:24:ab:da:a0:92:d0:3d:f7:91:c4:12:22:64:
ee:62:4b:0a:8f:0d:b3:7b:aa:81:53:d1:bb:6d:bf:
fb:1c:80:8c:9d:3f:c2:36:93:86:ec:8d:56:b5:bd:
81:c6:56:83:61:a7:5e:27:56:0a:b4:67:d7:3d:70:
f4:76:bb:e1:9a:03:04:ff:0b:5c:26:5a:d8:9d:7e:
9f:ed:9a:e3:c3:8f:62:79:4c:03:a5:db:86:65:4c:
cf:ab:33:23:3c:e3:9d:c7:dc:a9:e8:24:65:a9:3a:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D0:0F:89:AD:DA:5A:17:C5:C1:63:17:1B:7F:2B:42:07:60:98:44
X509v3 Authority Key Identifier:
keyid:34:4F:5E:B0:EF:C5:17:D6:CA:AE:B7:C7:4A:84:7F:96:5C:0E:14:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE9esO_FF9bKrrfHSoR_llwOFNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3f2e4-5177-48ae-955e-5d816a82c283/1/NE9esO_FF9bKrrfHSoR_llwOFNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:42:fa:56:5b:29:00:52:14:b2:62:23:a9:4b:e2:97:1f:81:
11:48:39:63:7c:6f:a5:2a:75:ef:a8:76:8c:e6:5e:9e:dc:88:
44:7e:2d:9d:42:3f:f6:36:21:e3:15:14:c0:91:33:fd:c0:e0:
20:4e:36:1e:b9:9b:a1:68:ae:7c:d3:36:16:3d:c7:0b:f4:3a:
dc:d4:e6:31:35:86:d7:66:c6:2b:23:60:90:f6:83:50:4d:16:
45:56:a7:78:e8:60:f7:fe:19:07:92:2c:e8:83:e0:db:f8:be:
05:a2:cb:06:3d:6e:4f:b0:dc:c4:60:98:55:bd:37:bd:0d:b0:
b8:cf:2e:ac:39:8d:c0:42:b5:1e:ed:93:f3:63:c1:82:29:1b:
1f:e8:1c:2d:69:45:ca:a7:46:68:88:0b:81:8e:70:ec:c3:64:
16:3a:db:ee:d8:1a:de:8a:04:84:d3:c9:07:96:e6:51:01:9f:
b5:b8:06:89:4c:eb:fe:89:e5:17:d9:5a:9f:58:61:8e:83:30:
fe:a4:d4:4b:57:32:3a:e3:de:fb:11:57:f1:75:6b:da:be:d9:
2f:4f:da:52:30:07:a7:0c:04:0a:4f:13:8a:64:cb:b5:53:27:
6c:00:7b:5c:c0:64:bb:68:aa:e5:66:51:3a:64:89:8c:37:3a:
10:19:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org