Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1102c7-cb89-4d2a-840c-5c4a039e812f/1/NPg406nehUyYr4Mgw96wBB4jno0.mft
File: NPg406nehUyYr4Mgw96wBB4jno0.mft (raw, json)
Hash identifier: Er/yXiAbpmPmytZtwZMSekZuCue3gEjzZpTu78xpd/8=
Subject key identifier: 2B:6E:16:23:C2:85:F1:64:C8:F3:7F:1A:1B:0A:F4:24:EE:01:0F:69
Authority key identifier: 34:F8:38:D3:A9:DE:85:4C:98:AF:83:20:C3:DE:B0:04:1E:23:9E:8D
Certificate issuer: /CN=34f838d3a9de854c98af8320c3deb0041e239e8d
Certificate serial: 018AFE6CD8AE5D335DCBAD6C28316DF8A662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPg406nehUyYr4Mgw96wBB4jno0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1102c7-cb89-4d2a-840c-5c4a039e812f/1/NPg406nehUyYr4Mgw96wBB4jno0.mft
Manifest number: 0860
Signing time: Thu 05 Oct 2023 06:01:00 +0000
Manifest this update: Thu 05 Oct 2023 06:01:00 +0000
Manifest next update: Fri 06 Oct 2023 06:01:00 +0000
Files and hashes: 1: 1-nkbEUuPAsT-pm0npX0tSNIRVDQ.roa (hash: gTgxoG9aDAq+gt8LS/NdPbqUnr99wgE12J22bl1LWsc=)
2: NPg406nehUyYr4Mgw96wBB4jno0.crl (hash: c0a4TnFMZ5038vmQutOqMZJ5gNqvrhKmndqmajEm49s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:6c:d8:ae:5d:33:5d:cb:ad:6c:28:31:6d:f8:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f838d3a9de854c98af8320c3deb0041e239e8d
Validity
Not Before: Oct 5 06:01:00 2023 GMT
Not After : Oct 6 06:01:00 2023 GMT
Subject: CN=2b6e1623c285f164c8f37f1a1b0af424ee010f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:4c:1c:52:a7:e4:16:e2:32:9e:ca:8a:98:
80:86:c7:d5:a9:79:90:0a:f7:f3:6c:c1:1b:85:98:
4b:4c:8c:4b:61:db:5f:0d:71:d4:b4:1b:66:e4:82:
48:04:12:9a:0c:7c:6d:ff:76:91:e6:f1:5b:82:1d:
f1:b6:43:61:dd:8b:73:01:3f:61:ec:62:c9:c0:e6:
09:de:f5:62:2c:03:ff:8e:10:b9:7e:2b:a1:67:98:
c0:9b:b1:41:1d:cd:13:b4:1d:fa:df:21:7e:b8:ff:
17:66:5d:20:df:33:e1:8f:1d:99:44:5c:a4:8d:43:
c7:65:1e:b2:0d:b6:bc:ba:2c:f1:6b:4a:27:b9:2a:
fa:85:4d:6a:8f:2a:04:2e:a3:d2:a9:9c:b0:08:b3:
e9:9d:3f:8d:13:59:2a:81:a8:73:1c:9a:a5:b1:e6:
25:90:9d:c0:3f:69:23:63:4d:79:ba:b8:a6:23:73:
eb:b1:7d:ce:ff:b8:3a:46:95:46:d0:30:fd:16:d5:
53:e1:53:99:ca:b6:5b:2b:66:95:dc:82:92:60:c5:
12:31:b8:33:79:c8:61:59:92:8a:98:31:34:70:41:
cc:aa:c8:07:da:a6:6e:2e:60:a7:fa:ad:74:93:16:
69:8b:ff:f9:e9:07:d8:db:14:61:b8:9f:86:60:c9:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:16:23:C2:85:F1:64:C8:F3:7F:1A:1B:0A:F4:24:EE:01:0F:69
X509v3 Authority Key Identifier:
keyid:34:F8:38:D3:A9:DE:85:4C:98:AF:83:20:C3:DE:B0:04:1E:23:9E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPg406nehUyYr4Mgw96wBB4jno0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1102c7-cb89-4d2a-840c-5c4a039e812f/1/NPg406nehUyYr4Mgw96wBB4jno0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1102c7-cb89-4d2a-840c-5c4a039e812f/1/NPg406nehUyYr4Mgw96wBB4jno0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3c:7b:04:f7:fa:3a:19:eb:73:3c:6e:a1:55:44:7b:b7:ac:
3c:8f:ef:8d:62:3c:87:d1:a8:d6:6f:c7:c2:31:9b:6d:50:b3:
8d:16:ad:3e:d3:51:e6:2e:a2:53:e3:40:62:16:34:48:d2:99:
d3:cc:28:15:82:6a:1d:f6:31:4c:77:0f:67:66:d7:a0:84:ab:
b3:de:b9:62:46:e5:88:89:fc:f6:d9:12:59:71:48:b7:71:fa:
3f:f3:dd:7a:65:44:d5:28:a2:87:be:96:ec:6c:c1:f9:f6:da:
ed:98:cf:d2:a9:0e:7d:42:b0:7a:e1:21:2a:93:cd:9d:bf:75:
0a:7c:12:cd:d0:5c:34:bf:de:86:c2:49:52:ee:dc:75:e0:0f:
01:6a:86:6b:03:ec:af:9d:0d:e9:a2:c2:bf:62:b8:54:07:04:
82:47:51:eb:ce:1e:bc:d6:96:6e:8d:2d:9c:fb:fe:89:63:d4:
47:28:f9:d6:c1:44:c9:91:50:85:7e:55:4d:5e:30:af:27:80:
dc:67:a4:c4:10:17:88:f1:5c:3f:f9:94:4d:90:2c:71:75:9e:
ea:ec:eb:21:63:ec:e6:c5:ce:29:0e:ac:25:f1:cc:9c:10:ed:
cc:d8:47:a3:aa:60:26:4a:c2:76:1d:04:93:2c:0e:3a:d0:97:
05:0d:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:11 2024 by rpki-client on console-fra.rpki-client.org