Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/NgIU2wk9XieZWrRjMS_kB26wz1A.mft
File: NgIU2wk9XieZWrRjMS_kB26wz1A.mft (raw, json)
Hash identifier: +iiljej/6okWmgtFpLttdXgd8Buz19ZNaHkFRbadxuk=
Subject key identifier: 60:04:F7:87:7F:53:FD:B0:59:D4:0F:3C:E1:09:AA:B4:8A:07:B6:82
Authority key identifier: 36:02:14:DB:09:3D:5E:27:99:5A:B4:63:31:2F:E4:07:6E:B0:CF:50
Certificate issuer: /CN=360214db093d5e27995ab463312fe4076eb0cf50
Certificate serial: 018DF4F433BF9E7CA4AD6FA46F64A8A292FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgIU2wk9XieZWrRjMS_kB26wz1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/NgIU2wk9XieZWrRjMS_kB26wz1A.mft
Manifest number: 0348
Signing time: Thu 29 Feb 2024 13:01:01 +0000
Manifest this update: Thu 29 Feb 2024 13:01:01 +0000
Manifest next update: Fri 01 Mar 2024 13:01:01 +0000
Files and hashes: 1: NgIU2wk9XieZWrRjMS_kB26wz1A.crl (hash: EAZusH+V9C9niLMLQKH47jWOPcyI6urcFaVQW4LouRo=)
2: s72ZMHOb11Vd6GxFJ_bNJvn-_V8.roa (hash: K0OSYFxwL8WZtye4THgKYDhUkSRwPkyontOqs/dgi7Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:f4:33:bf:9e:7c:a4:ad:6f:a4:6f:64:a8:a2:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360214db093d5e27995ab463312fe4076eb0cf50
Validity
Not Before: Feb 29 13:01:01 2024 GMT
Not After : Mar 1 13:01:01 2024 GMT
Subject: CN=6004f7877f53fdb059d40f3ce109aab48a07b682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:23:40:bb:32:a3:38:a1:63:db:6b:88:9e:
e5:e2:ee:dd:0f:13:98:a1:7c:79:ad:e5:9b:bc:48:
29:a8:58:88:7a:1b:3f:d1:3c:1a:74:70:dc:ec:e2:
ed:17:44:84:88:ed:27:26:3c:19:0f:34:c5:21:52:
3a:f3:aa:b9:91:61:1f:94:97:1c:7b:fa:b9:27:b1:
e6:c5:3e:1c:bf:a6:cf:c1:5c:8d:e2:a8:4c:07:a6:
3a:6d:ac:f1:a7:80:6b:2d:87:57:96:60:16:fd:dd:
ff:80:b9:fe:ab:76:91:5c:8c:85:86:13:8d:9b:b9:
5e:7a:d5:fe:d1:4c:d4:01:0b:2e:f2:77:38:fb:fd:
38:4c:b5:f8:e7:0c:aa:00:09:36:49:43:a8:dc:41:
2a:7c:c3:7f:c3:79:fd:fd:67:8d:06:02:83:c5:d8:
be:f0:c5:5d:f1:29:10:23:19:1e:43:10:a9:66:2f:
1e:5f:b2:42:13:0e:b1:f3:31:91:7d:b1:2f:bc:7f:
c6:4c:f6:9d:a2:bc:d9:d0:01:c4:92:b7:26:8d:52:
26:7f:45:7f:39:21:06:49:40:d5:5d:58:6c:61:e3:
ab:91:14:f8:5a:f3:c1:be:b5:a7:40:cc:2f:5a:24:
18:21:dc:8f:af:57:0d:51:eb:b4:24:be:fa:ec:1f:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:04:F7:87:7F:53:FD:B0:59:D4:0F:3C:E1:09:AA:B4:8A:07:B6:82
X509v3 Authority Key Identifier:
keyid:36:02:14:DB:09:3D:5E:27:99:5A:B4:63:31:2F:E4:07:6E:B0:CF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgIU2wk9XieZWrRjMS_kB26wz1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/NgIU2wk9XieZWrRjMS_kB26wz1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/NgIU2wk9XieZWrRjMS_kB26wz1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e8:0d:80:6c:79:68:83:8d:fa:3b:3f:0a:d6:07:0c:50:2f:
41:d1:44:ba:66:e2:92:35:ce:d4:10:7f:c0:44:9d:be:85:d1:
ec:11:cf:e3:41:6b:43:81:7e:a5:ea:53:12:ce:d1:af:c9:ba:
6d:7d:6c:4a:89:18:f1:82:34:f7:64:cf:5b:f4:0e:b2:6c:b0:
21:d1:f2:b7:52:58:b5:3e:ca:fb:40:fc:a8:18:f5:81:e3:9d:
53:8b:7c:f7:8f:a4:e9:e1:d0:6e:8c:67:cf:fc:3d:bf:cf:ff:
dd:dc:cf:d0:c9:7e:3d:6b:fa:37:70:72:28:ea:1b:8c:04:9b:
60:b3:d1:06:e0:37:da:af:2b:b2:c9:85:97:38:7d:f9:11:16:
ed:77:64:81:47:d9:c2:d0:1a:bc:c4:9b:0f:f1:27:c4:6d:88:
2a:df:30:e3:f8:9a:78:36:02:fb:d7:c1:00:fa:d3:2d:c3:79:
4c:79:68:0c:50:84:b7:12:0e:ee:6d:3b:89:5b:cd:24:c3:1c:
05:10:7c:32:69:c3:68:48:ff:49:d8:76:e1:ed:36:e1:73:bc:
a1:04:18:39:0a:7c:97:06:15:29:40:aa:2d:b1:83:a8:b0:5c:
b2:10:ad:ec:53:a5:3f:85:fe:78:db:77:e9:cb:a0:2b:a2:87:
39:2c:e2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:07 2024 by rpki-client on console-ams.rpki-client.org