Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/1eefb4-ede0-4637-b7d9-d26472e30a37/1/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.mft
File: DNA0JFFKe9qMG8zZ9TO4ohlMn-E.mft (raw, json)
Hash identifier: VifmP8QtBded95bIl5e9pIx2z9o8tptTtaU8giCBmuM=
Subject key identifier: 07:2B:8E:35:02:C6:09:A7:82:4C:3C:46:9E:A0:0D:D9:4A:29:4F:3C
Authority key identifier: 0C:D0:34:24:51:4A:7B:DA:8C:1B:CC:D9:F5:33:B8:A2:19:4C:9F:E1
Certificate issuer: /CN=0cd03424514a7bda8c1bccd9f533b8a2194c9fe1
Certificate serial: 018CA47FEB3BA800434E00F94AD494362E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/1eefb4-ede0-4637-b7d9-d26472e30a37/1/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.mft
Manifest number: 013D
Signing time: Tue 26 Dec 2023 05:01:35 +0000
Manifest this update: Tue 26 Dec 2023 05:01:35 +0000
Manifest next update: Wed 27 Dec 2023 05:01:35 +0000
Files and hashes: 1: DNA0JFFKe9qMG8zZ9TO4ohlMn-E.crl (hash: d5HboKXu6Qyk1ZTRFxGuOWZUB6wthiU0fFb7HgpMwLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:7f:eb:3b:a8:00:43:4e:00:f9:4a:d4:94:36:2e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd03424514a7bda8c1bccd9f533b8a2194c9fe1
Validity
Not Before: Dec 26 05:01:35 2023 GMT
Not After : Dec 27 05:01:35 2023 GMT
Subject: CN=072b8e3502c609a7824c3c469ea00dd94a294f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:42:72:74:74:d3:f0:77:68:ab:a8:49:eb:
6b:de:49:c4:76:08:16:60:47:33:09:fd:04:9d:f5:
65:27:cd:f5:8f:6d:4d:a9:fa:74:d1:fe:0a:16:46:
d1:a8:f9:2b:13:0b:2e:f1:68:15:ed:4a:fd:e5:fc:
e8:2a:ac:df:66:f6:06:41:52:ce:9d:bd:3f:50:09:
bd:ba:52:35:9f:1f:68:2f:4c:63:be:40:64:af:58:
f5:81:e5:ff:d3:98:3f:cc:de:bd:df:f2:f7:45:4e:
45:db:57:1e:35:32:ef:9e:6e:ad:89:dd:f3:94:9e:
72:34:23:18:b4:15:06:df:2c:99:d2:0a:49:8d:68:
b9:a7:d3:c8:1c:e8:9b:d0:50:9c:33:5c:30:a9:52:
fb:7c:ff:21:82:dc:3b:d8:d4:af:a7:03:b9:b8:d1:
99:69:59:5d:41:e8:01:cb:fb:e4:a9:cb:f2:48:96:
92:d8:3d:61:29:91:53:1b:c4:f1:e3:98:e2:5c:31:
9e:8d:1e:e2:43:44:2d:23:c4:04:37:e6:18:ef:03:
d3:cc:ae:c7:67:de:f1:8a:01:09:a7:a5:7d:f2:f2:
95:42:73:ea:d8:ce:4d:92:7c:18:51:52:44:0d:d8:
8b:7d:01:70:06:92:f6:cb:66:ff:4d:78:a2:bb:80:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2B:8E:35:02:C6:09:A7:82:4C:3C:46:9E:A0:0D:D9:4A:29:4F:3C
X509v3 Authority Key Identifier:
keyid:0C:D0:34:24:51:4A:7B:DA:8C:1B:CC:D9:F5:33:B8:A2:19:4C:9F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1eefb4-ede0-4637-b7d9-d26472e30a37/1/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/1eefb4-ede0-4637-b7d9-d26472e30a37/1/DNA0JFFKe9qMG8zZ9TO4ohlMn-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:68:f0:0f:af:34:21:ab:a8:86:07:6c:47:f6:b6:69:2c:75:
51:eb:89:3e:f2:7c:02:e8:72:f8:c0:b2:d9:99:52:9d:4b:3f:
b4:5c:6d:b9:f1:67:d8:0d:8f:93:eb:d8:6a:48:2a:f7:6d:84:
2b:55:90:f2:fa:99:6f:45:b9:e9:74:1f:bc:31:ce:85:50:aa:
ae:68:48:cb:fa:d5:84:07:62:32:f4:7e:56:da:c3:f6:e3:eb:
51:dc:70:12:ae:dc:73:d6:e8:25:6d:37:54:13:88:87:5c:9b:
70:b6:b4:1d:22:3f:46:21:b3:bb:b6:4b:11:af:9c:bc:38:26:
c3:4a:17:d2:43:4d:65:2a:c8:ac:ef:c9:63:5f:72:0c:63:74:
12:81:13:8b:03:c9:28:0e:0e:59:a9:92:3a:21:75:b4:69:98:
74:e1:6b:52:fc:77:45:82:9c:f0:2e:59:91:04:d4:b7:88:20:
2b:97:53:c0:3f:95:50:0c:a6:c2:58:cb:32:c7:a7:fc:b7:20:
e6:16:3d:6f:03:bf:b9:a8:a8:b7:b2:14:8d:8b:fa:5e:79:c4:
90:92:a3:2b:74:ae:3c:dc:71:98:c3:1c:99:68:49:73:3a:c6:
a4:55:21:da:52:b1:12:5e:8d:97:b6:82:45:3f:80:7e:71:ba:
7b:31:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org