Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.mft
File: tNGQGn66bldbx5-TbpSt57e0i1M.mft (raw, json)
Hash identifier: Ij6C3jIqWbNsafcgo76O+h0aZ/U743MCNiqsfPV2bmE=
Subject key identifier: FF:7B:D1:55:D7:9C:FD:C9:E3:00:E0:E7:5D:F3:E6:62:3B:B3:3B:4B
Authority key identifier: B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
Certificate issuer: /CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Certificate serial: 018CC8E03156AB545AB0F4E59FB1A5D215CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.mft
Manifest number: 0EA0
Signing time: Tue 02 Jan 2024 06:33:04 +0000
Manifest this update: Tue 02 Jan 2024 06:33:04 +0000
Manifest next update: Wed 03 Jan 2024 06:33:04 +0000
Files and hashes: 1: 9T81oRsD5Hb0AKIQYfXJV53z-5I.roa (hash: xMyXRerX/mBYd0p1YXtTCbFj0i5MQ2h3mamc+NZoXK0=)
2: tNGQGn66bldbx5-TbpSt57e0i1M.crl (hash: nKoDswMzxlSJ4P862AJFOCFwUUVXoQbvkr6Zb5u0QMU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:e0:31:56:ab:54:5a:b0:f4:e5:9f:b1:a5:d2:15:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Validity
Not Before: Jan 2 06:33:04 2024 GMT
Not After : Jan 3 06:33:04 2024 GMT
Subject: CN=ff7bd155d79cfdc9e300e0e75df3e6623bb33b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:f9:16:28:c7:d3:3f:2b:07:ad:1d:2b:a4:
55:7d:1b:b7:a2:56:4d:eb:67:53:ce:4e:64:c9:0f:
18:8b:9c:b1:a9:2c:3a:8b:99:06:2e:d2:64:89:60:
30:8b:7d:1b:f9:0e:d5:70:3d:9e:3d:b3:41:20:45:
d3:0f:42:86:db:8b:6d:a8:5e:94:97:cf:59:b1:a6:
8b:41:1d:b8:1e:51:bb:9d:27:83:11:29:98:34:c4:
3d:bf:0a:57:f7:94:ca:3a:18:84:d6:e5:f6:7d:86:
81:ff:5b:a8:e5:9a:68:ab:52:f5:ce:a6:03:75:59:
8b:6e:e8:2b:4f:d5:4f:9f:5d:b3:1f:d1:4e:83:3c:
2e:6e:2c:11:cd:62:8a:e3:c5:b1:67:7d:df:7c:ad:
64:03:fc:c6:50:57:df:3a:a6:22:be:62:b1:01:60:
45:ec:9e:b3:65:13:49:38:e9:b7:43:b9:2d:41:7f:
c2:8e:30:07:e4:52:8f:5a:07:c6:0c:e0:3d:c2:60:
7e:c7:54:9a:20:e7:f6:24:b1:ea:8f:cf:41:d8:cc:
88:aa:84:df:04:01:37:78:ed:52:49:5e:29:75:b0:
55:29:4b:2a:56:6c:f3:0a:d6:e6:8d:4b:68:f9:21:
f7:78:09:9a:3f:1c:2f:87:9c:19:8a:be:53:6b:3e:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:D1:55:D7:9C:FD:C9:E3:00:E0:E7:5D:F3:E6:62:3B:B3:3B:4B
X509v3 Authority Key Identifier:
keyid:B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:13:20:29:bb:8d:52:c0:88:df:dc:99:44:c0:af:60:63:b7:
86:50:80:d7:64:04:2a:e1:0d:86:5c:fa:d3:26:80:a4:5d:8d:
40:c6:cb:8d:27:30:f0:19:c8:16:e8:38:78:bd:6f:2e:53:e6:
59:2b:87:b3:d3:7a:14:54:da:86:0d:f3:9f:c0:52:0c:a4:0a:
9c:9b:e8:cb:a3:67:8d:ee:0d:86:ce:28:4e:9b:97:0b:8f:54:
23:2b:90:33:08:2d:ae:2d:01:ab:a1:1f:ed:ef:2c:f5:74:b0:
fb:2f:ab:6d:84:94:f4:b1:70:3d:11:67:ce:ab:1f:4b:f2:ca:
a4:79:d5:d9:b2:26:51:f0:fa:f2:0a:f9:2b:90:f4:4e:bc:6f:
cb:56:1a:a8:f5:e7:e7:e7:0a:6c:c8:91:26:cd:4e:14:3d:0d:
50:ac:17:7d:93:9b:15:99:b7:a5:13:46:75:d9:6f:18:5b:e1:
3d:2e:f6:14:57:08:aa:3d:c9:d0:03:10:9c:57:3e:c7:0f:24:
54:72:ba:97:ec:70:4a:21:4f:a2:7c:bf:ca:3a:95:39:9a:31:
af:7f:2e:55:1b:3f:71:a2:7c:a0:5c:e9:96:69:93:d3:cb:54:
57:05:ae:10:99:65:b9:83:e5:a2:f3:6a:64:42:d0:4b:c3:72:
a0:ec:ad:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:26 2024 by rpki-client on console-fra.rpki-client.org