Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8750f2-62b8-4058-a9f1-87e45c15e05c/1/5ijqRS_LcqBMtpb7TKJelcJuScY.mft
File: 5ijqRS_LcqBMtpb7TKJelcJuScY.mft (raw, json)
Hash identifier: 9hIGYH0CFgtsGAXT5qrr5mqQa0Xll2PTnpd5k3SkQ6k=
Subject key identifier: B0:16:CE:EF:1B:9B:82:BD:AF:70:A7:B1:C0:AD:4C:68:48:DC:3D:E1
Authority key identifier: E6:28:EA:45:2F:CB:72:A0:4C:B6:96:FB:4C:A2:5E:95:C2:6E:49:C6
Certificate issuer: /CN=e628ea452fcb72a04cb696fb4ca25e95c26e49c6
Certificate serial: 018D6265A13CDD2C6E2EDD7ECD9F2759F5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ijqRS_LcqBMtpb7TKJelcJuScY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8750f2-62b8-4058-a9f1-87e45c15e05c/1/5ijqRS_LcqBMtpb7TKJelcJuScY.mft
Manifest number: 084E
Signing time: Thu 01 Feb 2024 02:00:43 +0000
Manifest this update: Thu 01 Feb 2024 02:00:43 +0000
Manifest next update: Fri 02 Feb 2024 02:00:43 +0000
Files and hashes: 1: 5ijqRS_LcqBMtpb7TKJelcJuScY.crl (hash: DBQhl1TE9Tg0gNvDyx+oIN2rrB7lb3nUdxUSD11vdI8=)
2: ONA6Xjnx2tAAu9Reov_MzL4udyw.roa (hash: bcISCXGodcJTcmop73kvwCuATTfc4qktte685yGuReA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:65:a1:3c:dd:2c:6e:2e:dd:7e:cd:9f:27:59:f5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e628ea452fcb72a04cb696fb4ca25e95c26e49c6
Validity
Not Before: Feb 1 02:00:43 2024 GMT
Not After : Feb 2 02:00:43 2024 GMT
Subject: CN=b016ceef1b9b82bdaf70a7b1c0ad4c6848dc3de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:26:f6:7c:0d:68:8f:93:d9:23:89:bd:cb:
b7:4a:91:c5:e5:ca:2d:c6:ab:ea:7b:f3:d0:4b:f9:
57:8e:34:65:d2:14:19:f7:bc:f2:58:d6:9a:8e:97:
c8:81:88:05:fa:31:1e:29:29:95:83:3e:45:46:3f:
08:c4:fd:eb:62:34:ba:ff:43:ae:d5:73:ef:09:f7:
2f:4d:6b:83:50:a5:e3:28:80:94:ca:10:03:7f:cd:
8d:03:d6:5e:74:c9:bc:50:70:04:4c:6b:06:bb:9b:
a1:20:76:0a:c5:e1:ba:b9:8a:7e:ef:d1:0e:ba:d8:
ca:4f:16:f7:9a:0b:c6:6d:d4:ac:91:7d:0a:e0:01:
17:10:0e:00:c7:d8:95:b0:d1:aa:de:08:f1:c7:eb:
7c:42:b3:5b:c7:cf:13:22:2b:59:67:15:66:a4:11:
2e:d2:70:ae:ad:8e:b8:9a:3e:2b:3f:a6:d6:d3:e8:
b3:57:19:63:dd:ff:8d:ac:2a:78:f9:75:c4:3a:09:
8f:4d:d2:97:3c:18:61:b6:a3:89:0b:19:55:c7:b6:
35:8a:a8:6a:f0:75:b1:63:b4:15:00:1c:50:89:fe:
90:96:de:ec:c8:9d:70:d1:52:ee:72:19:a9:48:0b:
35:dd:34:24:68:43:3a:f0:82:7b:7d:9b:c0:b8:a7:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:CE:EF:1B:9B:82:BD:AF:70:A7:B1:C0:AD:4C:68:48:DC:3D:E1
X509v3 Authority Key Identifier:
keyid:E6:28:EA:45:2F:CB:72:A0:4C:B6:96:FB:4C:A2:5E:95:C2:6E:49:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ijqRS_LcqBMtpb7TKJelcJuScY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8750f2-62b8-4058-a9f1-87e45c15e05c/1/5ijqRS_LcqBMtpb7TKJelcJuScY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8750f2-62b8-4058-a9f1-87e45c15e05c/1/5ijqRS_LcqBMtpb7TKJelcJuScY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bb:19:96:3f:98:29:ef:23:52:9b:ac:33:14:40:20:9f:bb:
f5:2e:1c:f6:5f:15:00:27:f1:28:b1:ae:40:24:98:c9:19:af:
31:11:3b:83:24:54:b6:bb:66:e6:99:3b:a7:b8:af:a3:5d:b1:
2c:e3:cf:52:f8:25:f6:49:2a:ea:de:e3:71:c2:70:bc:59:a3:
57:5b:0b:b3:7b:44:9a:ec:d7:29:90:82:85:77:dc:88:a3:af:
98:11:0d:1c:fd:f5:07:3e:e7:c7:07:c7:07:22:69:96:43:07:
30:0d:81:f9:c0:c7:a2:67:64:6b:3b:c6:3c:f9:4e:a1:32:1a:
32:2c:cd:4c:f7:95:a2:7d:d0:e6:c9:25:7a:15:a6:30:4e:76:
83:04:0b:54:97:11:9d:a7:ff:ef:32:3a:93:4c:46:09:4d:05:
7c:94:85:ac:76:34:50:bc:f5:36:bc:95:66:a5:e6:39:a8:e6:
31:1e:1f:cc:1c:b6:d8:07:87:a9:e9:b6:4e:2f:29:2a:e1:14:
a7:55:da:13:5d:2f:49:59:84:21:0c:c3:19:56:98:20:17:fa:
80:28:f6:cb:b3:f6:49:08:81:b9:44:a9:fd:16:39:cf:d1:10:
49:ef:f1:05:f0:cf:3c:3b:df:75:57:de:b3:b0:d3:67:d0:c5:
70:e3:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 13:28:26 2024 by rpki-client on console-ams.rpki-client.org