Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/df6aae-5150-49a6-b83d-717f4730064c/1/O_NckuvxOay1nDFYYEE1Wl_DiRE.mft
File: O_NckuvxOay1nDFYYEE1Wl_DiRE.mft (raw, json)
Hash identifier: FMpEMWZN+bQtnjfu6eVmd8WdSlk7cNXImbR1VUAug9w=
Subject key identifier: B1:3F:03:C1:29:80:F8:62:60:3A:28:40:7D:AD:5B:DD:D9:78:64:6A
Authority key identifier: 3B:F3:5C:92:EB:F1:39:AC:B5:9C:31:58:60:41:35:5A:5F:C3:89:11
Certificate issuer: /CN=3bf35c92ebf139acb59c31586041355a5fc38911
Certificate serial: 01877F82C118E3748C5B8C269C7EA880867D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_NckuvxOay1nDFYYEE1Wl_DiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/df6aae-5150-49a6-b83d-717f4730064c/1/O_NckuvxOay1nDFYYEE1Wl_DiRE.mft
Manifest number: 0A54
Signing time: Fri 14 Apr 2023 11:24:47 +0000
Manifest this update: Fri 14 Apr 2023 11:24:47 +0000
Manifest next update: Sat 15 Apr 2023 11:24:47 +0000
Files and hashes: 1: 99fVwDeNVpMBzYcJYCkR_gvCjOQ.roa (hash: V8gLlU8CgxcUSFRUN+fn9rX8rlqQogS+nKpxUD/BNIw=)
2: O_NckuvxOay1nDFYYEE1Wl_DiRE.crl (hash: 0nDtxEcXrSrAYZKlWZRyMt4WVKaYChKPyUXgdeFn8wU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:82:c1:18:e3:74:8c:5b:8c:26:9c:7e:a8:80:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf35c92ebf139acb59c31586041355a5fc38911
Validity
Not Before: Apr 14 11:24:47 2023 GMT
Not After : Apr 15 11:24:47 2023 GMT
Subject: CN=b13f03c12980f862603a28407dad5bddd978646a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:d2:6d:d2:32:91:7c:c0:ba:47:4a:ce:15:
83:2d:81:1e:e9:94:b4:41:db:34:a7:64:98:d5:39:
33:ea:70:45:4c:ad:28:82:d1:3e:3f:8a:88:ff:20:
b9:4a:c5:d5:6f:48:69:9f:4e:a0:98:e7:aa:e8:cb:
cf:71:4a:ec:b5:4a:f0:a0:ea:e8:59:a5:06:1a:7f:
ee:2b:a2:4e:24:5a:a7:9c:5c:2b:93:60:49:7a:e7:
f7:7a:b2:97:4a:cb:68:2a:9a:49:a3:ab:e2:bd:e8:
b3:53:16:b0:5b:1d:e1:78:4c:cd:1b:5f:62:a3:a9:
c1:68:bc:65:f9:90:b3:30:c9:47:5f:77:25:f0:0c:
df:5e:5b:43:ce:6b:73:50:ca:37:49:80:b6:59:36:
1a:dd:7d:f4:b7:55:e7:11:4b:92:ac:c5:ee:6f:5b:
f2:d0:36:7b:81:ed:04:3a:91:1c:42:c7:96:01:6f:
43:04:ed:42:ea:ad:09:9e:df:1a:e7:ce:49:e6:5e:
bb:35:95:3e:38:88:c9:72:5a:ff:d5:c7:ff:dd:2b:
60:25:c0:ef:90:23:e2:aa:1d:6c:70:fe:c7:47:36:
84:6a:7d:36:29:02:0c:16:31:35:60:b4:eb:02:70:
ee:b6:ce:62:40:b2:56:8e:b1:eb:fb:da:9d:0c:2a:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3F:03:C1:29:80:F8:62:60:3A:28:40:7D:AD:5B:DD:D9:78:64:6A
X509v3 Authority Key Identifier:
keyid:3B:F3:5C:92:EB:F1:39:AC:B5:9C:31:58:60:41:35:5A:5F:C3:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_NckuvxOay1nDFYYEE1Wl_DiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/df6aae-5150-49a6-b83d-717f4730064c/1/O_NckuvxOay1nDFYYEE1Wl_DiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/df6aae-5150-49a6-b83d-717f4730064c/1/O_NckuvxOay1nDFYYEE1Wl_DiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e8:49:d4:ff:67:1e:e6:44:6a:88:b9:71:6f:78:ed:6b:80:
66:df:48:33:c8:84:a2:35:c3:c0:db:44:fd:ee:3e:a0:54:82:
be:90:00:d5:b2:5a:2b:bb:91:b3:c0:1a:97:ec:e5:36:03:7b:
59:f1:79:7b:64:24:77:2e:1d:44:27:01:b2:be:39:7c:26:be:
0c:2a:fa:88:bb:81:68:9b:e8:29:4c:79:26:7f:de:01:79:8e:
99:2e:69:86:7f:9e:e9:d2:7b:b5:9a:6e:31:4d:a3:f8:4c:60:
43:b7:60:f1:99:9d:af:ff:0c:f3:b3:7d:7e:5f:be:0f:46:96:
9e:bd:3e:ac:aa:67:41:2a:a5:81:bb:01:36:ed:25:26:48:2c:
a6:fd:be:6c:ff:95:1a:bd:e4:5f:32:67:d2:ae:87:2a:52:8f:
e8:63:d5:7a:a6:fa:32:7d:49:be:ec:d4:75:77:1e:22:57:9f:
9d:35:0e:14:4b:5b:53:82:a6:f2:a5:28:2c:73:93:06:7e:64:
02:fb:cf:ff:3e:2d:cb:53:b7:92:ad:dc:43:e2:7b:57:bc:36:
47:64:bf:72:a2:c7:8b:ab:ec:7c:29:8f:9a:ba:55:99:a0:70:
0e:a2:df:3b:b9:88:56:ed:ed:df:f7:82:3d:b3:8d:e8:6f:fe:
19:26:90:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:16 2024 by rpki-client on console-ams.rpki-client.org