Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d1b392-a4bd-4fb7-b52d-93deeaba32b8/1/N5PsSDKFYw8yhASp-4X0yBuapFg.mft
File: N5PsSDKFYw8yhASp-4X0yBuapFg.mft (raw, json)
Hash identifier: gRrE5W0Ds1/62P0iNhxXLLKxiSuN5M3yEDri75q9hc0=
Subject key identifier: 64:A2:AF:A8:CA:9E:4C:DC:2F:3E:B4:11:12:17:DE:56:84:2D:26:16
Authority key identifier: 37:93:EC:48:32:85:63:0F:32:84:04:A9:FB:85:F4:C8:1B:9A:A4:58
Certificate issuer: /CN=3793ec483285630f328404a9fb85f4c81b9aa458
Certificate serial: 018DC51A48811939787E02B20AFC2B91C901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5PsSDKFYw8yhASp-4X0yBuapFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/d1b392-a4bd-4fb7-b52d-93deeaba32b8/1/N5PsSDKFYw8yhASp-4X0yBuapFg.mft
Manifest number: 07
Signing time: Tue 20 Feb 2024 06:00:50 +0000
Manifest this update: Tue 20 Feb 2024 06:00:50 +0000
Manifest next update: Wed 21 Feb 2024 06:00:50 +0000
Files and hashes: 1: N5PsSDKFYw8yhASp-4X0yBuapFg.crl (hash: 4RVTGoMGtLBSYh6LNwb8+C3eBB41T8TedQc+VLCF/vQ=)
2: aTDJ49cH7opkvproZqNljJYdsaA.roa (hash: tuXSNVR2Xq9eHjrpbcuwN6E1P25YXpsHReo6bdToRG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:1a:48:81:19:39:78:7e:02:b2:0a:fc:2b:91:c9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3793ec483285630f328404a9fb85f4c81b9aa458
Validity
Not Before: Feb 20 06:00:50 2024 GMT
Not After : Feb 21 06:00:50 2024 GMT
Subject: CN=64a2afa8ca9e4cdc2f3eb4111217de56842d2616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:6a:d6:3e:31:89:73:b0:bc:88:19:4c:a3:
6f:29:f3:89:e2:46:32:17:a2:ea:ec:a8:b8:92:f4:
31:b0:90:0d:f9:20:ee:ec:6f:f6:3a:fd:04:6d:48:
69:18:aa:fa:05:ec:62:d9:3c:33:d5:f6:50:02:45:
bb:ae:f3:84:0a:1c:2f:45:2b:7d:00:46:2d:dd:5b:
74:0f:be:5a:69:83:3b:bd:13:2f:d7:26:cc:33:c2:
34:77:ac:7e:72:76:85:21:4f:dd:6d:47:f1:3d:6e:
58:ed:cc:c0:73:81:6f:f2:c3:c9:08:3e:db:44:94:
b7:98:78:57:c4:3c:38:86:51:0d:90:77:c4:a2:03:
ed:db:7b:1e:10:e4:99:36:98:3e:fb:3f:9d:e1:a5:
b9:f4:aa:30:b2:73:15:6d:73:1f:d4:f6:b1:0a:a9:
cf:17:14:61:89:73:ba:23:f0:9f:03:10:a5:79:f1:
f0:5d:31:9f:67:9e:56:a2:27:24:e6:95:15:36:9c:
6f:6c:c7:ad:b7:ed:90:45:3f:c0:5f:ff:f7:73:bf:
db:76:90:ff:6a:ff:5a:40:78:be:87:30:dd:02:ef:
ad:58:e0:11:ba:94:43:13:64:a2:66:9a:fd:31:3a:
5b:99:4b:38:db:d9:28:9f:ab:32:34:38:e6:d3:28:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A2:AF:A8:CA:9E:4C:DC:2F:3E:B4:11:12:17:DE:56:84:2D:26:16
X509v3 Authority Key Identifier:
keyid:37:93:EC:48:32:85:63:0F:32:84:04:A9:FB:85:F4:C8:1B:9A:A4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5PsSDKFYw8yhASp-4X0yBuapFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d1b392-a4bd-4fb7-b52d-93deeaba32b8/1/N5PsSDKFYw8yhASp-4X0yBuapFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d1b392-a4bd-4fb7-b52d-93deeaba32b8/1/N5PsSDKFYw8yhASp-4X0yBuapFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:63:93:4d:80:b0:c2:7f:77:cf:cd:03:e0:21:95:1a:92:34:
ce:78:5b:a0:d2:c1:ff:7b:96:9a:f1:4c:93:65:65:eb:e8:73:
1d:84:79:b8:1b:3d:54:63:47:7b:99:36:3c:6e:47:cf:69:49:
b6:2a:bc:16:6e:9e:41:d3:13:03:fd:34:d4:99:97:49:7d:71:
e0:a8:2a:55:db:15:30:54:a4:16:77:c8:40:53:43:b0:0e:02:
05:5f:bf:54:c7:4b:9b:f9:cb:66:a3:ea:a1:c2:56:dc:9b:40:
87:6d:01:0c:13:cc:c0:bb:17:f2:29:03:7a:e3:f8:01:2f:96:
88:d5:8f:ac:11:b5:ce:3f:70:30:f4:02:6a:14:8a:89:f6:c0:
65:cc:c2:80:9e:f7:3e:f8:c2:14:7b:a5:2a:5c:c1:b6:7d:69:
28:e0:c9:95:8e:27:c8:2b:26:be:74:f1:01:92:22:23:61:98:
fb:df:b1:ad:83:db:e3:5b:ab:b0:bc:f7:3e:30:4b:15:4c:cc:
11:9a:15:25:d8:15:31:61:eb:ca:2c:96:77:a7:5b:58:89:10:
2e:ad:9d:48:d8:e3:4d:f6:95:ea:7a:80:aa:b4:24:31:65:36:
e3:05:a7:8d:06:61:85:7d:bd:99:26:5a:85:36:d4:94:a9:1a:
f3:f3:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org