Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f1bb34-fccc-40bb-8674-c872d853fbcd/1/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.mft
File: Kb8wQxf6I2VwHDPRM7mg1YXUPOg.mft (raw, json)
Hash identifier: A8hJThj5fV1HbJWiKXmwsgxgv7Di6VTQZFIx6/UV5c8=
Subject key identifier: D9:06:E9:4D:A6:35:63:0F:DD:87:F4:42:E8:C1:08:1E:61:1A:DB:27
Authority key identifier: 29:BF:30:43:17:FA:23:65:70:1C:33:D1:33:B9:A0:D5:85:D4:3C:E8
Certificate issuer: /CN=29bf304317fa2365701c33d133b9a0d585d43ce8
Certificate serial: 018BF0E5948CE04638CB58851AF9B22DF221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f1bb34-fccc-40bb-8674-c872d853fbcd/1/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.mft
Manifest number: 0AC3
Signing time: Tue 21 Nov 2023 08:00:59 +0000
Manifest this update: Tue 21 Nov 2023 08:00:59 +0000
Manifest next update: Wed 22 Nov 2023 08:00:59 +0000
Files and hashes: 1: Kb8wQxf6I2VwHDPRM7mg1YXUPOg.crl (hash: jnNEfQ0rSMB07bHpUhLATuY0EYTNVNhUSa6VBQGWskI=)
2: qFSFlHGKLpKRNxsQU4Vx4lhrCi0.roa (hash: AsyQMQjqSi7CVPZvVbNn9P2yOMhBkhywep0O+HLJPLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:e5:94:8c:e0:46:38:cb:58:85:1a:f9:b2:2d:f2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bf304317fa2365701c33d133b9a0d585d43ce8
Validity
Not Before: Nov 21 08:00:59 2023 GMT
Not After : Nov 22 08:00:59 2023 GMT
Subject: CN=d906e94da635630fdd87f442e8c1081e611adb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:21:40:a5:50:c0:0c:3b:72:d0:57:72:38:
f1:cb:21:5e:67:64:6b:21:e0:43:9b:60:5a:fd:02:
fc:4d:ca:8f:f3:fa:3d:f3:e2:38:c0:43:d2:d1:ca:
96:ba:3a:3c:68:5b:1f:af:fd:9b:40:ab:bf:42:b1:
5f:e9:3f:3d:8f:66:d1:e9:5a:8e:c3:64:78:3c:e4:
07:88:08:c1:c7:cb:7a:19:bd:e3:b0:ab:3a:da:fc:
c7:6e:a0:aa:67:5e:10:fa:01:0f:49:fc:de:9e:a5:
66:0f:8d:9b:71:4f:f3:b1:99:6d:62:75:97:7f:8f:
d5:e5:88:d3:98:f4:66:11:46:92:b5:d3:06:49:a1:
36:ac:e7:e4:8d:1b:00:37:f5:d4:a9:80:f6:8c:5f:
15:d1:30:2b:ac:7b:40:c5:4a:a6:67:93:ef:cf:a0:
bb:08:85:1f:c5:99:62:e6:39:e9:38:67:2a:37:78:
cf:21:45:67:32:de:25:34:36:7b:4c:bf:6f:6c:cb:
8a:70:74:6e:b3:51:b2:2e:2b:7c:54:cd:b8:8e:fa:
d9:99:77:4e:52:b1:d9:ea:f6:ed:9d:06:94:4d:48:
84:f3:31:ca:b7:f4:ef:ae:cc:69:da:86:9a:b8:d9:
f5:a6:37:f2:a8:dd:14:7a:1e:f2:36:66:f8:d8:bf:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:E9:4D:A6:35:63:0F:DD:87:F4:42:E8:C1:08:1E:61:1A:DB:27
X509v3 Authority Key Identifier:
keyid:29:BF:30:43:17:FA:23:65:70:1C:33:D1:33:B9:A0:D5:85:D4:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f1bb34-fccc-40bb-8674-c872d853fbcd/1/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f1bb34-fccc-40bb-8674-c872d853fbcd/1/Kb8wQxf6I2VwHDPRM7mg1YXUPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:80:be:9f:1b:7f:ad:a0:f3:25:07:3a:92:8c:2d:1b:a3:9e:
36:aa:67:0b:89:3b:c6:e5:12:1a:d4:63:b5:4b:a7:78:1e:06:
11:2d:bc:3b:82:d2:ee:4d:b2:50:d3:94:0b:91:bd:b6:4f:8d:
c1:56:77:e0:a4:75:2a:91:e7:29:68:9d:82:ec:d8:b6:3d:f4:
22:2b:8b:ec:91:3a:57:83:2a:a1:a2:64:c3:57:ab:f1:7b:67:
b7:16:83:ab:db:95:db:94:29:a9:64:d2:ce:43:cf:05:b5:4c:
33:60:ee:3e:73:b1:f1:7d:23:fe:63:0d:44:02:51:18:39:c5:
82:9c:e7:7e:76:96:5c:47:6d:29:63:87:d5:3d:77:d0:5b:d8:
f4:15:56:cf:58:e1:7c:93:14:56:ad:d7:34:e6:09:b8:b5:6d:
e0:f8:fd:1e:cd:40:77:c1:91:e4:e6:0f:7c:1a:8d:4d:36:78:
62:1e:b6:a9:ab:3d:2f:4c:64:40:6e:49:49:d9:45:17:83:02:
9b:f1:dc:b5:0c:a9:5f:b6:bb:25:1b:c5:f4:3e:ba:ca:50:0c:
2c:35:d5:7f:95:b4:2c:d2:d6:1c:b7:00:5e:99:9c:d0:59:5e:
41:73:df:f6:9d:9f:c5:88:f6:83:08:ce:36:7b:f5:e9:cb:e9:
dd:b9:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:24 2024 by rpki-client on console-ams.rpki-client.org