Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft
File: 2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft (raw, json)
Hash identifier: nD94+uho0UfTKFi8dBcsDP5aHba4ShiuB6X4LZpiysA=
Subject key identifier: D2:0E:C9:50:DC:57:8D:99:30:A2:EA:D4:EB:FE:4A:DB:7A:EB:EA:EF
Authority key identifier: D9:F3:49:D6:90:6E:D1:ED:D3:C8:9E:75:6E:6A:8C:E4:C1:91:00:54
Certificate issuer: /CN=d9f349d6906ed1edd3c89e756e6a8ce4c1910054
Certificate serial: 018D8672185FC949F4018E06CBD8166630A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft
Manifest number: 085C
Signing time: Thu 08 Feb 2024 02:00:40 +0000
Manifest this update: Thu 08 Feb 2024 02:00:40 +0000
Manifest next update: Fri 09 Feb 2024 02:00:40 +0000
Files and hashes: 1: 2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.crl (hash: 6u9AffeWMgRowSuSPF6uVJwjLJv8snWlPXti33zJp+4=)
2: NrTpD5c914SBDtc0rJO1EOwl7jk.roa (hash: QyCVbSSBvvdhse4tROxxjgjpsadmEiL/13R8nlaB0oc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:86:72:18:5f:c9:49:f4:01:8e:06:cb:d8:16:66:30:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f349d6906ed1edd3c89e756e6a8ce4c1910054
Validity
Not Before: Feb 8 02:00:40 2024 GMT
Not After : Feb 9 02:00:40 2024 GMT
Subject: CN=d20ec950dc578d9930a2ead4ebfe4adb7aebeaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:0c:2b:35:d0:58:08:b3:35:8e:8f:39:61:
5e:60:3a:07:fc:24:2c:02:1e:79:db:47:b1:df:d7:
d1:65:e2:20:78:58:0a:54:86:c6:3d:ef:8f:d4:c7:
52:85:53:69:6c:ca:f6:c9:80:b8:86:cb:4d:9a:24:
69:d5:b4:a1:c6:5f:39:58:e3:0d:04:17:27:64:96:
0f:92:ec:cf:08:d3:8f:55:82:51:92:e2:e2:9b:bf:
e0:0b:21:bc:ad:f2:87:fe:fc:90:8e:8f:51:b5:2e:
b0:54:59:9c:7b:9f:cf:3d:74:75:49:b2:eb:e3:63:
af:49:81:c3:a5:4c:6e:17:f4:16:2e:8f:7a:8b:6c:
8f:ec:32:20:8d:eb:9b:72:7a:74:79:f4:33:b5:57:
bb:ff:4f:9e:10:dc:b6:51:72:73:6e:07:55:2f:c3:
df:b6:a5:85:0d:d7:28:c0:cb:30:c0:33:8f:8b:0b:
f6:60:fe:ee:d6:5c:51:6a:56:4f:99:07:56:15:5d:
69:80:4a:1b:9a:eb:f9:dd:e6:02:cd:51:bc:4f:22:
4c:ef:b5:21:04:2d:0e:3f:8a:6d:83:4e:72:b1:3c:
a7:52:22:c3:89:21:ff:2e:e0:ab:18:78:4d:f4:cb:
59:77:ee:13:cf:7d:8d:5e:a0:c8:f3:09:9f:a2:0c:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:C9:50:DC:57:8D:99:30:A2:EA:D4:EB:FE:4A:DB:7A:EB:EA:EF
X509v3 Authority Key Identifier:
keyid:D9:F3:49:D6:90:6E:D1:ED:D3:C8:9E:75:6E:6A:8C:E4:C1:91:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ed:43:f1:cc:57:75:a4:84:7e:66:37:01:53:67:85:0f:e5:
9b:d7:0f:1f:b3:c3:25:b2:de:6c:fd:16:d5:3f:fb:52:b8:4a:
c1:89:34:77:8d:41:61:7f:c2:f4:76:de:66:1f:9c:e3:3b:f2:
b0:eb:35:87:93:18:4a:0a:f1:31:89:dc:73:90:1f:e3:8e:9e:
38:7e:0b:6b:a0:18:ff:c6:38:2b:0e:27:48:43:9a:d7:a8:05:
6e:29:01:4e:35:aa:4f:8c:8f:51:9d:52:d5:9c:48:7d:38:8c:
f1:db:46:17:ed:8c:e9:2e:31:1a:0e:c4:21:16:88:a9:3b:71:
1d:84:37:50:19:f5:73:73:f6:e1:8f:81:d8:3b:8c:72:e7:ac:
bb:65:c0:9c:e8:94:5f:09:b3:2b:8f:13:e6:63:6a:0e:5d:80:
87:1b:36:50:73:55:70:57:8b:4f:de:a9:31:f9:34:ac:1a:48:
f9:9d:92:45:b5:88:b7:7b:57:14:6a:78:d0:1d:40:86:19:db:
b1:e6:4c:34:03:3c:28:5a:b6:0b:6c:7a:80:7f:29:48:23:7c:
b5:b9:cb:62:31:47:27:c1:12:b0:24:0d:94:36:2b:bc:38:47:
1f:d2:c9:4e:42:a6:a5:ae:cf:57:5f:4a:c2:df:9e:26:cc:a8:
e0:84:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:50 2024 by rpki-client on console-fra.rpki-client.org