Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.mft
File: GDbyZsJRa7973u_i4ezh0O_PgQY.mft (raw, json)
Hash identifier: A0osfidb8PKzNvdq4Sa3XrXjcEcsvf2Xqo43kXBRstw=
Subject key identifier: 71:EF:00:7D:2B:A4:36:A3:83:17:AB:6C:90:8E:96:C2:B2:4E:7C:D5
Authority key identifier: 18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
Certificate issuer: /CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
Certificate serial: 01856FDDE0860EAF0FDB4DA63F1392DA11F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.mft
Manifest number: 0900
Signing time: Mon 02 Jan 2023 00:24:49 +0000
Manifest this update: Mon 02 Jan 2023 00:24:49 +0000
Manifest next update: Tue 03 Jan 2023 00:24:49 +0000
Files and hashes: 1: GDbyZsJRa7973u_i4ezh0O_PgQY.crl (hash: LVRE6d96ZhwuRKBkDoBirC0i9bhja6eD4Mg+S5ubgX0=)
2: RenKaCfXcVBdoM5xiZFDggIt3BU.roa (hash: rfLmqNca9WIb8U3Pd716MBd57oBINhmafCEUYz/3G8k=)
3: WaflIRWPiBqZASTG_nfNMy9iAwQ.roa (hash: iz0kvliJbeDu4k9eMM8+YesqNrgfDDlwzpfI5/f1ejA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:e0:86:0e:af:0f:db:4d:a6:3f:13:92:da:11:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
Validity
Not Before: Jan 2 00:24:49 2023 GMT
Not After : Jan 3 00:24:49 2023 GMT
Subject: CN=71ef007d2ba436a38317ab6c908e96c2b24e7cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:46:4c:f5:e8:8d:67:8b:25:8d:0e:f5:fd:
4a:bf:b1:44:e1:f3:52:1d:55:84:61:b8:85:62:d1:
d7:f2:78:32:41:9f:3a:23:45:75:91:32:16:7d:c9:
a9:d4:d6:4a:69:93:5d:80:10:7f:fc:51:05:c0:4a:
bf:00:a1:cc:e2:03:06:57:ff:39:0d:a7:fa:6f:ee:
f1:61:54:1c:7f:ee:17:9f:28:02:0a:7a:14:a0:9f:
09:1d:60:47:59:07:67:b1:a9:12:af:5a:84:df:f4:
aa:57:1b:2e:12:e1:99:17:4f:4e:4f:0f:26:15:72:
c7:be:e7:d5:7d:3d:71:30:c4:f3:3b:2d:12:ba:cc:
58:d6:3d:2c:db:be:8c:8b:55:7f:59:8f:63:da:86:
e0:97:b0:42:93:74:cf:25:a2:72:73:84:8f:e4:e0:
a8:d8:27:ff:8a:ac:77:58:3e:2a:a0:80:32:67:23:
6a:ed:d2:9c:68:db:ee:5e:9d:22:25:26:91:55:c4:
1d:fd:c0:1a:e0:6a:f0:8d:cf:7e:93:88:8d:8c:47:
5d:54:8d:1a:88:f9:b3:e7:5f:7e:21:1b:8a:35:3e:
6e:b3:39:bd:bb:69:5a:e6:aa:07:8c:06:bb:25:41:
d3:22:c2:0c:7d:09:c2:76:6b:99:4e:5e:35:99:14:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:00:7D:2B:A4:36:A3:83:17:AB:6C:90:8E:96:C2:B2:4E:7C:D5
X509v3 Authority Key Identifier:
keyid:18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7f:2b:11:4f:61:b0:5f:82:8d:3f:02:f4:4e:22:cd:39:75:
23:55:c1:2a:7d:12:70:94:61:e8:f0:cd:b0:fb:f6:2a:d0:90:
cf:5d:17:96:b5:02:b4:85:57:06:83:a7:d5:82:cb:5c:f6:77:
2d:63:7a:53:2f:86:e9:c6:60:ac:1e:ab:79:ce:64:b6:d0:1b:
b2:a6:74:fc:b0:01:23:06:f0:10:cf:2b:3b:7f:6f:1e:f4:7c:
01:37:1a:b9:45:c6:60:1a:93:54:14:95:ee:98:5f:fa:c0:b4:
a5:08:40:a3:a1:c8:e6:1c:d0:6e:07:38:33:de:b2:8e:35:bd:
4f:4d:22:b4:7e:5b:8f:ec:dc:9e:17:a5:61:99:de:bb:fb:97:
86:3d:03:ac:25:19:47:4d:57:e8:e3:d4:cd:9c:c6:01:e5:5b:
f0:de:2d:c7:21:8f:39:92:39:38:1c:95:c7:fd:e8:aa:88:b0:
2a:54:05:8b:7b:ac:89:69:c4:d3:fc:68:c7:95:50:80:11:a8:
9e:13:9e:e8:6d:bd:69:45:c6:da:a4:65:ca:e7:29:94:b2:b1:
64:6c:70:57:f7:15:df:66:3f:65:2d:6b:ec:2d:6a:12:70:49:
a4:8e:e9:7f:45:2d:a2:96:fa:88:c0:9d:84:8d:67:53:23:e9:
0f:47:5e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:31 2024 by rpki-client on console-ams.rpki-client.org