Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/lK58OCd3vIXnJrtak8dpOL8oyWE.mft
File: lK58OCd3vIXnJrtak8dpOL8oyWE.mft (raw, json)
Hash identifier: wZVNg8nRaoOkvIzftY0rmlo5OtMlgwkb0vCzmGjA9Ns=
Subject key identifier: 88:D4:A8:93:AD:2A:3E:BA:98:A9:82:F6:A9:8A:5E:0F:4F:6C:AD:BB
Authority key identifier: 94:AE:7C:38:27:77:BC:85:E7:26:BB:5A:93:C7:69:38:BF:28:C9:61
Certificate issuer: /CN=94ae7c382777bc85e726bb5a93c76938bf28c961
Certificate serial: 018B9320217F7ADDFDBAAD5716D4232CC9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lK58OCd3vIXnJrtak8dpOL8oyWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/lK58OCd3vIXnJrtak8dpOL8oyWE.mft
Manifest number: 086C
Signing time: Fri 03 Nov 2023 03:00:38 +0000
Manifest this update: Fri 03 Nov 2023 03:00:38 +0000
Manifest next update: Sat 04 Nov 2023 03:00:38 +0000
Files and hashes: 1: lK58OCd3vIXnJrtak8dpOL8oyWE.crl (hash: bTGUBKNxeHNX5VpjAHEIajI+YnaJ/z/uwdUn4erVhiI=)
2: vyg0kIom_smJ8_Ja1cMls8fuBR4.roa (hash: WISGSCVNjN1nYZQqUPLGQ/3AXH2bENxdrbhD7D0Zs04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:20:21:7f:7a:dd:fd:ba:ad:57:16:d4:23:2c:c9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ae7c382777bc85e726bb5a93c76938bf28c961
Validity
Not Before: Nov 3 03:00:38 2023 GMT
Not After : Nov 4 03:00:38 2023 GMT
Subject: CN=88d4a893ad2a3eba98a982f6a98a5e0f4f6cadbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:67:60:a1:ea:a1:f1:07:56:d7:98:d8:5d:
56:a5:14:dc:6f:e4:aa:31:4c:da:ec:bb:6a:8b:56:
48:b7:88:81:0d:29:46:35:29:93:60:51:22:9a:87:
4a:46:56:85:6d:34:12:bc:b9:b2:e3:ec:49:83:c6:
8a:71:13:68:67:72:94:2d:f6:35:c6:c0:55:c7:8c:
17:82:5c:5a:81:e8:c4:0d:df:23:12:f4:e0:b5:ab:
69:70:3b:49:60:11:1d:bb:dc:9f:0a:0c:8c:37:28:
04:0e:e4:eb:35:a9:36:a1:d5:83:21:b8:3a:3e:3e:
6c:f4:ad:03:30:11:e6:d3:61:b9:41:ff:6e:70:69:
2b:74:cb:dd:e6:ea:79:64:c7:ce:49:ef:69:18:25:
37:3d:b0:83:97:b8:08:6c:9f:b6:5d:70:23:ab:00:
8b:55:bb:e3:3a:71:64:96:56:0e:07:94:70:96:95:
bc:45:23:35:4c:a9:a6:48:45:15:1b:2d:a3:20:59:
ee:cc:d3:c2:9d:d3:a1:1d:db:32:bc:aa:8d:c1:ef:
e5:c3:43:c5:7f:b1:20:c4:8a:b8:0c:6a:b6:73:c9:
31:3a:97:80:55:ff:be:db:14:80:1e:b0:a2:34:fd:
3b:3e:56:df:62:c3:82:de:4a:de:23:f5:e0:ea:2f:
49:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D4:A8:93:AD:2A:3E:BA:98:A9:82:F6:A9:8A:5E:0F:4F:6C:AD:BB
X509v3 Authority Key Identifier:
keyid:94:AE:7C:38:27:77:BC:85:E7:26:BB:5A:93:C7:69:38:BF:28:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lK58OCd3vIXnJrtak8dpOL8oyWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/lK58OCd3vIXnJrtak8dpOL8oyWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1bda15-e882-4467-bcd9-2d8ebcabeba8/1/lK58OCd3vIXnJrtak8dpOL8oyWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1a:9b:71:5f:47:32:b2:8d:cc:74:6b:17:5a:a3:27:66:59:
8d:5a:97:5f:57:aa:58:07:b8:6c:52:45:ee:f0:f8:80:64:e0:
b8:dc:db:f1:c8:7a:93:fd:19:67:e9:38:c1:45:e1:e6:5e:96:
76:c8:ad:d0:19:01:ed:ad:09:f6:20:84:9e:68:60:25:f7:bb:
f0:ca:1d:4c:56:1e:9f:8d:e0:c5:60:f9:bd:c4:e1:b7:40:0a:
30:15:99:90:97:e3:da:b9:17:dd:e0:55:8b:98:e1:c3:3e:76:
0d:2d:4f:67:42:11:6d:d9:8e:f0:6f:25:9e:08:a0:ea:09:be:
44:3c:ad:b7:77:52:02:52:28:c1:74:fa:00:21:16:23:e5:7f:
1a:b4:43:ff:3c:73:41:95:05:a2:6f:2f:59:02:db:7c:63:d3:
22:d9:41:c9:f8:b8:be:63:31:ff:72:9a:6b:ff:11:f4:76:0d:
70:61:fc:dd:87:8c:38:59:8d:fc:bf:37:53:15:50:8d:38:85:
99:1a:08:63:2d:d7:ea:41:0d:ca:ae:fc:2e:57:a7:9d:00:b1:
a4:40:42:38:33:a6:f6:1f:1d:3f:23:48:df:6c:eb:43:7c:5b:
2e:4d:97:14:79:b0:fb:df:ea:90:55:3e:80:c5:8e:b2:6a:a9:
65:12:48:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 09:00:49 2023 by rpki-client on console-ams.rpki-client.org