Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a2f74e-e909-4971-9341-cbc2566ae74d/1/eH9iGR8ZExS9a92wlrTNTdsz9Fw.mft
File: eH9iGR8ZExS9a92wlrTNTdsz9Fw.mft (raw, json)
Hash identifier: 7g85EFiBe6Y7KQVdKn7pKHCNEmdHyCNfm0r1KNT2Ffc=
Subject key identifier: 33:40:7A:26:2C:23:0D:5E:99:B7:C5:E8:42:3E:93:ED:0C:F9:55:99
Authority key identifier: 78:7F:62:19:1F:19:13:14:BD:6B:DD:B0:96:B4:CD:4D:DB:33:F4:5C
Certificate issuer: /CN=787f62191f191314bd6bddb096b4cd4ddb33f45c
Certificate serial: 0192E687F69FFFE239EAB03FF785A67955AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH9iGR8ZExS9a92wlrTNTdsz9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a2f74e-e909-4971-9341-cbc2566ae74d/1/eH9iGR8ZExS9a92wlrTNTdsz9Fw.mft
Manifest number: 1337
Signing time: Fri 01 Nov 2024 07:02:03 +0000
Manifest this update: Fri 01 Nov 2024 07:02:03 +0000
Manifest next update: Sat 02 Nov 2024 07:02:03 +0000
Files and hashes: 1: apIsLp9gB3-ePn23Iz1gSnuClOo.roa (hash: yycnskyjdQEROhP+q+hpdC1HnM4vZCKFBWTq7y4iPPs=)
2: eH9iGR8ZExS9a92wlrTNTdsz9Fw.crl (hash: 5/h60y5Y8NInoSoa8bZaCBa6xoi+wRE9v6+WXbuub6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e6:87:f6:9f:ff:e2:39:ea:b0:3f:f7:85:a6:79:55:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787f62191f191314bd6bddb096b4cd4ddb33f45c
Validity
Not Before: Nov 1 07:02:03 2024 GMT
Not After : Nov 2 07:02:03 2024 GMT
Subject: CN=33407a262c230d5e99b7c5e8423e93ed0cf95599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:3b:99:65:62:36:a3:2a:7a:79:9d:be:a9:
b3:f3:e8:8b:f6:1b:ae:7d:2e:cf:e7:4e:ed:00:47:
8a:6e:48:ab:a6:82:ff:68:55:85:a0:8d:ac:4f:e0:
d7:49:8c:30:bc:e9:89:ec:bc:a7:12:67:92:28:d2:
84:67:88:af:ff:50:5e:d3:66:af:94:b1:e6:96:c0:
a4:dc:9d:59:f3:dd:21:9c:06:5e:55:05:99:63:20:
14:3b:b3:0c:f5:25:17:e1:2f:ec:30:b8:bc:b4:fc:
48:b7:69:ed:72:4b:f5:4d:34:81:70:33:0d:85:6c:
65:4d:e1:0a:74:02:9d:57:40:3d:cb:42:5e:48:57:
7b:e6:69:9d:93:0f:85:16:5e:49:d4:ca:9d:79:80:
38:44:63:a0:ab:19:f3:38:eb:e1:d8:8c:64:fa:b5:
2c:83:c7:79:b0:88:ac:28:dc:24:fb:65:04:0a:41:
2a:fc:e4:3b:74:5f:ce:a1:e4:0e:22:7e:d3:59:1a:
fe:25:38:10:51:f5:b1:5b:4c:07:c7:6e:3b:a7:3f:
fa:50:83:6b:09:cc:8e:e6:07:e2:da:51:42:e0:39:
fd:fb:60:42:26:a7:d9:89:a8:c6:bb:a5:0c:67:c6:
23:f7:19:59:7f:b1:30:c7:39:3f:96:31:9d:17:a1:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:40:7A:26:2C:23:0D:5E:99:B7:C5:E8:42:3E:93:ED:0C:F9:55:99
X509v3 Authority Key Identifier:
keyid:78:7F:62:19:1F:19:13:14:BD:6B:DD:B0:96:B4:CD:4D:DB:33:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH9iGR8ZExS9a92wlrTNTdsz9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a2f74e-e909-4971-9341-cbc2566ae74d/1/eH9iGR8ZExS9a92wlrTNTdsz9Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a2f74e-e909-4971-9341-cbc2566ae74d/1/eH9iGR8ZExS9a92wlrTNTdsz9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:aa:ff:3e:fc:6b:5c:e4:1d:cc:48:48:ca:52:ee:62:8f:ce:
e4:78:46:c3:33:90:72:97:e4:a3:49:f0:4c:78:3c:62:c4:d2:
44:75:12:95:cb:64:1b:56:03:02:7d:68:74:e8:fd:73:ab:d7:
ab:0c:87:82:44:c3:d4:46:88:c0:c5:8a:5e:ed:52:3b:f3:c4:
a8:22:25:8c:40:57:06:d0:ae:cb:4f:38:fe:59:29:7a:35:ed:
58:1b:90:c7:ef:0f:80:69:5d:f0:76:78:2f:e6:6d:b7:82:20:
7c:7e:30:09:de:ca:01:df:4f:99:11:11:56:35:fc:25:08:c4:
a6:44:61:43:e5:05:44:77:90:4a:02:bb:78:56:6f:64:4e:dd:
a1:e7:ce:92:66:97:40:ee:6e:99:3d:b7:ea:b0:ea:bb:96:29:
c0:69:fa:5b:ea:1c:cb:0e:83:92:b7:1e:7a:11:10:9c:8b:69:
2e:39:1d:9e:7f:15:ca:25:81:02:8d:35:89:34:48:51:0c:7c:
29:03:21:44:d4:24:e0:37:37:75:67:10:b6:e2:90:ef:c2:49:
e2:c1:f1:1f:d9:22:5d:9b:0c:ff:7f:da:07:95:01:2f:30:44:
fd:30:4e:ec:c4:c5:45:14:5a:5d:f1:a5:d6:a6:6d:77:09:c9:
07:e8:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 13:22:30 2024 by rpki-client on console-ams.rpki-client.org