Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3c6b78-7c52-4ad8-acf3-a157c3a96be2/1/MlxR70Y5NZsTKgygtFYam3bE0ew.mft
File: MlxR70Y5NZsTKgygtFYam3bE0ew.mft (raw, json)
Hash identifier: XyLkldjG841SHTSKtAx0DE5hzZ8lxNERabP/aJJ1wD0=
Subject key identifier: E4:AB:EE:AF:4D:9F:03:8F:36:39:7F:26:DA:BE:07:3D:25:FA:18:E0
Authority key identifier: 32:5C:51:EF:46:39:35:9B:13:2A:0C:A0:B4:56:1A:9B:76:C4:D1:EC
Certificate issuer: /CN=325c51ef4639359b132a0ca0b4561a9b76c4d1ec
Certificate serial: 018BEA3E828FF9B820D8FFD8FC74CE3A7137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlxR70Y5NZsTKgygtFYam3bE0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3c6b78-7c52-4ad8-acf3-a157c3a96be2/1/MlxR70Y5NZsTKgygtFYam3bE0ew.mft
Manifest number: 0F95
Signing time: Mon 20 Nov 2023 01:00:46 +0000
Manifest this update: Mon 20 Nov 2023 01:00:46 +0000
Manifest next update: Tue 21 Nov 2023 01:00:46 +0000
Files and hashes: 1: MlxR70Y5NZsTKgygtFYam3bE0ew.crl (hash: onTpz2fBlXiUEUEj3IVMzCi9IP6CKG6jDSijpWqGmz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:3e:82:8f:f9:b8:20:d8:ff:d8:fc:74:ce:3a:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325c51ef4639359b132a0ca0b4561a9b76c4d1ec
Validity
Not Before: Nov 20 01:00:46 2023 GMT
Not After : Nov 21 01:00:46 2023 GMT
Subject: CN=e4abeeaf4d9f038f36397f26dabe073d25fa18e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:09:ae:27:33:d6:28:3a:7d:43:2c:7d:66:
74:e1:e9:8b:fd:3c:bb:fa:0e:96:47:65:85:5d:db:
ca:9f:74:9d:e0:1e:c8:a8:96:20:5a:87:0d:74:75:
15:be:bc:e1:69:b2:7a:2a:8a:2a:1d:8e:4d:07:7d:
45:4c:4b:1c:e4:52:f2:15:1b:46:f5:7b:3c:5a:42:
18:7c:00:07:26:ed:2c:45:c7:1b:eb:43:46:98:47:
99:47:85:18:3b:3e:93:79:e9:a2:31:94:25:9b:47:
cb:96:3e:88:e9:16:9f:67:f7:63:da:e8:98:f5:24:
20:1d:04:7c:f9:37:01:48:02:81:1e:f9:86:25:de:
74:4b:49:22:4c:02:54:6e:fd:3b:10:05:11:0a:10:
cf:30:6c:f2:f8:b6:44:40:eb:d7:e3:e8:e3:4e:80:
58:eb:c2:57:f9:8d:b0:b0:b6:44:11:00:f1:5c:d3:
32:99:a1:87:a5:33:9c:8b:45:fd:1a:36:8d:48:74:
e9:1b:f8:46:60:4a:f4:70:37:8e:6d:59:1a:c2:4b:
a2:03:2d:59:d1:38:d5:60:83:c8:a5:2e:ce:05:40:
5a:9a:38:7e:7e:1a:7f:5e:da:57:4f:db:f8:7c:02:
0c:ad:7b:70:84:33:eb:54:51:b4:40:1c:d4:c2:76:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AB:EE:AF:4D:9F:03:8F:36:39:7F:26:DA:BE:07:3D:25:FA:18:E0
X509v3 Authority Key Identifier:
keyid:32:5C:51:EF:46:39:35:9B:13:2A:0C:A0:B4:56:1A:9B:76:C4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlxR70Y5NZsTKgygtFYam3bE0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3c6b78-7c52-4ad8-acf3-a157c3a96be2/1/MlxR70Y5NZsTKgygtFYam3bE0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3c6b78-7c52-4ad8-acf3-a157c3a96be2/1/MlxR70Y5NZsTKgygtFYam3bE0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8c:e0:6e:87:15:35:27:30:08:f2:a3:f8:cf:62:ff:a5:d0:
4d:4f:fd:10:26:d4:0f:f6:25:cc:38:54:44:91:fa:27:4a:4e:
f9:44:0d:c4:2e:80:56:3a:3c:92:3e:88:dc:20:58:39:38:fd:
8f:d7:45:f9:df:3c:36:29:83:8d:bb:33:f3:61:90:c4:b0:eb:
21:9e:83:b6:55:fa:2b:d9:3e:bb:90:f5:13:5f:88:b3:7f:e4:
79:58:50:e5:cd:1e:4c:51:bc:29:5b:7d:f3:8b:16:27:af:63:
ad:5a:1a:e3:55:b7:0a:07:ba:63:6e:10:d6:1b:7c:8e:06:e9:
98:5b:04:e1:e3:3f:18:dd:e6:1f:bb:ce:95:78:b2:82:ee:e0:
81:7c:69:7e:c8:4c:13:e4:fa:1d:0c:23:50:be:6d:43:10:c6:
5f:55:79:e3:68:59:00:c8:51:d3:09:24:81:bf:e0:26:e1:ca:
29:47:16:89:3e:84:f4:de:8d:08:7a:b8:3f:1f:81:a5:eb:ec:
7c:2f:49:ee:11:d4:f3:11:27:6f:d0:d3:23:94:df:7c:3b:7b:
5a:f8:41:45:bf:af:40:d8:6b:c2:f6:96:e0:f6:78:c9:6b:c3:
06:eb:62:2a:ff:49:75:19:52:b3:9d:30:1c:41:e4:ea:09:88:
65:b4:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org