Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.mft
File: Sp34CZpMHEIgHaBWeKPt8r4z_yQ.mft (raw, json)
Hash identifier: 2N5zbn0PSREMxotYjW4Bf5oL6NjCiPH8N8BZ3ZD5Xv8=
Subject key identifier: 98:6D:34:8D:49:C6:B4:DA:36:9F:EB:62:69:51:6B:02:10:39:37:6D
Authority key identifier: 4A:9D:F8:09:9A:4C:1C:42:20:1D:A0:56:78:A3:ED:F2:BE:33:FF:24
Certificate issuer: /CN=4a9df8099a4c1c42201da05678a3edf2be33ff24
Certificate serial: 018C5CD39488C6A8E18D881A8C9812885AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.mft
Manifest number: 0808
Signing time: Tue 12 Dec 2023 07:00:19 +0000
Manifest this update: Tue 12 Dec 2023 07:00:19 +0000
Manifest next update: Wed 13 Dec 2023 07:00:19 +0000
Files and hashes: 1: 9Et1EARpjcgpvFlm-AlRw4wyJWs.roa (hash: s1NTqRTBSn2/QgMlJvLoPiuVhXV37+rled3qKQ+UrJ0=)
2: Sp34CZpMHEIgHaBWeKPt8r4z_yQ.crl (hash: YrQYvmjnKWrLqQ8DqFAXGLZj8yjeG6GR7d3QivVArFc=)
3: U7WNyYyN9M8JeIR8Z7NQV5TYNFE.roa (hash: urpLU4XrAYkntZGxdF0a0fJhfEcCJIR4f2tOf/wP7V4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:d3:94:88:c6:a8:e1:8d:88:1a:8c:98:12:88:5a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9df8099a4c1c42201da05678a3edf2be33ff24
Validity
Not Before: Dec 12 07:00:19 2023 GMT
Not After : Dec 13 07:00:19 2023 GMT
Subject: CN=986d348d49c6b4da369feb6269516b021039376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:6b:f7:b0:02:4c:08:16:d6:d3:61:a2:02:
9d:98:be:c6:10:62:1a:12:f0:eb:9e:fa:7a:68:29:
43:f3:e0:73:fb:63:b9:36:28:93:1c:fe:f0:3a:a5:
cf:93:2c:11:57:8a:99:6a:42:71:4d:58:d7:97:65:
35:a6:55:01:fa:77:b1:1b:19:87:5d:1a:71:f9:8b:
4f:21:b9:8d:5c:6c:d1:c6:a6:00:e8:b0:7e:74:c3:
e3:ff:8d:89:20:38:39:56:6e:28:96:64:e8:8d:a0:
bc:35:9c:3e:eb:ff:90:c7:4b:22:68:13:9b:72:87:
4d:a9:44:50:5c:5a:a4:bd:0a:31:0e:12:e7:e7:49:
fb:c6:1d:ec:c0:be:22:97:b9:8b:4e:e3:87:62:6c:
ef:dc:f8:fa:ce:14:98:08:b1:8d:9e:3a:b1:70:d0:
92:c9:9b:b2:51:bd:ae:f5:8e:14:3e:c4:f3:77:bb:
80:3a:d0:9b:f1:d9:af:f6:f2:33:8c:29:9b:99:7f:
c0:26:d5:5f:4b:e6:29:ca:0e:be:7f:87:4f:68:43:
7a:0d:b8:93:d2:ec:e0:29:5c:41:8c:3f:d2:71:36:
d2:f7:b7:d2:53:1d:34:ba:17:9a:16:02:34:df:8d:
2c:32:da:4b:7d:1c:46:87:ed:60:ad:91:b7:1a:fb:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6D:34:8D:49:C6:B4:DA:36:9F:EB:62:69:51:6B:02:10:39:37:6D
X509v3 Authority Key Identifier:
keyid:4A:9D:F8:09:9A:4C:1C:42:20:1D:A0:56:78:A3:ED:F2:BE:33:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:72:e3:1b:70:d2:13:eb:79:cd:15:9f:51:a3:50:c9:75:
48:54:43:29:c5:77:51:dd:61:4b:68:33:b8:59:ec:cf:ae:4a:
1d:fc:79:b0:f8:84:ff:9e:29:da:2e:4f:9c:48:9e:89:c7:75:
f3:f7:3f:e5:34:64:cc:af:08:92:f9:84:2c:c5:13:d6:4e:8d:
e3:99:a6:26:c9:1f:b9:33:a5:98:86:9b:37:c2:6e:c7:a0:c2:
8f:86:52:40:c6:3c:7d:2c:4a:b6:55:3e:5d:be:22:05:ea:dc:
ad:bd:f8:09:bf:d2:ab:17:36:75:16:9a:d4:bb:1e:35:6d:dc:
05:71:17:b5:4a:ec:91:d9:08:81:49:e4:31:86:8b:58:d4:f3:
71:97:43:be:2d:89:5a:2a:8c:25:b8:f9:94:65:b5:e1:e4:d1:
c3:67:09:61:f2:b2:10:f1:1e:b0:99:a9:95:65:db:a0:5a:21:
54:29:ad:ce:73:71:15:1d:d2:dc:d1:cb:17:62:4b:8e:36:9b:
0c:a1:48:4f:34:fb:92:1b:2d:2e:04:a4:ae:bb:c8:cc:f7:c6:
99:18:a6:6e:45:04:e1:d8:45:15:1c:e9:d3:16:21:89:bd:87:
01:07:b4:26:2b:4c:d2:23:ac:bd:93:7f:50:02:43:50:fc:a5:
6e:65:2b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org