Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.mft
File: Ud6qPj9T7EtsE4x4ZUNykOMqXDo.mft (raw, json)
Hash identifier: xIhtkr6Jo+24/fQqRGw9AcjiUDh9phOcCWzz1CFJtBo=
Subject key identifier: E4:52:8D:F2:CF:30:5B:9B:5B:32:1D:97:F4:C1:17:CB:01:FD:76:91
Authority key identifier: 51:DE:AA:3E:3F:53:EC:4B:6C:13:8C:78:65:43:72:90:E3:2A:5C:3A
Certificate issuer: /CN=51deaa3e3f53ec4b6c138c7865437290e32a5c3a
Certificate serial: 018E5101FCD52DA318A7BB28DDA46159D526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.mft
Manifest number: 029A
Signing time: Mon 18 Mar 2024 10:01:08 +0000
Manifest this update: Mon 18 Mar 2024 10:01:08 +0000
Manifest next update: Tue 19 Mar 2024 10:01:08 +0000
Files and hashes: 1: Ud6qPj9T7EtsE4x4ZUNykOMqXDo.crl (hash: JcbyAEDkSasSyqidP9EN9SxYiPpTX87hlrOIpm8llXs=)
2: ijSTMAsFDusAQH4ETia5sENQPPc.roa (hash: MCnEN4Og92C8FNtrQu2g0q80BUPeZwbirNFmFMQ0hec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:01:fc:d5:2d:a3:18:a7:bb:28:dd:a4:61:59:d5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51deaa3e3f53ec4b6c138c7865437290e32a5c3a
Validity
Not Before: Mar 18 10:01:08 2024 GMT
Not After : Mar 19 10:01:08 2024 GMT
Subject: CN=e4528df2cf305b9b5b321d97f4c117cb01fd7691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:fd:80:0c:22:a4:38:1f:04:03:ff:1d:b9:
03:70:8a:a1:e0:ea:21:69:7c:8b:c6:fd:1b:28:22:
48:00:ea:e7:8f:20:62:db:f9:29:d4:57:ac:3c:b2:
06:69:ac:42:d9:07:2e:79:d2:12:df:7f:50:60:ad:
bf:bf:82:68:70:e0:03:fb:e1:a4:77:a6:6b:6e:57:
2e:ca:d3:b1:02:92:70:cc:f6:21:75:2a:df:fc:0c:
3a:04:65:af:9f:9a:72:a4:4e:1c:36:1e:cf:71:83:
2d:f5:58:d6:b3:86:9c:ff:f6:22:a2:1d:9f:7b:1c:
45:ea:20:2e:7c:09:df:4d:fc:19:ca:7e:d3:3a:16:
7c:a5:77:7e:66:7b:9f:2d:cc:bb:63:12:16:78:7a:
68:f6:31:b1:5c:d8:f4:83:2d:37:1a:ce:c5:35:72:
65:c0:59:77:17:f6:41:49:91:90:8f:a4:99:43:48:
d1:62:ea:10:bf:cd:c9:11:db:ac:93:82:5a:27:4b:
63:7e:5d:44:2d:cd:a0:f8:19:21:42:60:50:1b:42:
8f:7b:d2:5e:a6:e0:ce:97:97:e9:7c:e7:76:88:03:
8e:58:57:86:58:fe:ac:da:8b:f0:2e:5e:1d:d8:e2:
e3:3a:9f:6e:3e:74:55:b4:da:dd:a3:d7:db:f6:7b:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:8D:F2:CF:30:5B:9B:5B:32:1D:97:F4:C1:17:CB:01:FD:76:91
X509v3 Authority Key Identifier:
keyid:51:DE:AA:3E:3F:53:EC:4B:6C:13:8C:78:65:43:72:90:E3:2A:5C:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c2:3f:a5:81:00:15:95:a8:42:97:c1:9e:14:32:96:eb:d8:
23:64:59:9f:93:fd:41:db:68:87:b8:f0:04:3e:fe:a7:87:4d:
6c:e7:d5:cf:49:f1:9b:c5:26:d0:e9:59:86:2c:63:47:19:25:
8a:78:8d:5c:08:3c:14:15:0f:0e:e8:50:5a:6d:a8:2a:9a:72:
ff:32:f1:ff:6c:8b:08:6a:9f:ee:7d:5b:e7:e9:c1:c2:3e:9d:
e7:bc:4b:84:86:de:c8:56:ce:c9:81:7e:e3:91:93:67:7e:c4:
de:f8:af:e3:86:37:a6:7c:95:96:9e:28:c2:1e:d4:ce:a1:26:
42:a0:f8:4c:55:db:72:68:1c:7d:b8:7b:a8:36:53:17:48:40:
c1:bb:05:b9:f2:0d:80:2f:30:db:84:02:e5:7f:d2:6a:19:97:
38:58:82:d3:2c:cc:b1:c0:4d:7e:9e:b8:62:e1:fb:e7:d3:40:
45:38:71:68:27:1a:34:94:67:c4:1d:be:32:0a:ee:97:ff:be:
f0:d3:b3:63:4f:f3:16:f2:65:52:f1:94:ce:b8:8d:aa:2a:c4:
3b:0c:19:c6:27:f7:c0:dc:cf:cf:89:92:c2:0c:42:d6:95:0e:
a2:0b:1e:89:07:0b:ac:34:05:59:47:4d:73:51:a7:80:95:c5:
76:59:00:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:13 2024 by rpki-client on console-fra.rpki-client.org