Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/eeb67b-adb4-458a-93be-7e9d73304d7c/1/H1pVHVKhX2elhuDvtioK8olpCeg.mft
File: H1pVHVKhX2elhuDvtioK8olpCeg.mft (raw, json)
Hash identifier: mSv1hiXBpaJwUOoXmCgYMM4nPwQyOF982sxFl5bPa6E=
Subject key identifier: 2F:63:2D:BA:62:73:C4:9B:DD:EB:FB:5A:E1:72:9A:C0:92:D2:F1:66
Authority key identifier: 1F:5A:55:1D:52:A1:5F:67:A5:86:E0:EF:B6:2A:0A:F2:89:69:09:E8
Certificate issuer: /CN=1f5a551d52a15f67a586e0efb62a0af2896909e8
Certificate serial: 018E505D171D9491AB7A4042B108FC3C2A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1pVHVKhX2elhuDvtioK8olpCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/eeb67b-adb4-458a-93be-7e9d73304d7c/1/H1pVHVKhX2elhuDvtioK8olpCeg.mft
Manifest number: 02DA
Signing time: Mon 18 Mar 2024 07:01:01 +0000
Manifest this update: Mon 18 Mar 2024 07:01:01 +0000
Manifest next update: Tue 19 Mar 2024 07:01:01 +0000
Files and hashes: 1: H1pVHVKhX2elhuDvtioK8olpCeg.crl (hash: YyaW3vuehic03lqFLriML9bM8SyqmLt0DJT6GbZhk8c=)
2: k7M9FdKGnYkEt8Iq6UW5G7mCJws.roa (hash: U4pIltpwoeswCeqIERUCvRmtuqJH73vpmXYIjDApOpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:5d:17:1d:94:91:ab:7a:40:42:b1:08:fc:3c:2a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5a551d52a15f67a586e0efb62a0af2896909e8
Validity
Not Before: Mar 18 07:01:01 2024 GMT
Not After : Mar 19 07:01:01 2024 GMT
Subject: CN=2f632dba6273c49bddebfb5ae1729ac092d2f166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:7a:bf:97:81:22:66:9a:c9:01:28:b5:fe:
bf:1b:4d:35:80:0a:a9:86:a9:f4:31:d3:31:a2:5f:
af:46:56:21:aa:95:e5:c2:1c:ae:fb:90:e2:8d:68:
4e:a9:9b:51:ee:d5:0a:c3:90:01:ed:52:ed:31:07:
d7:48:aa:3e:5e:bd:8c:33:aa:45:b7:b6:f7:49:83:
c0:2d:3d:95:39:b4:2b:e0:54:fd:16:57:4c:61:3b:
6f:b5:0f:08:14:89:cd:3d:35:71:01:34:c8:5c:ce:
97:90:15:54:f8:bb:b1:e0:36:df:ef:03:12:a2:79:
d0:d2:7e:67:59:2f:97:3c:a5:c1:85:f3:78:30:df:
77:01:81:67:fc:7e:ca:6f:44:fa:f9:41:e8:8c:95:
dc:52:20:77:01:85:0f:86:86:b9:5c:97:78:4f:e9:
78:85:49:2d:b3:bb:41:f8:05:ab:73:3e:b0:75:7d:
4f:e7:bc:1f:36:10:a3:3f:34:3c:32:6b:ad:f3:83:
7d:b1:5e:8e:10:aa:8c:c5:88:7e:fb:17:92:81:46:
7e:37:44:7c:05:4d:ea:35:ed:6b:b0:32:de:97:92:
82:fd:e5:e5:32:67:38:3d:a2:2b:a0:2b:77:e9:00:
93:3e:88:e8:98:7f:a3:d2:8a:ff:1a:58:ce:38:5b:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:63:2D:BA:62:73:C4:9B:DD:EB:FB:5A:E1:72:9A:C0:92:D2:F1:66
X509v3 Authority Key Identifier:
keyid:1F:5A:55:1D:52:A1:5F:67:A5:86:E0:EF:B6:2A:0A:F2:89:69:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1pVHVKhX2elhuDvtioK8olpCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/eeb67b-adb4-458a-93be-7e9d73304d7c/1/H1pVHVKhX2elhuDvtioK8olpCeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/eeb67b-adb4-458a-93be-7e9d73304d7c/1/H1pVHVKhX2elhuDvtioK8olpCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d4:ea:ac:df:77:2f:97:8b:06:6b:8d:df:cf:06:fd:ab:a6:
f6:d6:15:a3:c5:16:c5:70:d4:f5:8d:2e:0f:cf:99:c5:4f:1e:
1c:e0:15:16:1d:45:f6:a3:67:35:47:b0:db:c0:77:74:74:11:
77:de:da:18:66:d9:eb:a7:98:01:af:8a:10:f1:43:43:b7:32:
c7:0f:98:33:fa:29:7e:d9:de:fe:e6:18:2e:85:70:2c:b9:87:
42:00:79:45:f7:f1:07:d2:91:42:fe:ad:4b:49:d6:af:6c:09:
a1:80:50:f5:cc:32:a7:47:3e:fe:42:16:d2:66:dc:83:98:6e:
d4:8e:3a:db:05:11:ef:e2:40:ac:e3:be:a2:ef:26:3a:5d:99:
ce:16:a8:30:b2:8b:ae:ac:a5:f5:cc:b3:21:29:aa:88:0b:79:
44:d0:00:8e:1e:da:ae:b4:e0:2b:66:6c:fd:c0:44:91:14:c4:
8c:06:a1:ae:bf:30:f1:28:29:50:03:07:cb:63:61:c5:58:2c:
1f:33:61:00:77:d7:f5:6f:45:5b:b9:ed:ee:8e:9a:ef:04:09:
33:1c:c6:0a:cb:6d:7b:d6:7d:24:3c:9c:d5:57:44:43:85:4d:
e3:76:da:0e:e7:25:43:3a:72:0b:5f:1b:ef:30:37:25:1a:b7:
50:4e:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:35 2024 by rpki-client on console-ams.rpki-client.org