Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a0919d-a019-419e-acc2-4c84abefc09c/1/h4QtoWniuKIEucTx9fPCIHZkDWo.mft
File: h4QtoWniuKIEucTx9fPCIHZkDWo.mft (raw, json)
Hash identifier: TnB61O2CM0ulg7DpdjtdSubgnQxplBkwl0k7IGivFOE=
Subject key identifier: 51:8B:0E:2E:55:5E:5D:88:8D:0F:92:8F:14:74:F3:8C:EB:56:23:6D
Authority key identifier: 87:84:2D:A1:69:E2:B8:A2:04:B9:C4:F1:F5:F3:C2:20:76:64:0D:6A
Certificate issuer: /CN=87842da169e2b8a204b9c4f1f5f3c22076640d6a
Certificate serial: 01932F446C88A68E82CD684BB3541986CFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4QtoWniuKIEucTx9fPCIHZkDWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a0919d-a019-419e-acc2-4c84abefc09c/1/h4QtoWniuKIEucTx9fPCIHZkDWo.mft
Manifest number: DA
Signing time: Fri 15 Nov 2024 10:00:33 +0000
Manifest this update: Fri 15 Nov 2024 10:00:33 +0000
Manifest next update: Sat 16 Nov 2024 10:00:33 +0000
Files and hashes: 1: h4QtoWniuKIEucTx9fPCIHZkDWo.crl (hash: D7TCu6kirbavGPPbIp/nIkZWcy7VtyonxJauNSBLjNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:44:6c:88:a6:8e:82:cd:68:4b:b3:54:19:86:cf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87842da169e2b8a204b9c4f1f5f3c22076640d6a
Validity
Not Before: Nov 15 10:00:33 2024 GMT
Not After : Nov 16 10:00:33 2024 GMT
Subject: CN=518b0e2e555e5d888d0f928f1474f38ceb56236d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:6b:62:c0:9e:94:35:e5:b2:70:78:c7:0a:
07:b9:73:24:f8:d0:22:8f:ed:f2:c3:52:87:bd:1e:
58:cc:28:a5:7e:26:32:6a:a5:7f:3c:a3:3e:a5:cd:
0c:9c:28:26:bf:b6:76:c9:89:ca:b8:7f:0f:99:88:
68:1a:6b:fe:11:a7:aa:4a:32:44:46:e6:9d:14:b1:
03:19:37:d1:89:2b:ed:ba:29:cc:14:5f:09:73:7a:
5b:1e:42:40:dc:47:11:12:65:d6:70:3a:21:81:16:
4e:6c:4a:5f:d6:ea:f8:32:6b:62:ec:ef:bd:c3:e3:
f9:5e:f6:e2:4e:66:15:16:58:9c:f3:38:6a:a2:e2:
4d:63:97:17:ea:07:4f:24:4c:ae:d1:09:ca:5d:c4:
49:d6:64:26:77:d2:a7:ce:2a:be:c1:48:70:69:3b:
9e:d1:44:05:e5:74:a4:3d:19:f7:02:6f:57:d9:e3:
57:c7:1b:e6:c0:46:b5:44:04:f5:f5:a4:6c:04:2d:
cd:b7:c3:98:df:63:60:fc:09:ea:ab:14:94:02:da:
c2:b6:0f:15:2b:03:4d:62:b2:8b:03:5e:22:00:33:
9d:fd:df:e6:05:e1:b7:5d:26:fa:3d:04:0d:b5:35:
a7:54:c6:7d:d4:75:d3:f0:df:14:58:a7:16:48:90:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8B:0E:2E:55:5E:5D:88:8D:0F:92:8F:14:74:F3:8C:EB:56:23:6D
X509v3 Authority Key Identifier:
keyid:87:84:2D:A1:69:E2:B8:A2:04:B9:C4:F1:F5:F3:C2:20:76:64:0D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4QtoWniuKIEucTx9fPCIHZkDWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a0919d-a019-419e-acc2-4c84abefc09c/1/h4QtoWniuKIEucTx9fPCIHZkDWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a0919d-a019-419e-acc2-4c84abefc09c/1/h4QtoWniuKIEucTx9fPCIHZkDWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:90:d5:7d:77:68:86:7c:1c:a9:d8:d4:65:ad:54:72:63:a7:
77:9b:c1:4e:29:ac:ae:43:39:76:e4:b3:11:3b:50:d1:c9:18:
d6:1a:b3:c3:ef:47:13:37:da:d7:48:b1:fe:20:ac:3d:76:f5:
89:6f:ea:8e:b9:12:cc:a5:d0:60:e9:e9:32:f0:a3:e9:a9:18:
5b:25:d7:d9:b2:db:36:ab:f9:32:71:0d:0e:c2:85:44:fe:a0:
6f:cc:0d:81:e2:c0:3d:47:0e:9a:5b:8b:69:3b:f3:a9:30:82:
ba:ae:c1:9d:d9:a3:eb:8f:54:1d:9e:17:7c:95:45:5e:62:fc:
45:ce:20:b2:39:fa:8e:76:62:32:67:a1:c8:45:cc:e5:ba:fc:
fd:da:84:d7:d3:35:29:33:c5:5d:2b:d2:3c:04:a7:19:82:d6:
4c:56:13:5d:eb:ef:2c:13:3e:8a:e7:f6:62:a5:f0:e9:00:ea:
17:37:5d:fc:4c:bf:ba:a5:07:dd:45:e7:40:30:33:3b:c1:6f:
f8:aa:c5:be:62:b3:49:7f:25:c3:91:60:13:28:b4:91:b5:db:
5a:e0:af:94:a5:e6:66:65:e7:62:7f:85:b3:90:95:ff:fb:d0:
da:d4:1d:60:36:05:7b:72:9d:d2:d2:18:4d:7f:74:28:f4:2c:
ae:f5:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:19 2025 by rpki-client