Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/FkZGtii8J9L7JrSZpe2y4cTFCIo.mft
File: FkZGtii8J9L7JrSZpe2y4cTFCIo.mft (raw, json)
Hash identifier: cEC2Goz29TlQLJ+82alvNpm9tzQVAKfx/83pUKjlj/g=
Subject key identifier: 05:BB:0A:AB:C7:42:AE:F9:F5:83:A3:90:5B:61:B7:F2:A6:C6:FF:D2
Authority key identifier: 16:46:46:B6:28:BC:27:D2:FB:26:B4:99:A5:ED:B2:E1:C4:C5:08:8A
Certificate issuer: /CN=164646b628bc27d2fb26b499a5edb2e1c4c5088a
Certificate serial: 018B8940F8AC6EDE36DBDCF2FBD751286754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkZGtii8J9L7JrSZpe2y4cTFCIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/FkZGtii8J9L7JrSZpe2y4cTFCIo.mft
Manifest number: 0866
Signing time: Wed 01 Nov 2023 05:00:18 +0000
Manifest this update: Wed 01 Nov 2023 05:00:18 +0000
Manifest next update: Thu 02 Nov 2023 05:00:18 +0000
Files and hashes: 1: FkZGtii8J9L7JrSZpe2y4cTFCIo.crl (hash: fAzJ59iGC4j9sHMCgZ8CTL/4o474zHFFUyw0j7381I0=)
2: tDz7rmTPpJR84Qd565eMP6QtrDI.roa (hash: zdXOXHHeJieel1O/WoeHoq/qBMHI57mpcN5cQuHaMEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:40:f8:ac:6e:de:36:db:dc:f2:fb:d7:51:28:67:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=164646b628bc27d2fb26b499a5edb2e1c4c5088a
Validity
Not Before: Nov 1 05:00:18 2023 GMT
Not After : Nov 2 05:00:18 2023 GMT
Subject: CN=05bb0aabc742aef9f583a3905b61b7f2a6c6ffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c4:9a:cb:d5:eb:33:70:f3:75:3d:df:dc:b7:
f7:1a:90:d4:35:35:05:30:48:3d:b0:44:85:ab:40:
21:c3:98:b3:5e:c4:da:22:d1:cb:39:7e:3b:44:a1:
e1:d5:73:d2:b4:02:ad:74:f4:75:22:32:ef:41:c7:
8f:8e:bc:f4:c4:1e:b8:ff:7a:29:de:aa:ca:f7:19:
6a:e3:63:5d:45:20:de:52:04:47:61:47:38:b3:92:
b4:d5:58:eb:8b:69:71:0d:19:42:90:4f:21:ae:ce:
30:b7:f0:f4:a4:a8:e1:c8:24:fc:61:47:9a:c2:60:
ab:0d:2c:1d:25:da:bc:19:3c:e7:22:59:fd:ef:5f:
e5:5f:c4:7f:71:11:20:fc:7c:2f:69:9c:c0:23:56:
d3:25:f8:e7:86:4b:74:30:3b:f6:df:ab:e9:97:f2:
8d:48:b1:d6:74:e5:19:25:10:e5:33:b8:90:05:17:
27:fa:df:79:f1:18:35:7c:d8:1b:9e:ad:63:25:ba:
b9:ff:c8:2f:07:df:01:f3:f0:26:ed:ac:0c:39:54:
6b:85:b3:50:46:07:c0:b7:7d:28:6e:25:af:c9:d4:
a4:21:6d:63:1e:58:9f:60:50:c9:06:8d:66:ce:d1:
c5:b0:10:ec:d9:a4:24:6a:d9:a5:5f:8f:61:e7:10:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BB:0A:AB:C7:42:AE:F9:F5:83:A3:90:5B:61:B7:F2:A6:C6:FF:D2
X509v3 Authority Key Identifier:
keyid:16:46:46:B6:28:BC:27:D2:FB:26:B4:99:A5:ED:B2:E1:C4:C5:08:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkZGtii8J9L7JrSZpe2y4cTFCIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/FkZGtii8J9L7JrSZpe2y4cTFCIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/506fe1-9255-4f42-9d4a-9073d20c2d92/1/FkZGtii8J9L7JrSZpe2y4cTFCIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:e0:2b:45:3d:fc:73:a0:1e:5a:3a:c2:63:4b:4c:24:6e:b5:
ce:42:9c:85:d7:21:d7:3d:f1:a4:77:ed:a0:5f:a1:2e:c0:fb:
7e:90:3b:83:1d:97:18:3c:46:5d:98:1b:10:f4:59:64:77:98:
68:84:ee:d9:83:fe:54:e7:ab:90:2a:57:05:e6:db:40:7e:28:
53:4c:3f:50:a6:c6:85:aa:32:e6:bd:88:a1:41:8f:1c:1c:1a:
a2:de:14:1f:c1:35:53:20:99:42:f6:76:86:73:12:81:47:1e:
29:99:2d:f4:b4:73:be:0b:0a:41:04:af:65:07:ee:57:4b:e8:
22:6a:98:dc:14:03:84:b7:8a:aa:2c:36:04:0c:99:22:79:c6:
51:1e:22:0a:3c:78:a0:ba:b9:3a:72:50:b3:e4:0a:66:44:8f:
d2:04:4f:b4:83:6e:4b:25:6b:95:63:7d:f8:b3:28:38:c5:c2:
4c:79:a8:4d:54:01:0a:7a:1a:37:40:60:2a:66:29:0d:a8:ca:
e1:56:48:3f:58:83:0e:67:6a:6c:07:4a:3a:2b:2d:dc:89:cd:
6a:3d:22:21:e9:8d:be:70:65:bd:6d:2d:e5:72:74:b8:94:0f:
42:35:70:10:1a:df:bd:39:a4:be:01:9a:9c:c8:97:75:96:d4:
df:6b:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:04 2025 by rpki-client