Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f39cb-6b89-4f76-9082-06483f574d12/1/U36JYBBulGXswrRb9Zox4SPTncI.mft
File: U36JYBBulGXswrRb9Zox4SPTncI.mft (raw, json)
Hash identifier: vOjHkywA/ZxAk9/5WiptLC7DSj6N6AOJAkof7pkYIvk=
Subject key identifier: 4A:10:00:1D:DB:A8:30:80:38:EA:27:B7:A3:C6:77:B3:3E:4C:22:F4
Authority key identifier: 53:7E:89:60:10:6E:94:65:EC:C2:B4:5B:F5:9A:31:E1:23:D3:9D:C2
Certificate issuer: /CN=537e8960106e9465ecc2b45bf59a31e123d39dc2
Certificate serial: 018B8978143C26122744B8346CDB87BAE8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U36JYBBulGXswrRb9Zox4SPTncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f39cb-6b89-4f76-9082-06483f574d12/1/U36JYBBulGXswrRb9Zox4SPTncI.mft
Manifest number: 0891
Signing time: Wed 01 Nov 2023 06:00:29 +0000
Manifest this update: Wed 01 Nov 2023 06:00:29 +0000
Manifest next update: Thu 02 Nov 2023 06:00:29 +0000
Files and hashes: 1: EPfd9abynvqCAfK7ukyzANX9cFw.roa (hash: d/ekpRIzYSMEVYvTb3glNDwndl/8yaknRou9//9OWck=)
2: U36JYBBulGXswrRb9Zox4SPTncI.crl (hash: WRjVU2wMYNCT034753VgJC8biPpwLVIF9nGQnvJhwW8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:78:14:3c:26:12:27:44:b8:34:6c:db:87:ba:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537e8960106e9465ecc2b45bf59a31e123d39dc2
Validity
Not Before: Nov 1 06:00:29 2023 GMT
Not After : Nov 2 06:00:29 2023 GMT
Subject: CN=4a10001ddba8308038ea27b7a3c677b33e4c22f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:4f:fa:bd:30:f0:3b:60:9e:15:46:be:0d:
b7:c8:b7:65:44:82:8c:c7:50:c4:6f:cc:77:3e:7e:
bc:f2:fa:a3:0b:3d:86:12:3c:de:c9:1d:7e:50:4e:
27:2b:9a:b2:b3:e5:e3:78:b5:8a:40:c5:a5:7f:7c:
a3:ad:d1:6a:21:a8:ea:da:77:f9:58:5b:29:82:af:
bf:6e:3b:b9:45:95:b1:24:af:b1:d5:4d:5d:eb:5d:
88:05:69:a4:eb:77:cb:21:29:01:51:af:f3:9c:91:
70:cd:be:3e:e4:d3:ab:d7:a2:24:c0:58:9e:f6:05:
fa:36:24:06:f0:a8:e8:e1:d6:e8:ee:7f:94:08:5d:
46:3a:68:87:56:63:e6:b1:66:90:8c:ee:e2:fe:6e:
6f:c9:37:7c:f2:95:0d:cf:10:86:b0:7e:c7:59:ee:
eb:ae:24:43:ba:93:b7:ff:3c:e4:66:5c:c1:dc:fd:
7b:ae:cc:38:fe:dc:f9:40:16:f8:64:6a:3f:27:4f:
4d:0e:90:98:8c:f6:17:ea:8e:dd:53:a5:29:0c:05:
cb:e8:4d:33:f3:b3:d3:38:2e:36:ae:ce:28:4d:94:
6f:43:01:59:4b:12:df:25:99:e1:32:3b:7c:90:2f:
32:a8:97:bb:3a:87:4f:e1:8f:f5:43:a2:e9:6a:ca:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:00:1D:DB:A8:30:80:38:EA:27:B7:A3:C6:77:B3:3E:4C:22:F4
X509v3 Authority Key Identifier:
keyid:53:7E:89:60:10:6E:94:65:EC:C2:B4:5B:F5:9A:31:E1:23:D3:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U36JYBBulGXswrRb9Zox4SPTncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f39cb-6b89-4f76-9082-06483f574d12/1/U36JYBBulGXswrRb9Zox4SPTncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f39cb-6b89-4f76-9082-06483f574d12/1/U36JYBBulGXswrRb9Zox4SPTncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:28:04:2e:5a:3c:0f:fe:ec:96:85:00:d8:ac:58:47:b3:
af:89:9f:4e:42:56:b7:da:8d:1b:2e:b7:0a:ae:94:72:fc:bb:
77:47:3e:2c:a7:70:32:68:5b:25:72:17:03:9b:06:98:e0:10:
85:69:8f:f5:45:d3:b3:73:b3:f0:99:c3:1e:80:ec:5c:70:3a:
30:3d:b0:c2:98:05:e0:99:23:b7:59:95:19:c0:36:fb:61:95:
aa:2f:a8:9f:b6:74:3c:43:0a:ba:ea:27:0a:95:9c:71:b1:4b:
12:a1:ff:f0:c1:a8:ce:c9:ae:93:04:37:3e:7a:0f:4d:bc:35:
e1:af:32:c5:85:52:6c:c3:6d:05:74:62:3d:5c:98:13:15:23:
c6:14:df:d9:a8:72:c7:bd:48:9a:be:c9:84:39:f2:c5:70:bb:
e3:af:9c:e3:2e:1c:8e:cc:c4:1a:06:2d:fb:6f:a1:45:4d:76:
87:73:ca:d0:bb:fd:d0:76:1f:81:b3:8a:fd:83:47:16:b5:f2:
b3:d0:fb:8c:85:be:9c:2c:e0:e0:7f:fa:e8:99:c6:e2:d9:d1:
ad:6e:93:7a:18:a6:35:d7:03:5c:fb:62:12:a7:27:bf:43:8d:
70:ad:f0:6b:3a:4a:61:6b:8f:00:bd:f4:c6:35:94:e5:39:72:
ac:7d:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:39:04 2023 by rpki-client on console-ams.rpki-client.org