Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/bo6Eih2Qt7UpJLiscNLAK_ipyi0.mft
File: bo6Eih2Qt7UpJLiscNLAK_ipyi0.mft (raw, json)
Hash identifier: zUeK09PaCrmo3ZngEdqsCktONlCRHdTSnfVfUd4GXeI=
Subject key identifier: B2:DE:E8:A7:CC:04:12:A9:E9:A7:58:83:EF:F9:86:58:89:C6:A4:B2
Authority key identifier: 6E:8E:84:8A:1D:90:B7:B5:29:24:B8:AC:70:D2:C0:2B:F8:A9:CA:2D
Certificate issuer: /CN=6e8e848a1d90b7b52924b8ac70d2c02bf8a9ca2d
Certificate serial: 018B8F431783E66A1DC3DFF218E6F6F8189D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bo6Eih2Qt7UpJLiscNLAK_ipyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/bo6Eih2Qt7UpJLiscNLAK_ipyi0.mft
Manifest number: 020A
Signing time: Thu 02 Nov 2023 09:00:20 +0000
Manifest this update: Thu 02 Nov 2023 09:00:20 +0000
Manifest next update: Fri 03 Nov 2023 09:00:20 +0000
Files and hashes: 1: 45sulxCjKueGkcSoIQyS903vz2o.roa (hash: 2TbhEP+eBmKKQ9EeTD4KKCbKOPNSicxW5dkFbhakFQ4=)
2: bo6Eih2Qt7UpJLiscNLAK_ipyi0.crl (hash: 2eYBfJubMEzU8oO7Paz9DdzP8+Dy5b0zAGYvUD6+1JA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:17:83:e6:6a:1d:c3:df:f2:18:e6:f6:f8:18:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8e848a1d90b7b52924b8ac70d2c02bf8a9ca2d
Validity
Not Before: Nov 2 09:00:20 2023 GMT
Not After : Nov 3 09:00:20 2023 GMT
Subject: CN=b2dee8a7cc0412a9e9a75883eff9865889c6a4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:da:fe:75:13:af:df:02:c1:74:d1:98:c9:
f5:1e:e2:6f:9d:23:df:bd:a6:7e:14:76:0e:8e:28:
c4:93:a0:be:8c:7e:38:1a:63:94:1b:10:01:bb:82:
52:41:08:2b:2a:56:34:ea:8f:c5:24:ae:75:0f:a0:
a8:c8:6f:5d:b3:7c:1b:a9:5a:78:a5:af:f6:8b:55:
72:86:41:eb:5a:f2:89:71:26:fa:9e:4d:d6:88:b5:
0d:d8:41:04:e2:8f:69:ed:81:39:09:f0:2a:f6:03:
3a:00:6f:c0:8d:6e:33:16:bc:08:3c:6e:37:f4:d6:
b4:07:f1:9d:29:b1:38:87:2e:cc:99:26:fe:a6:3b:
56:5c:c5:c6:93:94:20:c9:de:90:0f:99:00:c6:c4:
f2:42:55:d2:7c:4f:f6:f0:db:1d:3c:0f:d2:fd:57:
0f:20:7c:2a:40:89:c7:a1:18:e9:23:36:d1:f7:65:
f3:45:3b:f3:c0:53:59:c2:42:35:a0:7c:93:23:eb:
e8:2b:30:77:32:33:be:e2:65:59:9b:98:e7:32:8a:
f5:b3:5b:13:62:df:28:34:1d:12:9e:1b:8d:4f:6c:
50:dd:82:11:7f:4f:0e:43:a1:8d:27:30:df:07:68:
25:64:fb:bc:34:cc:d5:f2:7b:d0:93:39:f4:b4:3d:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:E8:A7:CC:04:12:A9:E9:A7:58:83:EF:F9:86:58:89:C6:A4:B2
X509v3 Authority Key Identifier:
keyid:6E:8E:84:8A:1D:90:B7:B5:29:24:B8:AC:70:D2:C0:2B:F8:A9:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bo6Eih2Qt7UpJLiscNLAK_ipyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/bo6Eih2Qt7UpJLiscNLAK_ipyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a408dd-3d37-49b1-bc50-b7bb5dcec443/1/bo6Eih2Qt7UpJLiscNLAK_ipyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:33:5c:01:0f:69:55:c6:77:d4:bd:05:63:e1:49:6d:c4:
21:d9:6b:14:22:f2:4a:0d:f5:6d:63:35:b5:76:a6:04:23:6c:
11:74:9c:80:b6:29:79:81:c0:8e:0b:53:c1:c5:10:80:ce:e6:
16:8f:8c:2f:bf:09:01:60:83:59:77:f0:18:2c:5f:68:6e:6c:
74:74:7c:5d:bd:c4:b0:0b:25:ba:97:d2:3f:f0:f7:bd:08:8c:
85:bb:16:55:06:7f:cd:f9:91:97:8a:26:cf:71:11:34:08:19:
72:5f:db:d9:e7:c6:b1:ef:e8:7a:83:9a:9d:ca:1f:2b:d2:f1:
ab:4d:2a:1a:49:e2:77:21:6c:8e:09:38:43:8d:a1:f0:b7:11:
0b:31:68:d5:62:13:41:58:70:0b:b6:7c:ff:ac:ff:6e:25:36:
48:2a:4a:48:d4:04:ab:22:56:73:36:06:94:1e:22:6c:be:e5:
36:f3:c0:1d:76:2c:53:7c:2a:5e:6c:72:5d:49:ba:e7:d6:de:
f7:60:98:fd:bb:bf:df:b7:48:02:0f:6b:46:75:9f:27:d9:5f:
19:1e:d0:05:81:3d:3c:ae:59:9f:2a:af:72:fb:ec:82:14:c0:
6d:db:92:1a:88:24:f9:d4:57:0a:6c:68:2f:6c:ed:04:68:ee:
23:26:85:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:37 2025 by rpki-client