Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/806kLhvHWA1ErisZyovnI7b5CyU.mft
File: 806kLhvHWA1ErisZyovnI7b5CyU.mft (raw, json)
Hash identifier: GzLSocZobRPabr7WtCJ7F8EL6woo/8o7PzTyk/7ILmE=
Subject key identifier: 9F:5C:EA:66:39:EC:6A:35:D9:EC:A5:E4:50:6F:56:B2:1D:BE:3C:62
Authority key identifier: F3:4E:A4:2E:1B:C7:58:0D:44:AE:2B:19:CA:8B:E7:23:B6:F9:0B:25
Certificate issuer: /CN=f34ea42e1bc7580d44ae2b19ca8be723b6f90b25
Certificate serial: 018D6A567A507977E78A34625A7398680807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/806kLhvHWA1ErisZyovnI7b5CyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/806kLhvHWA1ErisZyovnI7b5CyU.mft
Manifest number: 0843
Signing time: Fri 02 Feb 2024 15:01:08 +0000
Manifest this update: Fri 02 Feb 2024 15:01:08 +0000
Manifest next update: Sat 03 Feb 2024 15:01:08 +0000
Files and hashes: 1: 806kLhvHWA1ErisZyovnI7b5CyU.crl (hash: OYgTV3ogyc+NOJXnEU0doQi4o0IYuvUjqamqArped3I=)
2: ptzy-laO6LsCk2nVChzwI3ZC4ys.roa (hash: nr5pgi+6DdAsEh9ZkOmDvvSSp0ykiWYgJ+ddXC0YW2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:56:7a:50:79:77:e7:8a:34:62:5a:73:98:68:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f34ea42e1bc7580d44ae2b19ca8be723b6f90b25
Validity
Not Before: Feb 2 15:01:08 2024 GMT
Not After : Feb 3 15:01:08 2024 GMT
Subject: CN=9f5cea6639ec6a35d9eca5e4506f56b21dbe3c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:fc:1c:7d:84:3f:80:ae:0e:86:b4:e1:80:
a0:6a:a1:7f:a4:e7:3b:00:cd:f8:32:0c:b2:a1:2a:
22:65:2e:e5:15:de:00:fd:b7:78:17:ec:a1:01:3d:
1d:cf:d6:d9:9b:ab:3e:3d:c6:26:bf:86:ce:6d:48:
89:c2:7b:32:b0:5f:ac:4e:50:f8:d7:fe:20:04:8e:
3f:67:97:a2:5c:7c:d2:5d:bd:bd:61:36:86:61:95:
6b:04:99:8b:d9:56:f1:01:ac:d1:ef:6f:68:12:70:
41:e7:be:98:f4:af:a0:5e:8e:25:7b:0f:a8:d1:14:
ab:f8:7b:5e:31:05:a7:71:b9:31:cb:d0:d7:ae:73:
a9:26:ba:06:92:04:56:3e:eb:04:34:9c:80:b4:01:
34:2b:14:32:dd:02:c8:0b:4e:15:19:52:09:9b:ec:
12:b3:43:b3:46:88:4d:dd:45:aa:5f:60:59:0f:c3:
d9:0f:0f:47:cd:44:cd:9a:8e:be:0c:41:81:eb:8f:
7f:70:a4:b8:20:cb:44:1b:cc:88:c7:1c:64:9b:eb:
dd:a5:e9:2e:30:d9:8c:f0:f5:6a:f9:e9:95:1b:7d:
ef:33:2a:b0:16:28:36:bf:95:65:da:31:5f:82:01:
26:d4:f1:ef:ce:41:2c:22:6a:27:ca:a1:8c:79:54:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:EA:66:39:EC:6A:35:D9:EC:A5:E4:50:6F:56:B2:1D:BE:3C:62
X509v3 Authority Key Identifier:
keyid:F3:4E:A4:2E:1B:C7:58:0D:44:AE:2B:19:CA:8B:E7:23:B6:F9:0B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/806kLhvHWA1ErisZyovnI7b5CyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/806kLhvHWA1ErisZyovnI7b5CyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/806kLhvHWA1ErisZyovnI7b5CyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:49:28:23:bb:a7:47:49:c5:82:8a:75:e7:34:f4:f7:37:53:
95:c2:e8:29:8f:93:de:5d:e7:48:aa:d0:ae:97:cc:00:b3:12:
46:b0:45:ce:a6:f5:8f:8d:53:ad:8a:02:5b:4a:3a:a1:5b:92:
e8:e7:4e:a8:77:c6:85:77:9c:fb:02:be:4a:b4:47:c2:91:c8:
05:00:bd:4e:9d:5a:01:55:e2:88:a0:1a:78:7e:ae:20:7e:43:
f5:f2:5f:23:17:cd:48:9b:dc:b0:61:a1:a7:dd:7a:8b:4e:d7:
92:9b:9e:44:d8:0e:f4:45:9d:62:8d:15:3c:86:96:d9:19:37:
be:7d:a2:61:5f:37:21:aa:0e:09:f4:8e:cd:dc:32:f9:49:ab:
92:16:7f:2b:f6:34:d1:96:c0:36:cd:f2:d9:29:a9:8e:39:96:
ac:e0:e7:95:43:ec:3f:7a:19:8d:99:ad:fa:e8:b5:5f:96:7f:
ce:83:96:c4:87:af:85:d8:81:95:8f:7b:03:0e:65:3a:a8:25:
e3:96:c3:35:7a:61:46:82:da:6a:e9:5a:11:a6:00:bf:48:e4:
19:c1:60:5c:9d:03:4b:61:d7:3c:77:5a:94:b6:7d:d7:f7:aa:
89:64:3f:1d:bc:4b:68:d9:af:09:90:9e:a3:3a:a3:33:c8:a1:
71:0e:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:35:38 2024 by rpki-client on console-ams.rpki-client.org