Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/_fS2Ie63OdJPySrXjSd22nuHACc.mft
File: _fS2Ie63OdJPySrXjSd22nuHACc.mft (raw, json)
Hash identifier: qsYWg/9NCfhcM2tBdMoLZZre3JxSRGYuHRMfuVyWmr8=
Subject key identifier: 38:B8:88:3A:3B:65:7E:D9:62:45:F8:91:15:E0:2C:D0:10:1C:8B:43
Authority key identifier: FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27
Certificate issuer: /CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
Certificate serial: 018C678EA55B0B799B2C11356C802A26F932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/_fS2Ie63OdJPySrXjSd22nuHACc.mft
Manifest number: 095A
Signing time: Thu 14 Dec 2023 09:00:50 +0000
Manifest this update: Thu 14 Dec 2023 09:00:50 +0000
Manifest next update: Fri 15 Dec 2023 09:00:50 +0000
Files and hashes: 1: _fS2Ie63OdJPySrXjSd22nuHACc.crl (hash: NUj4DvrBG2y0AG02FrQQb4apKh1o3o7ixzq0+B+MJfw=)
2: gLhrPpPR8ivmGTY6yS9cqfvrncU.roa (hash: /YHr8kMjL60j2OOao7K9YrqZr5h8vvbclv95IQ5i8wc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:8e:a5:5b:0b:79:9b:2c:11:35:6c:80:2a:26:f9:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf4b621eeb739d24fc92ad78d2776da7b870027
Validity
Not Before: Dec 14 09:00:50 2023 GMT
Not After : Dec 15 09:00:50 2023 GMT
Subject: CN=38b8883a3b657ed96245f89115e02cd0101c8b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bc:4f:6d:47:07:c9:2c:93:b1:bb:e4:4c:53:
2d:2e:52:95:0a:5c:9a:ed:82:5e:5f:7a:ad:24:b0:
85:bc:ac:18:15:9c:e1:08:42:64:a0:51:15:9c:3a:
49:44:55:49:a5:cd:59:5a:2e:bb:3e:6b:4e:9b:03:
27:c4:22:af:7b:ac:58:df:03:3e:5c:1a:33:b5:af:
15:75:97:41:a6:0a:e4:2b:dd:a8:22:b7:c4:e9:d3:
36:c5:79:1d:56:6c:3c:d5:b0:af:20:ae:58:1b:68:
9e:39:15:d4:d2:4a:b1:61:c1:92:e0:d7:b3:ca:64:
ab:80:91:4b:82:3a:5d:26:53:e9:0c:c0:05:45:da:
5c:a5:64:7c:e7:46:fd:bc:4b:58:aa:05:e8:86:89:
c5:1d:d5:5f:d0:5a:b3:77:71:6b:e3:ee:55:67:fc:
8f:79:11:89:5f:33:54:da:f8:5f:ef:55:81:76:61:
4b:9f:c4:ac:c2:93:fd:a9:8b:7d:ef:6a:e1:a4:7b:
47:dd:ca:38:ff:61:c2:3c:fb:85:15:c1:d9:57:10:
3c:ae:a6:07:c5:e6:b9:29:31:f6:ff:be:46:65:20:
c8:27:38:78:fb:5b:aa:5d:dc:c5:db:3e:59:28:8e:
f3:44:b5:e7:9b:9d:26:00:9c:9e:69:5b:ef:cf:15:
41:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:88:3A:3B:65:7E:D9:62:45:F8:91:15:E0:2C:D0:10:1C:8B:43
X509v3 Authority Key Identifier:
keyid:FD:F4:B6:21:EE:B7:39:D2:4F:C9:2A:D7:8D:27:76:DA:7B:87:00:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fS2Ie63OdJPySrXjSd22nuHACc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/_fS2Ie63OdJPySrXjSd22nuHACc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/47ada5-183f-446d-b705-023f2be5daa4/1/_fS2Ie63OdJPySrXjSd22nuHACc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c1:a6:0b:2d:33:0c:d9:b8:24:f1:e0:ba:8b:69:bd:d3:50:
c1:de:84:af:ad:14:e9:35:ed:ab:3d:e8:25:9b:5e:35:a7:9c:
f8:71:1f:6e:6e:e7:0f:59:3a:74:69:44:7b:f7:8f:ff:f7:b7:
c8:b9:24:c8:36:ca:cb:9f:bc:6f:25:55:ad:d2:76:71:93:fc:
62:a2:39:09:5f:91:71:85:11:b1:ed:cf:32:62:93:a6:c2:bd:
4d:8d:33:9c:af:16:e9:d0:db:47:b4:8f:f0:8a:dc:51:fd:88:
fc:99:4c:dc:43:d2:e0:a1:60:6f:d5:ae:2d:4b:5c:7f:e3:d5:
26:fc:15:67:73:4d:97:fd:21:4c:57:ca:11:39:43:31:20:9b:
73:0d:0c:11:c9:ca:a7:3c:90:b4:86:43:0b:fd:cc:5c:0b:0c:
f4:ed:53:61:a9:52:aa:2e:f7:c0:39:ba:ff:07:35:17:f1:b0:
9f:90:0d:28:ff:b2:a5:54:50:61:78:76:ff:c2:13:4f:50:38:
38:ed:4a:5c:ff:8d:0a:ed:d8:29:ea:98:65:1d:0d:cc:33:6a:
ef:70:20:b1:80:c3:c8:dc:b1:73:8c:4d:3a:5d:de:d9:db:d5:
03:09:23:76:d2:17:bd:6c:c0:94:6c:b4:50:0d:c7:d7:b2:ef:
ec:7b:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:31 2024 by rpki-client on console-fra.rpki-client.org