Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.mft
File: xjl2tLmyrJALJP9B5k5FXg8c5yU.mft (raw, json)
Hash identifier: cht/VP7Eudh4o/wwVGLRToyXHzBcyXiXUDNMiP/hDnY=
Subject key identifier: DA:47:D1:27:E8:F1:27:A8:06:EC:1C:0C:B1:63:59:F9:81:73:5E:4E
Authority key identifier: C6:39:76:B4:B9:B2:AC:90:0B:24:FF:41:E6:4E:45:5E:0F:1C:E7:25
Certificate issuer: /CN=c63976b4b9b2ac900b24ff41e64e455e0f1ce725
Certificate serial: 018B8F7A95A57C4595389E3D00BCFF00F3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjl2tLmyrJALJP9B5k5FXg8c5yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.mft
Manifest number: 0879
Signing time: Thu 02 Nov 2023 10:00:57 +0000
Manifest this update: Thu 02 Nov 2023 10:00:57 +0000
Manifest next update: Fri 03 Nov 2023 10:00:57 +0000
Files and hashes: 1: xjl2tLmyrJALJP9B5k5FXg8c5yU.crl (hash: ooUN8cI+I3ftF3p3X6zTD4Bzm6bme5VGgDguG+vdP84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:7a:95:a5:7c:45:95:38:9e:3d:00:bc:ff:00:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63976b4b9b2ac900b24ff41e64e455e0f1ce725
Validity
Not Before: Nov 2 10:00:57 2023 GMT
Not After : Nov 3 10:00:57 2023 GMT
Subject: CN=da47d127e8f127a806ec1c0cb16359f981735e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:75:24:79:e1:ff:fa:dc:4b:bf:e5:2d:aa:
4b:f9:e8:67:70:26:92:1d:78:70:b8:8b:a5:56:28:
8f:09:0d:dd:a4:c8:77:db:b7:51:73:15:e0:01:66:
9d:82:64:dc:bf:b2:73:91:da:72:a8:c5:f3:2e:05:
eb:1a:db:73:18:44:aa:0f:04:50:35:87:29:1e:cb:
8a:59:8c:98:48:78:fb:f4:ae:b6:dc:93:d3:a3:75:
fe:52:21:a7:c8:1a:1b:2e:83:50:e7:65:56:76:ed:
08:c0:95:b8:d5:26:16:69:7b:eb:2d:f1:d8:18:3d:
57:b3:66:84:5e:0c:42:c3:17:19:16:0d:03:d6:43:
31:83:c8:90:94:d1:1a:cd:e2:7a:8e:32:66:41:e0:
ad:f1:5b:a8:df:cc:a6:7a:23:6a:91:76:94:66:24:
73:72:49:b9:16:60:5c:b0:82:99:f8:ed:83:1d:7a:
93:3f:75:92:6d:70:ab:3f:7a:0d:05:58:d2:44:52:
b5:cf:7d:07:7a:19:7a:5b:c4:fd:b0:16:06:25:ae:
75:33:cb:7e:65:c2:3a:35:6a:db:25:af:46:95:01:
60:d9:c2:69:0e:1d:47:4e:b5:91:80:2c:24:a3:5b:
4d:d8:02:cd:49:17:64:ec:60:40:aa:3d:a0:8b:c0:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:47:D1:27:E8:F1:27:A8:06:EC:1C:0C:B1:63:59:F9:81:73:5E:4E
X509v3 Authority Key Identifier:
keyid:C6:39:76:B4:B9:B2:AC:90:0B:24:FF:41:E6:4E:45:5E:0F:1C:E7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjl2tLmyrJALJP9B5k5FXg8c5yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:83:35:3a:d1:9d:44:9d:75:7b:1f:2b:6a:05:49:c2:d6:a2:
89:60:2e:87:d7:6f:be:e5:cd:f8:43:f3:61:52:56:d1:86:2c:
10:05:9e:d0:d6:25:d8:e3:96:35:2d:5f:9e:55:d6:6d:f3:e5:
a4:6f:7d:bb:06:ef:a0:7f:1a:83:84:e8:79:39:83:24:42:87:
3f:fe:b2:a8:9d:d7:30:de:bf:6a:31:5e:49:e7:18:a7:a6:2f:
d7:0b:94:86:30:9f:cd:20:7c:f5:79:10:13:21:b6:68:10:07:
57:28:25:c4:8f:64:b0:62:82:a8:5f:c1:95:3c:88:4e:ab:55:
e0:43:e2:c2:ac:1f:0d:19:09:d0:7b:87:63:68:2b:5d:0a:4b:
35:c5:09:cb:f2:e7:44:38:9f:da:c5:02:4a:40:a6:d8:ce:80:
7d:18:06:b1:b6:1c:a9:c6:bb:4f:fe:84:57:17:1a:e7:06:b9:
01:ff:ff:c5:26:7c:b2:8b:e6:c3:f4:5c:84:dc:74:61:7f:6e:
41:06:f4:01:82:c9:36:56:e5:a5:7b:d4:00:97:d9:0c:29:8e:
52:88:e4:05:bc:d0:ac:97:73:15:fe:ec:64:54:85:c5:1f:0d:
03:ab:cc:5b:af:9a:ee:8e:34:90:ec:45:31:81:d8:de:8c:3e:
c7:e5:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 15:41:40 2023 by rpki-client on console-fra.rpki-client.org