Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/2KcRsTXf1fNLu5jBADb42PDBcx8.mft
File: 2KcRsTXf1fNLu5jBADb42PDBcx8.mft (raw, json)
Hash identifier: m/5XuCEpzCFsqZryeVqFUslCo6Ss3pRpEwAIvQEskmA=
Subject key identifier: 2B:28:84:05:FA:57:6A:78:4D:5C:09:B8:F1:BA:C4:9E:3B:36:52:CD
Authority key identifier: D8:A7:11:B1:35:DF:D5:F3:4B:BB:98:C1:00:36:F8:D8:F0:C1:73:1F
Certificate issuer: /CN=d8a711b135dfd5f34bbb98c10036f8d8f0c1731f
Certificate serial: 018C377EC002850E9664581980F8813EBFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KcRsTXf1fNLu5jBADb42PDBcx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/2KcRsTXf1fNLu5jBADb42PDBcx8.mft
Manifest number: 08A9
Signing time: Tue 05 Dec 2023 01:01:42 +0000
Manifest this update: Tue 05 Dec 2023 01:01:42 +0000
Manifest next update: Wed 06 Dec 2023 01:01:42 +0000
Files and hashes: 1: 2KcRsTXf1fNLu5jBADb42PDBcx8.crl (hash: HkRr+ILm7JBz8Hf2FPQpmo4P6K8F2gy/JG32MZJIZ5Y=)
2: DoB_m3bO3Alfh3XsJ5IDWGGLpH4.roa (hash: T+z8kpd7f2yzPGuk4FQyQ0yuOUjnjlq7Qbhdx2xLUgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:37:7e:c0:02:85:0e:96:64:58:19:80:f8:81:3e:bf:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a711b135dfd5f34bbb98c10036f8d8f0c1731f
Validity
Not Before: Dec 5 01:01:42 2023 GMT
Not After : Dec 6 01:01:42 2023 GMT
Subject: CN=2b288405fa576a784d5c09b8f1bac49e3b3652cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f9:7c:ee:c2:6c:36:65:97:f5:1c:76:17:28:
eb:1d:e9:f2:0b:22:56:8c:e0:17:d6:7a:76:22:97:
a5:50:54:a1:bf:22:9e:da:5d:2a:4e:01:19:79:ef:
b8:f6:48:1f:16:f6:7c:06:9b:b9:11:5a:81:c2:9b:
fc:a7:64:cf:5d:ae:41:ef:db:ce:ab:3f:a2:fa:ff:
93:8c:26:ca:b1:5a:ba:75:11:7f:4a:38:02:c8:42:
1b:63:03:11:f0:46:ba:fc:d0:1d:ce:c9:4d:0d:0c:
6f:1f:09:62:43:50:de:a6:c6:e2:2a:c8:00:0e:a6:
77:be:b4:7f:fc:86:29:58:ed:72:55:ae:49:6f:4c:
fc:e3:0e:63:6d:b3:84:77:6b:5c:20:96:0d:b8:ae:
8b:d7:fe:da:21:20:fd:9f:9f:28:ec:fd:f6:96:2d:
0c:b5:d2:1a:2a:1f:35:35:eb:f4:e2:22:da:a1:ea:
54:b8:c5:b5:9d:9b:2f:59:56:c7:e8:bc:85:3c:8e:
42:dc:14:0f:74:c4:72:92:85:6d:89:c1:89:5c:af:
1b:05:c0:bc:92:6c:f1:b7:5b:18:5e:0f:ba:73:36:
af:50:08:8c:95:f4:3f:a4:05:36:a5:8b:b7:98:6a:
bb:d2:58:44:ca:35:6e:0c:73:85:06:2b:77:9e:d8:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:84:05:FA:57:6A:78:4D:5C:09:B8:F1:BA:C4:9E:3B:36:52:CD
X509v3 Authority Key Identifier:
keyid:D8:A7:11:B1:35:DF:D5:F3:4B:BB:98:C1:00:36:F8:D8:F0:C1:73:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KcRsTXf1fNLu5jBADb42PDBcx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/2KcRsTXf1fNLu5jBADb42PDBcx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7d3fbf-3fbc-4025-aab1-f108e5552720/1/2KcRsTXf1fNLu5jBADb42PDBcx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:51:d6:6a:4a:4d:cb:05:f5:49:f3:d1:bf:ed:a2:4f:58:
9f:9c:8b:0f:4c:fa:bc:b2:45:41:e8:dd:4d:91:a6:18:f9:8f:
67:f8:82:82:51:dc:80:71:65:f7:ff:e1:02:c1:5d:5e:d2:3c:
e4:18:9d:6b:e0:48:1e:15:bf:13:57:42:ad:b9:51:e2:14:a0:
eb:91:e6:20:0f:1e:d0:9d:f6:6a:56:f0:18:75:b5:3f:b7:2d:
af:f3:83:40:60:94:d3:92:96:d6:c8:54:ff:eb:5d:1e:72:52:
27:30:cf:8a:82:55:48:db:70:60:37:74:05:48:92:17:6d:05:
d2:d7:8f:65:d6:68:c3:64:f1:40:ac:d9:61:67:61:65:a6:3f:
c1:86:14:21:b0:e6:72:fe:60:81:f3:c7:86:42:09:1d:c0:37:
d6:c5:35:43:2d:e8:24:d3:85:9c:a6:33:63:f4:d8:cb:8b:71:
7f:27:d7:c5:39:77:d2:db:4d:dd:21:53:e4:83:8f:2c:bf:1a:
f0:43:17:e8:24:e3:06:7a:39:71:9e:e6:fa:e0:0a:07:2b:81:
76:ef:a2:53:7a:78:cc:ad:be:74:25:df:d9:28:5a:d6:e2:e6:
a1:c5:13:d8:67:8f:61:7d:f2:30:4a:1d:41:ea:6b:22:ba:19:
43:19:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 09:04:20 2023 by rpki-client on console-ams.rpki-client.org