Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/dZpnpj2wkbr5UNUczSCCfbgSWxM.mft
File: dZpnpj2wkbr5UNUczSCCfbgSWxM.mft (raw, json)
Hash identifier: Cs/toBB0kVEeWTg48zRTD1lGuf1VexGhM+fNIfCSBmo=
Subject key identifier: DB:20:DA:53:27:2F:EB:7B:9A:DE:C4:E0:2B:D2:00:83:D7:B8:A4:67
Authority key identifier: 75:9A:67:A6:3D:B0:91:BA:F9:50:D5:1C:CD:20:82:7D:B8:12:5B:13
Certificate issuer: /CN=759a67a63db091baf950d51ccd20827db8125b13
Certificate serial: 018C1FE3B78A1E41E9BD0C917EBBA34ADB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZpnpj2wkbr5UNUczSCCfbgSWxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/dZpnpj2wkbr5UNUczSCCfbgSWxM.mft
Manifest number: 0888
Signing time: Thu 30 Nov 2023 11:01:06 +0000
Manifest this update: Thu 30 Nov 2023 11:01:06 +0000
Manifest next update: Fri 01 Dec 2023 11:01:06 +0000
Files and hashes: 1: dZpnpj2wkbr5UNUczSCCfbgSWxM.crl (hash: l3e2/amzX5hFVob7C6qrwhUq8odEA1jd9yHdy1DBpac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:e3:b7:8a:1e:41:e9:bd:0c:91:7e:bb:a3:4a:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759a67a63db091baf950d51ccd20827db8125b13
Validity
Not Before: Nov 30 11:01:06 2023 GMT
Not After : Dec 1 11:01:06 2023 GMT
Subject: CN=db20da53272feb7b9adec4e02bd20083d7b8a467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:7e:46:f7:df:7e:50:83:75:84:c0:a8:dc:
6d:b9:bd:7b:1d:b6:6a:37:c8:53:e9:20:e4:af:0d:
b2:dc:e2:21:9e:49:c7:c8:00:e7:d3:60:7a:48:67:
82:71:ce:7f:a5:25:72:0e:cb:2f:21:18:04:63:66:
50:1e:40:05:24:1e:03:4b:8b:f0:ba:b8:6c:e3:41:
8f:31:b6:97:84:d2:0d:f8:de:18:9c:d4:84:c3:76:
90:86:da:52:3d:b4:3d:17:17:d9:d3:a5:0c:1d:85:
9b:78:8c:45:e1:45:ca:38:be:37:0f:06:f6:be:89:
65:2a:a5:b0:f1:fc:26:c9:d6:36:27:6b:7b:e7:c4:
9f:6c:f7:1d:67:bc:6b:fe:78:21:ab:e5:fa:b2:87:
a4:66:19:fb:bf:98:a5:72:3f:c5:0b:ed:89:10:7b:
80:ee:5f:a9:43:e7:ae:64:73:83:d1:4d:34:7c:cd:
8f:e3:08:b0:b6:5a:09:4d:9e:10:8d:c1:b4:1c:72:
a9:c8:78:ac:d9:45:04:be:27:0e:c2:aa:3c:20:f9:
04:53:d9:88:fa:73:ee:14:b9:5d:88:d9:69:6c:10:
86:05:92:0f:62:c1:0d:18:8a:eb:86:bf:52:b0:fc:
21:2f:b5:ea:cb:69:86:49:63:b2:ef:69:c9:72:b7:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:DA:53:27:2F:EB:7B:9A:DE:C4:E0:2B:D2:00:83:D7:B8:A4:67
X509v3 Authority Key Identifier:
keyid:75:9A:67:A6:3D:B0:91:BA:F9:50:D5:1C:CD:20:82:7D:B8:12:5B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZpnpj2wkbr5UNUczSCCfbgSWxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/dZpnpj2wkbr5UNUczSCCfbgSWxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/dZpnpj2wkbr5UNUczSCCfbgSWxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:60:de:ad:e3:59:c6:96:5c:7e:a9:9c:ea:4a:f2:ed:2d:
ff:f2:52:1b:3b:59:79:21:80:dc:05:64:3a:9f:d0:07:ed:cc:
1d:d7:b8:db:82:79:da:30:39:d1:42:42:74:02:70:e7:e9:15:
35:94:55:65:3c:4d:ff:1e:e6:fd:0f:67:e4:aa:41:b1:59:c5:
14:0d:fe:5d:70:c5:a4:9c:3b:a1:50:e7:a7:93:eb:9c:b5:81:
33:ef:08:a0:41:f1:6f:bc:b3:15:f1:d9:11:81:e5:9f:3c:13:
e3:ed:8a:2e:80:ff:19:32:cd:05:5f:30:22:26:89:b9:f4:8f:
e9:45:aa:d2:4f:9c:0d:fe:9f:3a:c1:b7:7c:0c:d5:ea:ef:cf:
0d:4f:78:27:e6:c0:09:d5:17:b7:15:9d:fa:55:a7:e4:0c:d9:
22:85:6f:a2:ac:01:9b:e5:af:b5:9d:8c:37:c9:38:15:2e:a7:
25:28:3e:9d:dc:bb:d3:60:11:c3:7c:c5:34:57:80:e3:3a:af:
f1:1a:bd:1d:e3:8c:db:5e:ea:b7:bf:fc:15:3c:19:6a:3c:33:
4f:8c:c0:06:43:5c:93:80:7c:2f:a9:9b:27:88:6c:a8:e3:20:
9f:13:a3:4f:ee:9a:6c:0a:5d:8c:f9:d9:27:8f:e6:4d:ed:9d:
fc:6a:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 14:10:04 2023 by rpki-client on console-ams.rpki-client.org