Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.mft
File: _CMvDobCkeum1j6GYe8_CbwnpX4.mft (raw, json)
Hash identifier: 1UXjc3eTUZSAHxlFITgTtQUPlHmtUlqjVLoj320NNX4=
Subject key identifier: F1:AD:90:20:5E:59:30:12:19:38:4D:1A:A5:B3:27:2E:10:E0:25:6C
Authority key identifier: FC:23:2F:0E:86:C2:91:EB:A6:D6:3E:86:61:EF:3F:09:BC:27:A5:7E
Certificate issuer: /CN=fc232f0e86c291eba6d63e8661ef3f09bc27a57e
Certificate serial: 018B38C9AF2A28593CCCE378167B7F68B7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CMvDobCkeum1j6GYe8_CbwnpX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.mft
Manifest number: 0518
Signing time: Mon 16 Oct 2023 14:00:23 +0000
Manifest this update: Mon 16 Oct 2023 14:00:23 +0000
Manifest next update: Tue 17 Oct 2023 14:00:23 +0000
Files and hashes: 1: DOtsqXkjg2BZBFCWd4o1UNAAOJU.roa (hash: bH9aKXQNsI0RHqc3huJ3lKvcjkvZBj4/usRQ4grBMOA=)
2: _CMvDobCkeum1j6GYe8_CbwnpX4.crl (hash: DD6SybWLkH0whKeyGK1Qy24K1SELMrKvPvrHladp1kY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:c9:af:2a:28:59:3c:cc:e3:78:16:7b:7f:68:b7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc232f0e86c291eba6d63e8661ef3f09bc27a57e
Validity
Not Before: Oct 16 14:00:23 2023 GMT
Not After : Oct 17 14:00:23 2023 GMT
Subject: CN=f1ad90205e59301219384d1aa5b3272e10e0256c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:88:fb:83:21:61:d5:6c:9c:a9:17:df:7e:
3d:14:1d:dc:e5:31:5a:90:0a:f7:ea:19:23:fd:6d:
c9:26:56:71:72:ab:bb:b7:c4:b1:46:35:b4:f7:50:
9a:76:85:b8:20:38:98:87:f3:60:73:97:27:cc:82:
d9:d7:a9:3b:18:fb:0b:1e:39:cf:2a:c3:f8:c3:ad:
a2:3b:00:62:64:95:f5:80:a0:90:1c:64:20:e8:d0:
79:2f:8e:7b:4e:74:69:b6:5f:b9:68:f3:84:89:90:
09:47:7b:d3:03:8b:35:bf:a8:9f:b9:81:59:da:41:
82:73:61:cb:62:09:7f:66:d1:88:04:22:4f:4c:d5:
fd:28:bc:49:03:9e:88:e1:07:91:e3:07:09:65:c0:
78:06:e7:83:11:a1:ce:6c:03:e3:a8:da:42:d9:5c:
12:25:4d:f1:bc:f9:75:5e:48:0b:1e:33:dc:39:61:
56:d7:f9:bb:86:96:8e:ea:1e:18:61:c3:b2:ac:e6:
17:92:01:d8:0a:f1:34:31:0c:f7:d3:88:26:8d:c2:
60:39:22:bf:3d:2e:b2:3d:66:31:09:e0:31:96:2f:
d9:8d:24:2b:a3:d5:7e:85:66:9c:a2:48:8e:ca:37:
f9:e1:ea:4e:1d:0b:db:99:ad:ff:cb:fa:4b:d7:86:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AD:90:20:5E:59:30:12:19:38:4D:1A:A5:B3:27:2E:10:E0:25:6C
X509v3 Authority Key Identifier:
keyid:FC:23:2F:0E:86:C2:91:EB:A6:D6:3E:86:61:EF:3F:09:BC:27:A5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CMvDobCkeum1j6GYe8_CbwnpX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:91:ce:af:7b:4d:be:c6:8a:2e:bb:3e:a4:31:cc:15:39:08:
c1:5e:e1:30:ea:e4:31:70:ee:5d:20:70:ad:f7:75:3d:49:99:
ac:0b:05:76:8c:3a:6a:c2:62:6c:a6:84:a2:59:4f:45:cc:de:
3a:c8:e5:49:58:b1:ad:14:1a:11:53:1d:84:ad:be:a3:c9:5e:
de:6f:89:74:7d:12:2a:c8:87:eb:0b:4f:3c:a2:f8:58:29:72:
93:aa:d7:f2:3e:19:45:bc:e2:95:2f:0c:b5:73:bd:12:7f:18:
8a:79:be:e8:f8:6e:e9:86:5e:fb:51:17:81:c2:c2:c7:12:e5:
9b:45:ee:76:a5:d8:ef:58:11:64:87:55:9a:52:0a:ee:74:6e:
f2:ec:0a:3a:73:42:3e:49:e1:43:42:80:86:7c:b2:ae:04:e7:
9b:04:68:9a:1e:4b:81:43:82:17:24:e1:6c:b6:23:cf:79:13:
ce:1a:ff:68:b1:36:ae:ee:12:95:e2:ba:c6:49:09:90:e3:3e:
17:43:4a:f5:40:82:29:14:57:9b:58:3a:65:fa:05:23:ff:d6:
7a:69:1c:30:24:8f:e8:56:fb:8b:66:45:cb:70:7f:d0:40:7a:
f6:86:5b:90:43:19:ff:7d:58:41:d4:7e:19:3c:a0:6a:42:fb:
42:20:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:01 2024 by rpki-client on console-fra.rpki-client.org