Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d8d23b-92d8-46af-911e-be736416b30f/1/twkDVoHy42F4XUqPY1kM7sIX4lE.mft
File: twkDVoHy42F4XUqPY1kM7sIX4lE.mft (raw, json)
Hash identifier: CAoAj6Qf5KwhBqnwGwrPPOuZS1kOuZMXN6MdvUpAeXY=
Subject key identifier: B5:5A:A6:61:B6:DC:19:78:F2:3D:7F:75:BD:90:22:3E:19:6F:57:E5
Authority key identifier: B7:09:03:56:81:F2:E3:61:78:5D:4A:8F:63:59:0C:EE:C2:17:E2:51
Certificate issuer: /CN=b709035681f2e361785d4a8f63590ceec217e251
Certificate serial: 018E2CF4C3372564AA1BB80C37A8D19BD224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/twkDVoHy42F4XUqPY1kM7sIX4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d8d23b-92d8-46af-911e-be736416b30f/1/twkDVoHy42F4XUqPY1kM7sIX4lE.mft
Manifest number: 07EB
Signing time: Mon 11 Mar 2024 10:00:21 +0000
Manifest this update: Mon 11 Mar 2024 10:00:21 +0000
Manifest next update: Tue 12 Mar 2024 10:00:21 +0000
Files and hashes: 1: kiKQqE6v-d2AI7NWADYmfTD_u_s.roa (hash: bCFNDlI5cmVoDXtZ+vCDR5YnZa/kbPtVGTyD9CXgnsg=)
2: twkDVoHy42F4XUqPY1kM7sIX4lE.crl (hash: LKfeiMVfYm5Nh0YaoUUHSGd5zu4eOwuZJjeJ2mrJnZs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:f4:c3:37:25:64:aa:1b:b8:0c:37:a8:d1:9b:d2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b709035681f2e361785d4a8f63590ceec217e251
Validity
Not Before: Mar 11 10:00:21 2024 GMT
Not After : Mar 12 10:00:21 2024 GMT
Subject: CN=b55aa661b6dc1978f23d7f75bd90223e196f57e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:00:85:76:39:49:8f:d4:75:53:3a:ec:b2:
f9:dd:c5:8b:28:bc:cf:cc:b7:fa:c4:6b:06:30:7c:
4c:14:9d:2a:f5:21:21:4c:f9:b3:0d:54:05:96:e2:
5d:e3:2a:f1:3f:8b:b7:b9:f8:41:16:39:0f:fe:85:
8c:a1:21:d0:bf:e1:f8:17:4c:d8:ed:e8:92:dc:e4:
85:d0:c0:6a:cf:a8:48:c6:5b:19:6f:a0:d1:14:03:
4e:4a:e9:6a:f8:b9:a3:3f:4d:8e:6b:b3:37:94:44:
5a:15:a7:59:f2:b4:0a:aa:4c:3b:e7:da:94:a0:fa:
be:02:d8:db:fc:9a:18:2b:ae:6a:0f:85:eb:ed:37:
bd:4c:e7:f8:1d:37:8d:52:ea:81:51:09:6a:c2:26:
b1:c8:b8:8d:27:51:48:65:60:78:ec:75:92:3d:c3:
7c:3f:1e:ff:0e:99:56:0c:65:cc:93:c4:09:94:0d:
e9:d6:3a:fd:ef:a3:e7:f0:7e:20:f3:dc:b8:94:f5:
9d:0b:57:41:69:f9:d2:e3:65:61:c6:01:60:17:47:
f5:92:e9:44:87:46:fa:10:55:8e:dd:97:a4:16:b3:
97:2c:be:85:75:37:1b:1d:2e:a4:b7:8b:48:d3:0c:
21:df:fc:c9:0e:38:05:d1:b8:9f:9c:cc:f3:22:50:
5d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:A6:61:B6:DC:19:78:F2:3D:7F:75:BD:90:22:3E:19:6F:57:E5
X509v3 Authority Key Identifier:
keyid:B7:09:03:56:81:F2:E3:61:78:5D:4A:8F:63:59:0C:EE:C2:17:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twkDVoHy42F4XUqPY1kM7sIX4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d8d23b-92d8-46af-911e-be736416b30f/1/twkDVoHy42F4XUqPY1kM7sIX4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d8d23b-92d8-46af-911e-be736416b30f/1/twkDVoHy42F4XUqPY1kM7sIX4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:83:76:d7:9a:f6:cb:6f:92:63:6f:36:34:a9:53:3e:c7:0e:
2d:0f:94:ad:da:46:4f:fc:1e:dc:bf:88:ec:4e:7a:9c:70:d9:
37:bf:23:05:de:16:b1:47:1b:b0:ab:b2:4e:92:df:77:ea:e7:
3b:e4:8c:7d:10:79:f3:05:ed:52:9d:3e:32:61:c6:63:34:77:
b5:c3:22:d3:13:34:c2:04:16:4a:53:9e:6d:1c:23:12:1c:84:
eb:0d:6d:34:ef:20:15:c1:6b:ff:1c:f5:53:82:e9:d7:68:d0:
40:f4:0f:01:0e:46:3d:15:e0:b4:82:06:5a:72:28:33:25:0c:
24:fa:2a:3b:be:08:4c:ce:ce:4a:6f:58:cd:b3:4a:2a:24:f1:
be:c6:0d:a0:dd:72:06:e6:89:53:92:cb:01:d9:c6:73:9c:67:
3d:c8:89:fe:b0:29:cb:65:99:a5:9d:24:d0:dc:4a:37:0e:8f:
de:b0:50:51:14:f0:64:4c:5b:91:01:39:36:b4:87:60:e9:80:
58:bd:fd:89:02:cd:4b:73:73:32:71:00:a6:91:7d:02:76:32:
c8:c9:f6:a3:4a:34:3d:86:7e:eb:01:52:03:27:e4:05:56:54:
a8:6c:1e:57:b6:f2:f0:eb:a9:9f:94:fb:2e:fb:56:6f:1d:30:
15:ce:8a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:04 2024 by rpki-client on console-fra.rpki-client.org