Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f7985c-d826-428e-8da0-3ea8408792fe/1/N9SFRTOKMS67sONgYb0CXw5tnBA.mft
File: N9SFRTOKMS67sONgYb0CXw5tnBA.mft (raw, json)
Hash identifier: VFKyzaHba9PqzUh39iC4Zepn+XvlFa8XAgqrikPzRjQ=
Subject key identifier: 30:95:AC:EB:CC:82:9A:F3:77:E5:05:AC:FC:EA:6C:89:44:C2:5F:44
Authority key identifier: 37:D4:85:45:33:8A:31:2E:BB:B0:E3:60:61:BD:02:5F:0E:6D:9C:10
Certificate issuer: /CN=37d48545338a312ebbb0e36061bd025f0e6d9c10
Certificate serial: 018C32FCA3B19D9A085267E979BB98BB62D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9SFRTOKMS67sONgYb0CXw5tnBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f7985c-d826-428e-8da0-3ea8408792fe/1/N9SFRTOKMS67sONgYb0CXw5tnBA.mft
Manifest number: 028D
Signing time: Mon 04 Dec 2023 04:01:06 +0000
Manifest this update: Mon 04 Dec 2023 04:01:06 +0000
Manifest next update: Tue 05 Dec 2023 04:01:06 +0000
Files and hashes: 1: N9SFRTOKMS67sONgYb0CXw5tnBA.crl (hash: GzKhpkzRgK8TKEokSqjGfecbX5Ltp3hrkWXt5n7Gqps=)
2: Tnlnyj22xYaUqLpnkfr45gwVZUM.roa (hash: L2ENW1NPFnqorVNaeOziZoEJF7BLoSXjPNUNlAxvRAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:32:fc:a3:b1:9d:9a:08:52:67:e9:79:bb:98:bb:62:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d48545338a312ebbb0e36061bd025f0e6d9c10
Validity
Not Before: Dec 4 04:01:06 2023 GMT
Not After : Dec 5 04:01:06 2023 GMT
Subject: CN=3095acebcc829af377e505acfcea6c8944c25f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:3b:da:e6:31:73:d7:ef:3f:53:29:26:d4:
b7:e2:b3:30:fe:68:3a:75:96:3c:4f:bc:ac:1f:86:
c8:48:15:d9:01:b5:bd:93:6c:4a:74:33:f8:de:56:
5a:38:a1:9e:c8:67:66:a3:73:30:d7:0f:af:0b:52:
d5:25:bb:be:93:09:45:ff:5f:15:e4:68:0f:4e:a8:
b1:60:9f:ac:7b:6a:54:55:3d:bd:a9:f2:1e:d2:3e:
88:04:7c:52:1b:9b:b4:ae:7e:17:b0:e1:13:35:57:
f1:e5:93:d9:31:9a:3b:7d:55:84:b7:25:b2:84:ac:
f5:84:81:05:59:9f:15:75:01:3e:b2:cc:ca:61:a5:
ba:7d:a4:dc:79:a9:01:25:2e:85:8a:34:9c:af:34:
fd:a4:8c:b0:b3:45:56:34:79:06:5d:e9:e4:16:1b:
f6:65:d8:52:8f:cc:1e:27:51:d9:39:02:d2:ff:4e:
ec:2d:9b:6c:58:bc:a3:8f:a1:ee:00:9f:ce:96:6d:
a4:cb:c8:b2:f5:51:3f:7d:e5:08:21:26:e4:83:64:
f7:a9:31:a6:b5:e2:f3:3c:db:c4:e5:1d:5a:5f:11:
14:d7:e9:20:78:bf:3a:1b:08:49:16:cd:e5:5f:da:
40:e9:5b:f2:6f:37:55:ce:23:87:2d:69:e3:22:fa:
93:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:95:AC:EB:CC:82:9A:F3:77:E5:05:AC:FC:EA:6C:89:44:C2:5F:44
X509v3 Authority Key Identifier:
keyid:37:D4:85:45:33:8A:31:2E:BB:B0:E3:60:61:BD:02:5F:0E:6D:9C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9SFRTOKMS67sONgYb0CXw5tnBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f7985c-d826-428e-8da0-3ea8408792fe/1/N9SFRTOKMS67sONgYb0CXw5tnBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f7985c-d826-428e-8da0-3ea8408792fe/1/N9SFRTOKMS67sONgYb0CXw5tnBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ac:91:f9:da:5b:77:4e:ac:51:c4:c3:ea:6e:72:52:3c:04:
c1:6c:f8:e4:50:a8:2f:ef:6d:4e:b0:4c:30:8a:d9:80:60:bd:
3a:b1:9b:e5:37:53:f9:01:62:fa:43:a0:77:0b:30:a0:42:34:
52:90:db:2f:b8:ee:8e:50:89:21:24:b3:15:23:0d:0e:1a:64:
2c:8d:a0:cc:01:8f:51:ae:55:e5:bc:9d:21:1e:e2:f1:4b:70:
0d:bf:bd:34:11:a8:4c:b0:7f:0c:4c:99:96:ad:02:0d:89:b2:
48:5f:14:18:da:a5:c7:9c:ec:47:38:96:9e:dd:10:eb:bf:41:
53:6d:e7:fa:f5:44:b0:da:e1:2c:53:d3:92:c3:6c:f5:84:2b:
09:9a:fb:8a:de:d3:e6:85:f2:57:13:6d:13:29:b9:0e:a5:d4:
c4:b7:63:92:cf:3d:50:f9:63:35:1e:f7:96:3e:61:89:7d:0c:
7b:6d:57:40:b8:53:0c:99:e3:7e:f1:ca:72:0d:61:38:6a:19:
23:5c:1a:b8:c8:c8:a3:fb:4e:de:9d:a8:5a:41:59:4c:19:4b:
c8:c1:99:8c:e9:f7:79:7e:50:70:93:d1:40:38:01:ff:d4:f7:
95:0a:17:a4:1e:24:a0:5a:f1:a1:82:79:9d:c3:45:54:b5:98:
1c:bc:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:05 2024 by rpki-client on console-fra.rpki-client.org