Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/Z7IsnEybRbnyoNQ2eOazS8CREMQ.mft
File: Z7IsnEybRbnyoNQ2eOazS8CREMQ.mft (raw, json)
Hash identifier: 5i4EHvqE+vmuBNsCdXP5/V7w0z7uOoKjCeUH8kvH8Kw=
Subject key identifier: 6C:AB:F4:ED:7D:DE:35:EB:49:4B:9C:C6:08:FA:09:58:C9:5E:9A:8A
Authority key identifier: 67:B2:2C:9C:4C:9B:45:B9:F2:A0:D4:36:78:E6:B3:4B:C0:91:10:C4
Certificate issuer: /CN=67b22c9c4c9b45b9f2a0d43678e6b34bc09110c4
Certificate serial: 0187094B3D22E43B40D7A2394B93AFC4A1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7IsnEybRbnyoNQ2eOazS8CREMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/Z7IsnEybRbnyoNQ2eOazS8CREMQ.mft
Manifest number: 05D3
Signing time: Wed 22 Mar 2023 12:28:58 +0000
Manifest this update: Wed 22 Mar 2023 12:28:58 +0000
Manifest next update: Thu 23 Mar 2023 12:28:58 +0000
Files and hashes: 1: WoqshTn2aUuzBPuvV-7iIVcNhKI.roa (hash: M+g8XR6lJsftQBkzF+2NpQ2wM46lbZotw8KMyrKNeNI=)
2: Z7IsnEybRbnyoNQ2eOazS8CREMQ.crl (hash: lakXql71qbA7bGd6mvcjH2ZoAAsLmbb20FZDOn6C8j0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:4b:3d:22:e4:3b:40:d7:a2:39:4b:93:af:c4:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b22c9c4c9b45b9f2a0d43678e6b34bc09110c4
Validity
Not Before: Mar 22 12:28:58 2023 GMT
Not After : Mar 23 12:28:58 2023 GMT
Subject: CN=6cabf4ed7dde35eb494b9cc608fa0958c95e9a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:11:0d:c0:c0:d0:e5:1c:3c:e0:4f:c5:fd:
02:b3:9b:b8:3c:46:d0:cd:18:69:40:3b:a6:9b:e5:
ed:41:ce:da:2d:0f:68:f3:12:f1:3c:ae:08:db:86:
2c:da:16:c7:5d:47:35:c9:67:60:30:38:b8:07:18:
02:5b:22:df:8f:c0:69:fb:48:8a:f3:72:e4:72:a9:
c3:44:45:5b:60:66:79:86:a2:ae:69:c7:3b:91:bc:
34:4c:f0:e0:e2:09:20:f4:7b:c0:29:b5:b9:5d:a1:
82:f5:b0:09:b6:f8:6f:db:e9:29:e5:93:7f:00:e2:
63:8e:b1:fc:dc:2e:9e:90:3a:f5:d4:ec:83:eb:99:
92:ce:84:af:ca:46:79:a2:1a:11:6c:29:c6:f7:21:
52:91:ad:25:4d:de:ca:09:85:24:a0:e0:3e:f9:90:
32:11:fe:ea:01:67:54:8b:43:6b:76:51:20:3b:8d:
af:77:07:76:f2:42:a0:f9:2a:3b:c4:0a:e2:64:89:
86:69:dd:c8:a2:a3:e6:7d:f9:ff:7c:62:9a:b9:78:
4e:1b:59:b2:1d:fc:5f:86:8f:53:d2:cc:b6:86:f0:
59:ad:f5:d9:b4:bc:c1:62:b2:ec:ed:9e:6f:4f:33:
d7:04:ee:05:b4:b0:2f:f8:cd:7e:46:ad:46:06:8e:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AB:F4:ED:7D:DE:35:EB:49:4B:9C:C6:08:FA:09:58:C9:5E:9A:8A
X509v3 Authority Key Identifier:
keyid:67:B2:2C:9C:4C:9B:45:B9:F2:A0:D4:36:78:E6:B3:4B:C0:91:10:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7IsnEybRbnyoNQ2eOazS8CREMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/Z7IsnEybRbnyoNQ2eOazS8CREMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/89fa49-43d2-49a7-8e58-3b2a32571673/1/Z7IsnEybRbnyoNQ2eOazS8CREMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ab:48:e1:bf:09:47:9a:94:a7:30:a2:22:95:c3:20:b1:a7:
d5:78:17:19:c3:a4:2e:c8:01:43:66:43:cd:11:a7:e8:e7:b8:
32:ec:37:36:04:9f:50:48:94:9b:f5:67:60:04:c7:82:ef:48:
62:07:ed:d4:36:63:f4:21:85:31:eb:88:3a:bd:1e:da:4d:a6:
b7:fe:13:a7:8f:f2:c5:f3:7f:8e:91:c1:99:54:31:05:51:f0:
a7:04:9a:ae:7b:12:8f:ff:14:3e:c5:31:2d:05:60:da:05:61:
bd:a4:1b:32:6d:bb:95:4a:bb:e1:ec:ea:89:75:30:38:06:88:
b6:fb:9e:7e:70:f9:72:01:61:a7:8a:99:cb:3f:82:00:07:a3:
81:0e:5e:03:fa:b6:5e:ac:2a:fd:c6:99:55:ac:20:77:50:de:
f8:b5:a2:da:60:2a:b3:59:75:cd:1e:8c:8f:be:2c:46:cb:2f:
ec:80:44:01:64:f4:bf:7e:db:96:bc:03:e1:c8:cc:59:35:e3:
88:bb:36:20:8a:01:cf:be:c5:f6:c3:3c:21:ee:12:75:ad:43:
0b:0a:39:5d:29:72:46:b1:fc:fa:cd:9d:4d:0c:a6:2a:c1:54:
b5:66:ff:1b:20:9d:08:64:4e:2f:58:8b:3b:96:b2:ef:6b:8f:
c3:ae:ce:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:25 2024 by rpki-client on console-fra.rpki-client.org