Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/dd6507-60a0-4136-b939-ff7c34bc3bd8/1/Y1-cq3GebNb8JAQRRShxiXBup_w.mft
File: Y1-cq3GebNb8JAQRRShxiXBup_w.mft (raw, json)
Hash identifier: OtEbPL/EnUSLKTVIDDuV0tmPo1Qmjg9Et7snEn+aqRw=
Subject key identifier: B1:C4:74:77:A6:FD:BD:7E:1D:36:9B:CB:18:77:79:02:A8:73:65:F4
Authority key identifier: 63:5F:9C:AB:71:9E:6C:D6:FC:24:04:11:45:28:71:89:70:6E:A7:FC
Certificate issuer: /CN=635f9cab719e6cd6fc24041145287189706ea7fc
Certificate serial: 01871320F01FAEC0565C3FD59F49F81E7D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1-cq3GebNb8JAQRRShxiXBup_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/dd6507-60a0-4136-b939-ff7c34bc3bd8/1/Y1-cq3GebNb8JAQRRShxiXBup_w.mft
Manifest number: 0CE8
Signing time: Fri 24 Mar 2023 10:18:58 +0000
Manifest this update: Fri 24 Mar 2023 10:18:58 +0000
Manifest next update: Sat 25 Mar 2023 10:18:58 +0000
Files and hashes: 1: Y1-cq3GebNb8JAQRRShxiXBup_w.crl (hash: o5NAQfGWk1NoZt0UK+hbj+cRnNkvVdhDnyfd0z80BtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:20:f0:1f:ae:c0:56:5c:3f:d5:9f:49:f8:1e:7d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635f9cab719e6cd6fc24041145287189706ea7fc
Validity
Not Before: Mar 24 10:18:58 2023 GMT
Not After : Mar 25 10:18:58 2023 GMT
Subject: CN=b1c47477a6fdbd7e1d369bcb18777902a87365f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:98:79:1a:09:57:df:20:e4:86:d6:43:a2:cf:
60:42:a1:84:dd:10:f0:12:75:22:57:7e:a5:34:82:
22:1d:10:33:e0:01:ac:50:b4:bf:7c:3b:bb:db:d5:
70:4f:c4:e0:04:b3:f6:a3:03:6b:26:4f:5e:e5:ae:
c9:2c:56:2f:e4:1e:c4:85:04:10:9f:87:30:c6:82:
9a:0a:1f:f4:13:9e:3c:d9:18:e8:95:b8:f3:43:64:
c7:4c:ab:ee:fe:fb:65:7a:38:6d:e5:51:56:fa:ae:
72:89:4d:20:91:a8:f1:69:6b:41:55:56:c5:67:bd:
9e:22:65:bd:62:a9:56:45:f4:ea:72:fa:df:82:be:
04:b9:9a:c7:27:a3:3c:af:81:ce:b7:1b:84:04:41:
80:7c:ca:60:a8:62:23:ca:80:ab:6f:80:0d:9a:5a:
fd:70:19:b7:16:35:06:2f:bf:7c:fb:b4:aa:00:0b:
06:d7:f3:88:5f:6b:c9:72:5b:4e:9d:37:cf:b8:65:
8a:55:de:f6:75:31:d2:e2:a2:90:57:e3:f4:dc:eb:
f5:ae:98:d0:63:33:2a:7c:d6:e9:1b:68:c3:ee:b3:
3f:64:75:00:2f:76:6a:87:0c:6f:21:36:70:a2:70:
e8:c6:14:4c:54:db:bd:ff:90:bf:1b:f2:9d:da:fa:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:74:77:A6:FD:BD:7E:1D:36:9B:CB:18:77:79:02:A8:73:65:F4
X509v3 Authority Key Identifier:
keyid:63:5F:9C:AB:71:9E:6C:D6:FC:24:04:11:45:28:71:89:70:6E:A7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1-cq3GebNb8JAQRRShxiXBup_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/dd6507-60a0-4136-b939-ff7c34bc3bd8/1/Y1-cq3GebNb8JAQRRShxiXBup_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/dd6507-60a0-4136-b939-ff7c34bc3bd8/1/Y1-cq3GebNb8JAQRRShxiXBup_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bf:2b:a9:5f:fa:8a:03:65:87:41:22:83:a7:d2:a4:f0:9a:
7a:11:e7:d6:8f:cf:a3:0a:66:ac:62:f0:9b:66:45:1d:c5:5b:
6f:f8:1d:8b:f9:d6:17:8a:30:3c:d0:3d:f9:fe:37:17:e8:8a:
75:0b:84:52:cb:99:3a:63:64:81:8f:8e:ff:a2:58:7c:9f:af:
10:04:e0:02:dd:bf:b2:31:55:96:ee:f1:c9:ff:d9:92:cb:87:
ba:18:dc:8e:33:d9:52:9b:ab:da:5b:d3:e7:0a:b4:08:e6:45:
58:26:b8:a3:77:bc:17:be:f6:0c:fd:61:f6:8e:35:3b:fb:ff:
08:44:00:95:9e:d8:05:6c:8e:97:51:f6:29:7b:8a:7a:4d:ee:
44:29:07:a2:be:ea:83:b4:c5:32:40:80:51:23:db:49:d1:eb:
35:c3:7d:23:3e:81:7f:49:b9:94:a0:a2:f3:3f:1c:0f:41:3e:
a5:15:ef:4e:3a:8e:17:56:5a:25:f1:4a:8a:5f:af:8b:7a:36:
57:f8:6b:60:3b:f6:75:a1:68:88:1e:7c:b2:ba:91:be:a9:59:
a1:2d:3a:77:a8:81:b1:49:05:01:9c:97:e4:a7:77:0d:53:3e:
ef:e3:a6:7f:02:29:43:af:39:2b:c7:4e:1c:a6:04:e5:70:31:
7f:f3:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:25 2024 by rpki-client on console-ams.rpki-client.org