Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/NaIpxxtybl7t8GG3vW09lPoWDLU.mft
File: NaIpxxtybl7t8GG3vW09lPoWDLU.mft (raw, json)
Hash identifier: HHJ+oUZiOkS40WasiiBAr1cGmbBbQJjIw6mkO9iLUN8=
Subject key identifier: 25:22:48:2B:51:51:6C:DC:34:40:85:86:16:CD:AB:4C:83:67:34:C5
Authority key identifier: 35:A2:29:C7:1B:72:6E:5E:ED:F0:61:B7:BD:6D:3D:94:FA:16:0C:B5
Certificate issuer: /CN=35a229c71b726e5eedf061b7bd6d3d94fa160cb5
Certificate serial: 018AAB624D9C771E60FBF2B125E345621C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NaIpxxtybl7t8GG3vW09lPoWDLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/NaIpxxtybl7t8GG3vW09lPoWDLU.mft
Manifest number: 0866
Signing time: Tue 19 Sep 2023 03:01:00 +0000
Manifest this update: Tue 19 Sep 2023 03:01:00 +0000
Manifest next update: Wed 20 Sep 2023 03:01:00 +0000
Files and hashes: 1: J2Gl-qM1FaPtAciljvlSFhwk0Tg.roa (hash: n+pI2XwBFG+yfDGqYHmQIToMPZpQEXwNlMdj0StI9v8=)
2: NaIpxxtybl7t8GG3vW09lPoWDLU.crl (hash: rBIWhswE1+egaM1xESCfBk3v4KBA3HcKo1ljtRAXeW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ab:62:4d:9c:77:1e:60:fb:f2:b1:25:e3:45:62:1c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35a229c71b726e5eedf061b7bd6d3d94fa160cb5
Validity
Not Before: Sep 19 03:01:00 2023 GMT
Not After : Sep 20 03:01:00 2023 GMT
Subject: CN=2522482b51516cdc3440858616cdab4c836734c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:a7:ab:03:fa:09:93:6c:ab:85:c2:63:f7:
b2:db:fa:80:68:13:29:6b:62:00:d5:ad:a7:ca:ff:
55:00:71:2c:41:22:76:11:2e:a0:8f:5e:87:15:1a:
ed:17:4c:ae:4c:b4:cd:1a:d8:39:ee:aa:b6:09:61:
4d:3e:6a:de:a2:58:d0:7a:15:45:39:3d:9d:b7:ac:
91:71:b4:90:0a:84:b5:df:98:87:24:e9:89:4d:65:
2a:9a:65:ca:ad:83:56:e7:ce:85:9d:2e:70:e2:1d:
fc:80:da:0c:04:a2:13:9e:45:ea:69:44:7a:b8:69:
e3:44:7d:8a:58:2a:cf:d6:b3:be:56:a9:cc:5e:75:
b8:32:f1:53:dc:fd:ea:a7:34:73:6b:7f:90:2f:d0:
b2:fd:cb:a6:0c:a0:5b:51:00:f0:af:e2:67:61:34:
68:ab:48:68:6d:42:7c:0e:95:53:ec:3c:88:3f:6c:
6e:03:01:9a:1d:37:a9:ba:00:93:39:48:e4:94:18:
65:50:f2:50:3a:aa:fc:53:b7:39:c1:b0:a5:b8:77:
a8:e8:44:47:58:76:70:56:a0:ed:91:cb:c3:63:09:
8e:5c:10:f5:42:b3:ec:f6:cd:11:4b:67:c1:6e:64:
58:66:ce:67:ac:79:02:c3:51:7a:e4:47:cd:b8:3c:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:22:48:2B:51:51:6C:DC:34:40:85:86:16:CD:AB:4C:83:67:34:C5
X509v3 Authority Key Identifier:
keyid:35:A2:29:C7:1B:72:6E:5E:ED:F0:61:B7:BD:6D:3D:94:FA:16:0C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NaIpxxtybl7t8GG3vW09lPoWDLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/NaIpxxtybl7t8GG3vW09lPoWDLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6ab500-6868-4325-9397-ccb340397d26/1/NaIpxxtybl7t8GG3vW09lPoWDLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:77:47:84:1a:9d:ed:c4:8f:ca:67:c8:71:4e:de:72:fe:57:
9a:f0:a2:10:89:94:5b:65:71:b4:c6:e2:6d:14:08:76:df:c9:
18:a4:f8:a2:9e:19:ad:fe:c8:af:41:6d:8c:64:1c:5d:c1:7a:
d2:66:ac:fe:82:b4:b4:43:85:84:4e:5c:a7:0f:50:20:20:92:
35:f3:1b:5f:57:41:e9:cc:bb:e6:82:ac:93:58:ff:d9:83:8a:
07:15:20:b3:35:bc:ad:eb:de:c9:f8:25:f8:bd:e9:9e:7a:8f:
de:7e:66:9e:5f:f3:12:24:f4:ec:de:ea:c2:51:a7:f5:fc:de:
8c:6d:35:54:70:53:61:2c:44:d8:22:b8:ad:f0:e8:0c:8c:7b:
19:fd:cf:42:db:54:14:0c:b1:7c:e3:e2:53:2b:9f:b3:b9:00:
12:17:8a:ee:52:d1:6d:3b:e9:36:ab:8a:76:4b:a6:d7:4f:15:
30:82:a8:0a:80:b7:2b:26:42:f3:2e:85:a3:1b:cf:90:ef:8a:
7c:86:b9:04:d7:2d:c3:6b:f9:aa:b2:02:d3:7f:f6:77:b1:05:
b1:fd:20:07:cc:b1:72:5f:24:9e:8f:cc:96:ba:57:02:16:36:
07:42:60:4d:a3:c7:ae:7e:17:c3:1e:b1:5f:36:1f:25:b4:58:
4a:de:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:39 2024 by rpki-client on console-ams.rpki-client.org