Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/25iM1dtLxwL0Sg_KWcT-HrEal9M.mft
File: 25iM1dtLxwL0Sg_KWcT-HrEal9M.mft (raw, json)
Hash identifier: 8cPBdh0uUXGU7oJFMe/QcDA4hMamXWa26P1+L91D0ZE=
Subject key identifier: 01:AE:B9:4C:80:44:EE:F0:E8:1E:08:AC:D5:01:B1:D0:21:AB:DE:BB
Authority key identifier: DB:98:8C:D5:DB:4B:C7:02:F4:4A:0F:CA:59:C4:FE:1E:B1:1A:97:D3
Certificate issuer: /CN=db988cd5db4bc702f44a0fca59c4fe1eb11a97d3
Certificate serial: 018B8F0C85065270470FB2852EEDC2A257A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25iM1dtLxwL0Sg_KWcT-HrEal9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/25iM1dtLxwL0Sg_KWcT-HrEal9M.mft
Manifest number: 08F5
Signing time: Thu 02 Nov 2023 08:00:44 +0000
Manifest this update: Thu 02 Nov 2023 08:00:44 +0000
Manifest next update: Fri 03 Nov 2023 08:00:44 +0000
Files and hashes: 1: 25iM1dtLxwL0Sg_KWcT-HrEal9M.crl (hash: 36zmTj4Cfoxyr9IlckhDNcUe75O/Qq18floVpxL0q/s=)
2: 5qJnyr-RSbHSFthUXsr-IrluDxo.roa (hash: qAoGrAaV+vOYpwatb9BYpr68Fx18j7StA9mOw2tTNns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:0c:85:06:52:70:47:0f:b2:85:2e:ed:c2:a2:57:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db988cd5db4bc702f44a0fca59c4fe1eb11a97d3
Validity
Not Before: Nov 2 08:00:44 2023 GMT
Not After : Nov 3 08:00:44 2023 GMT
Subject: CN=01aeb94c8044eef0e81e08acd501b1d021abdebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:06:66:8b:28:7b:99:b9:c0:cb:59:73:e7:
63:94:3c:86:c1:79:a4:13:24:bc:c3:a5:b8:4c:34:
c1:31:7b:be:7b:06:66:fb:b4:1c:0a:4c:77:18:92:
e0:46:d4:2c:0e:f0:ea:4f:ac:c5:c0:ca:af:d9:cf:
58:b3:33:90:21:d6:55:7f:ad:b4:94:ee:8e:01:7a:
31:df:15:04:7f:03:dc:0b:83:6b:05:de:28:58:42:
fa:21:0b:59:48:ce:04:db:30:75:62:b0:36:0b:f6:
63:2c:3b:4d:4f:7c:8b:6c:ab:8d:50:25:37:63:d2:
3f:48:4b:7a:d9:06:e4:b5:40:73:95:c2:7c:86:4f:
88:03:8c:3a:67:df:e5:46:bd:fe:e8:0b:2b:bc:37:
3c:ab:6c:b6:52:9e:36:ba:a8:d5:d6:3c:bd:45:1b:
d6:20:8a:55:a7:99:f4:bd:8f:cb:07:55:93:22:85:
a6:8a:fe:d4:88:a4:94:f1:52:08:bd:a6:43:c4:d9:
95:67:23:89:08:5c:f7:91:72:d7:01:3d:aa:7f:7d:
67:b5:df:a9:20:c7:1e:c7:81:fc:67:c2:2c:74:ea:
c7:1b:f7:69:38:cf:dd:3c:20:cb:f8:e2:cc:9f:57:
a1:db:3a:95:8c:03:6e:ae:63:2e:44:a5:36:01:25:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AE:B9:4C:80:44:EE:F0:E8:1E:08:AC:D5:01:B1:D0:21:AB:DE:BB
X509v3 Authority Key Identifier:
keyid:DB:98:8C:D5:DB:4B:C7:02:F4:4A:0F:CA:59:C4:FE:1E:B1:1A:97:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25iM1dtLxwL0Sg_KWcT-HrEal9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/25iM1dtLxwL0Sg_KWcT-HrEal9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/110744-fef1-4b23-ac0d-38702c74e318/1/25iM1dtLxwL0Sg_KWcT-HrEal9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:80:13:bf:75:2d:d6:54:5b:c8:81:66:49:1f:e6:23:ad:6c:
e5:45:8f:d2:e7:7e:18:d2:66:6c:47:80:f6:69:e2:1e:07:8c:
4c:18:b6:ea:e5:4d:46:3a:40:95:c9:da:85:05:1d:1f:93:de:
ed:88:a6:f7:da:af:6f:d6:ec:54:98:5d:98:4e:e8:4e:cf:e5:
bb:2a:a3:b7:ac:35:db:8b:72:41:f7:78:b1:98:fd:24:bc:bd:
89:56:90:05:c9:bc:d8:e5:59:07:ef:86:96:40:06:a0:50:28:
47:78:10:be:53:74:72:cc:19:1c:63:08:b7:3b:1b:03:0b:17:
e9:28:83:37:9b:af:84:61:93:bd:8c:4a:35:23:70:a2:80:61:
9c:53:d8:48:30:13:f6:99:55:01:61:24:a2:ad:21:04:f0:be:
2e:7b:85:e9:99:68:34:4b:7d:83:22:a5:bb:7c:17:8d:a9:9b:
27:61:e3:d2:77:3b:d4:b6:06:a4:3e:28:5f:0d:06:a0:df:9c:
2b:82:ac:d4:34:02:0c:bb:4a:5d:b2:5e:24:cd:09:63:af:00:
0e:83:c1:ae:1a:46:9b:a8:4c:b0:e6:4e:23:34:29:4d:cc:fd:
e4:a1:19:14:21:ac:1a:f8:23:63:55:ae:a6:66:cc:25:41:ed:
f3:49:dd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 09:02:28 2023 by rpki-client on console-ams.rpki-client.org