Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/29348a-3798-4085-9335-27238b4d32ac/1/1-KQ2Ky26vjBHHgdWIra0yJEIKz4.mft
File: 1-KQ2Ky26vjBHHgdWIra0yJEIKz4.mft (raw, json)
Hash identifier: Cga2GWJo0agyQrHI2CiNJoiieQQUmJEEMEoCHaUKABo=
Subject key identifier: 55:42:E7:1A:10:6E:54:0F:D8:7D:54:0E:D5:47:B9:71:50:92:28:6D
Authority key identifier: F8:A4:36:2B:2D:BA:BE:30:47:1E:07:56:22:B6:B4:C8:91:08:2B:3E
Certificate issuer: /CN=f8a4362b2dbabe30471e075622b6b4c891082b3e
Certificate serial: 018DA6D93710CAFC7C6C0D40E98BA3002EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQ2Ky26vjBHHgdWIra0yJEIKz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/29348a-3798-4085-9335-27238b4d32ac/1/1-KQ2Ky26vjBHHgdWIra0yJEIKz4.mft
Manifest number: 107C
Signing time: Wed 14 Feb 2024 09:01:09 +0000
Manifest this update: Wed 14 Feb 2024 09:01:09 +0000
Manifest next update: Thu 15 Feb 2024 09:01:09 +0000
Files and hashes: 1: 1-KQ2Ky26vjBHHgdWIra0yJEIKz4.crl (hash: zmUdE0LQP0FWG9tXXdKyP/jnQwajKWxIjz9zLHnDwhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:d9:37:10:ca:fc:7c:6c:0d:40:e9:8b:a3:00:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4362b2dbabe30471e075622b6b4c891082b3e
Validity
Not Before: Feb 14 09:01:09 2024 GMT
Not After : Feb 15 09:01:09 2024 GMT
Subject: CN=5542e71a106e540fd87d540ed547b9715092286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:fe:29:d9:f1:ec:29:33:dc:68:6d:59:ce:
d0:8c:ef:bb:3d:c0:d5:59:61:e8:ee:2e:cb:8c:c5:
c1:61:3b:ad:29:22:8d:13:29:3e:bd:c7:ef:c1:52:
1c:1a:41:05:c4:ae:f8:33:92:61:86:b3:24:99:32:
d3:25:6c:f1:cf:ed:22:d9:49:fc:52:58:40:66:4c:
e3:a3:99:7e:2c:30:b9:4b:dc:e2:89:53:65:86:8b:
4c:7a:9a:a3:eb:b4:6a:9c:d5:0b:a0:f4:d4:ba:d3:
f8:b0:79:ac:63:5b:4e:42:29:8d:8f:f1:36:cf:11:
81:61:10:ba:3e:01:06:ee:b4:ce:0e:db:13:00:34:
3d:9b:73:04:b6:ab:c5:d1:1f:e9:49:e0:12:51:3d:
eb:12:f7:4f:af:92:83:e8:c2:77:5f:20:54:3a:af:
e5:fc:b6:7e:5e:cd:bc:d7:75:a4:64:c0:80:fd:83:
fc:08:56:4a:11:4f:05:32:8e:47:60:d2:4c:65:1d:
ed:97:31:8b:3a:92:4a:91:99:5d:27:e5:01:e7:00:
b8:6d:ba:13:a2:82:e1:41:2d:ba:21:7e:f1:02:07:
83:d9:81:0d:04:d9:c2:73:07:99:e2:7f:81:40:ac:
1f:b3:37:cd:52:02:69:bb:bf:8b:90:ab:35:03:85:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:E7:1A:10:6E:54:0F:D8:7D:54:0E:D5:47:B9:71:50:92:28:6D
X509v3 Authority Key Identifier:
keyid:F8:A4:36:2B:2D:BA:BE:30:47:1E:07:56:22:B6:B4:C8:91:08:2B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQ2Ky26vjBHHgdWIra0yJEIKz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/29348a-3798-4085-9335-27238b4d32ac/1/1-KQ2Ky26vjBHHgdWIra0yJEIKz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/29348a-3798-4085-9335-27238b4d32ac/1/1-KQ2Ky26vjBHHgdWIra0yJEIKz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:80:bb:c2:73:1a:81:30:b4:82:66:fe:eb:64:33:0c:6c:
07:77:f7:7b:29:d5:cd:28:12:85:30:66:25:62:1a:61:6e:3d:
f1:96:07:9f:3f:7d:6f:12:cb:f0:e9:25:27:64:fc:91:d4:96:
4b:cb:67:be:10:e6:86:31:89:ed:03:9d:a3:22:1e:88:af:1c:
59:83:e1:ae:cd:f9:fb:8d:bd:3a:f9:aa:93:d5:2f:56:6c:fc:
ce:ea:29:27:d6:e5:e0:a5:a6:e4:19:63:9c:05:7a:11:1b:ec:
5e:22:f8:f7:0d:f3:ab:cc:9e:59:9f:a1:78:af:7d:3b:b2:de:
4b:ff:40:f9:83:9f:9a:b1:52:ad:32:aa:ae:a6:36:4c:cc:36:
e4:58:19:f9:1b:c5:71:98:85:f1:b6:4a:44:cb:23:ee:db:17:
e3:67:72:7a:3e:bc:f0:73:7c:70:f7:c9:5f:7a:0b:1b:9c:8d:
67:17:8f:a9:38:c4:df:71:2e:0c:f2:8a:dc:8b:69:b3:2e:7f:
ae:53:d1:50:db:2e:53:43:ca:43:61:14:9b:97:21:85:f8:a7:
7a:df:36:2d:ae:84:2d:20:85:91:dd:b0:3e:b1:6c:c8:9e:fd:
50:43:4c:80:0a:6b:bf:91:43:b3:50:b3:b2:92:6e:d1:6c:c4:
88:6f:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:20 2024 by rpki-client on console-fra.rpki-client.org