Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d21a60-950b-4f29-a588-412ae25384df/1/tjSRj0E1pCCE8aRmHo6tmijfjnM.mft
File: tjSRj0E1pCCE8aRmHo6tmijfjnM.mft (raw, json)
Hash identifier: 1ytRnfNGb2ZrKBBkNaIaKojrRlyWVIz8vZIi9/K3k/w=
Subject key identifier: 67:0F:67:8D:49:9A:D2:A3:B0:24:E6:16:58:D9:90:BA:B0:76:AB:FA
Authority key identifier: B6:34:91:8F:41:35:A4:20:84:F1:A4:66:1E:8E:AD:9A:28:DF:8E:73
Certificate issuer: /CN=b634918f4135a42084f1a4661e8ead9a28df8e73
Certificate serial: 018A6493615A8FCCD5DC669E643FAC38980E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjSRj0E1pCCE8aRmHo6tmijfjnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d21a60-950b-4f29-a588-412ae25384df/1/tjSRj0E1pCCE8aRmHo6tmijfjnM.mft
Manifest number: 0861
Signing time: Tue 05 Sep 2023 09:01:34 +0000
Manifest this update: Tue 05 Sep 2023 09:01:34 +0000
Manifest next update: Wed 06 Sep 2023 09:01:34 +0000
Files and hashes: 1: tjSRj0E1pCCE8aRmHo6tmijfjnM.crl (hash: bW1AEVC5Y7qSfZeOiCFLzDRrgbx2A5v6xRsP3UfdLHg=)
2: wBDj2unoNV4e4p3jo26Lj7dRbFA.roa (hash: +y3xqPRY8yUvPn859fX1BuPrDMIaLp7zV4y9FryfAC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:93:61:5a:8f:cc:d5:dc:66:9e:64:3f:ac:38:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b634918f4135a42084f1a4661e8ead9a28df8e73
Validity
Not Before: Sep 5 09:01:34 2023 GMT
Not After : Sep 6 09:01:34 2023 GMT
Subject: CN=670f678d499ad2a3b024e61658d990bab076abfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3a:98:d9:45:63:b3:be:57:2f:fb:70:bd:92:
bb:aa:2c:48:e5:3a:c3:85:63:93:f3:10:be:55:aa:
18:2c:6b:06:8f:a2:98:bf:87:06:50:0d:0b:05:fc:
5b:7f:5f:14:bb:02:ed:76:d1:a4:16:eb:27:c2:7f:
18:c2:35:43:9e:bf:71:6f:f0:9e:d9:26:d0:0b:08:
da:7d:6d:48:a9:81:ed:df:b1:e1:83:4f:dd:5e:bd:
f2:d1:8b:10:f4:d7:95:ec:fb:e3:46:3c:40:b9:c3:
77:63:a6:b9:3b:2b:6e:7c:3f:9d:ea:94:b9:c8:a8:
c6:f0:f0:02:e9:5a:ed:76:a0:c5:cc:0c:34:3b:84:
a2:44:5c:74:96:1c:80:ee:5d:8b:9d:c9:ac:c6:bd:
70:ed:f6:f8:44:08:88:af:2a:b6:67:79:70:b3:f2:
d2:79:ac:ba:b6:48:5a:dc:b7:89:60:97:38:61:1e:
9d:a1:1c:28:a8:65:1b:f0:fa:0d:a4:12:bf:35:c3:
90:95:be:d4:4e:f9:3d:09:ea:38:c6:98:03:e0:ed:
cc:73:2c:44:0d:44:5c:d5:bd:d7:bd:ff:f3:df:cf:
c6:99:27:47:18:dc:aa:0a:fa:91:8d:dc:80:e3:5e:
bd:55:b3:93:12:3e:9d:1c:ee:6a:a0:3b:e9:2e:57:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0F:67:8D:49:9A:D2:A3:B0:24:E6:16:58:D9:90:BA:B0:76:AB:FA
X509v3 Authority Key Identifier:
keyid:B6:34:91:8F:41:35:A4:20:84:F1:A4:66:1E:8E:AD:9A:28:DF:8E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjSRj0E1pCCE8aRmHo6tmijfjnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d21a60-950b-4f29-a588-412ae25384df/1/tjSRj0E1pCCE8aRmHo6tmijfjnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d21a60-950b-4f29-a588-412ae25384df/1/tjSRj0E1pCCE8aRmHo6tmijfjnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:db:78:6f:fb:7f:0f:1b:e2:d2:b3:e5:c5:74:ed:8f:2b:7c:
fb:e8:73:84:81:aa:60:5e:8b:12:44:6f:72:98:e2:b0:bd:bc:
f5:c0:57:5c:61:6c:98:47:b6:75:14:80:6b:ce:16:7d:1b:dc:
23:97:3c:62:4e:7c:56:a8:61:83:d8:bf:cd:19:3d:38:a5:5f:
ca:19:9c:46:34:a7:76:74:73:49:dc:80:87:01:50:f4:91:f1:
7b:2a:f2:55:95:b1:08:68:af:28:d6:8f:17:f7:ae:92:6a:74:
9b:08:a6:ce:6e:d4:0b:96:03:fb:32:4c:b3:e0:46:95:4a:8f:
24:af:cd:8b:37:e0:fb:2b:3c:89:82:85:c5:1f:0f:a2:11:33:
47:45:93:a6:99:ab:c2:97:7a:33:a5:c6:06:4f:24:7c:90:91:
a3:0c:6f:34:0d:09:e8:5e:be:9d:e4:cd:84:c2:27:f7:74:45:
65:a5:8b:42:05:5e:13:e8:21:5f:dd:08:6b:2a:30:ba:ad:3c:
53:03:d1:e6:6b:aa:26:f7:18:d6:31:f1:3f:19:64:5c:58:89:
3e:95:1f:bc:c8:51:88:dc:d4:61:e1:26:ee:9c:68:d0:08:a6:
9a:51:1f:5e:b5:32:a7:b8:7b:cb:c4:6b:dd:43:ba:61:2e:0c:
b4:0f:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 10:21:45 2023 by rpki-client on console-fra.rpki-client.org