Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.mft
File: nOTdhrz9i49QakCAUWBex022zqA.mft (raw, json)
Hash identifier: WCCt77jOtT3BVoMASD0lPLZC+ZJLXDhWTUjB0JtWpVw=
Subject key identifier: 26:F9:F7:53:EA:19:20:BA:33:FA:08:D3:8F:B9:0F:30:15:2B:F9:E9
Authority key identifier: 9C:E4:DD:86:BC:FD:8B:8F:50:6A:40:80:51:60:5E:C7:4D:B6:CE:A0
Certificate issuer: /CN=9ce4dd86bcfd8b8f506a408051605ec74db6cea0
Certificate serial: 018BD2A4D01650C72EC27057031E4796A701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOTdhrz9i49QakCAUWBex022zqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.mft
Manifest number: 0867
Signing time: Wed 15 Nov 2023 11:01:38 +0000
Manifest this update: Wed 15 Nov 2023 11:01:38 +0000
Manifest next update: Thu 16 Nov 2023 11:01:38 +0000
Files and hashes: 1: nOTdhrz9i49QakCAUWBex022zqA.crl (hash: rtjRm7+MwP/Dwuk9B9OpjMLzXnOaB1V4lpoYWMlKVZA=)
2: uglN1FfKxut5ZfQMi90eTw1MmKI.roa (hash: 3B7C9jVAkNPJKbOLflZqvQI2eogpzvBG9jo+lrBu1ZU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:a4:d0:16:50:c7:2e:c2:70:57:03:1e:47:96:a7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce4dd86bcfd8b8f506a408051605ec74db6cea0
Validity
Not Before: Nov 15 11:01:38 2023 GMT
Not After : Nov 16 11:01:38 2023 GMT
Subject: CN=26f9f753ea1920ba33fa08d38fb90f30152bf9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:c6:60:e9:50:9d:76:e9:f8:ef:33:f8:cf:
f2:25:86:6d:a6:56:80:cb:bf:f6:a0:04:34:b8:a5:
92:9b:a9:22:07:51:12:3c:3b:63:95:29:1e:b9:41:
ec:85:67:40:84:9f:0c:6a:a8:ee:b8:04:18:3b:51:
d3:0b:17:51:64:36:5e:20:0b:05:b8:0d:47:d4:b6:
03:e1:54:d7:a4:0b:48:05:f8:65:b0:e1:51:a7:1a:
b5:b3:6e:1b:b6:8e:c4:75:ae:c1:6c:1b:9d:e4:64:
a3:34:97:fe:30:4f:3c:4f:92:b3:62:90:8d:d6:23:
13:7f:1e:06:4b:8a:d1:b6:44:08:0c:3d:19:be:30:
93:ae:f1:72:0f:01:76:c2:d9:8d:02:c8:6c:ec:c0:
37:b4:0a:5e:81:5e:58:b4:e8:33:bd:aa:46:3e:7e:
4c:0e:89:d4:00:55:83:50:4e:3e:d4:e6:9e:61:64:
a0:b8:87:dd:2a:b4:8c:d3:28:f8:17:32:07:d6:0b:
10:14:62:8a:65:36:f3:7a:e0:bc:cf:a0:e9:79:9b:
2c:1d:40:72:d1:c3:63:6b:ea:11:5d:37:6b:9a:fe:
07:45:df:2b:5f:69:41:af:86:7e:b3:ab:4f:23:27:
63:ac:91:2b:14:a4:28:ef:1b:50:f4:91:d7:d8:43:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:F7:53:EA:19:20:BA:33:FA:08:D3:8F:B9:0F:30:15:2B:F9:E9
X509v3 Authority Key Identifier:
keyid:9C:E4:DD:86:BC:FD:8B:8F:50:6A:40:80:51:60:5E:C7:4D:B6:CE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTdhrz9i49QakCAUWBex022zqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:40:7b:dd:c4:62:53:8e:ff:ad:05:7d:ee:1b:fc:e1:7d:ff:
60:bb:48:3c:8e:6c:e6:68:66:b5:46:af:dc:8b:71:2f:c3:07:
04:9d:19:9a:3c:60:88:f2:dd:57:5b:37:4e:bc:e5:52:61:3f:
44:3c:4c:fb:5b:57:41:a9:b8:dc:43:7a:85:dd:48:ac:c4:14:
dc:93:79:2e:cb:91:c8:27:62:a4:a5:6d:cc:81:0f:58:c0:00:
01:34:e0:e7:33:ed:29:77:a1:58:7b:e6:af:fc:b1:55:b2:52:
9f:e0:e2:20:10:05:52:3c:a8:76:36:e9:a3:b6:e8:c8:e8:85:
e7:0a:9e:0f:1a:c8:85:5b:3b:d7:26:73:d8:b5:81:ec:bb:1e:
3a:fe:0d:d4:12:57:7a:0b:48:8f:6e:fe:a6:85:91:03:ca:ff:
16:f6:91:1a:05:b1:a3:60:b0:db:7c:1c:21:23:84:03:f6:5c:
6c:b6:c3:40:96:dd:aa:6e:7e:10:dc:7a:cd:ef:e5:76:05:a1:
d1:56:14:76:7b:4a:ff:ed:b3:41:fc:29:89:ae:06:a5:35:e5:
38:c5:e6:5e:7e:ee:a8:73:61:6f:26:d8:a9:55:15:1a:61:7f:
f9:5d:a2:4d:fd:1f:ab:e7:73:50:b5:a4:9a:4e:e0:14:30:bc:
0c:91:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:33 2025 by rpki-client