Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
File: gXzKamPisaqONiEq4uO2METHwds.mft (raw, json)
Hash identifier: RMCyQ2r6+fc5v4yFB+/M0tOFIZwQflIsSCRKoBMtAR8=
Subject key identifier: F1:DC:4B:D5:A1:52:AF:DA:92:FC:D1:C7:AB:9A:37:C4:4D:65:A7:F5
Authority key identifier: 81:7C:CA:6A:63:E2:B1:AA:8E:36:21:2A:E2:E3:B6:30:44:C7:C1:DB
Certificate issuer: /CN=817cca6a63e2b1aa8e36212ae2e3b63044c7c1db
Certificate serial: 01910DD00553CA2E1173906530A53422132B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXzKamPisaqONiEq4uO2METHwds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
Manifest number: 0A34
Signing time: Thu 01 Aug 2024 12:00:22 +0000
Manifest this update: Thu 01 Aug 2024 12:00:22 +0000
Manifest next update: Fri 02 Aug 2024 12:00:22 +0000
Files and hashes: 1: gXzKamPisaqONiEq4uO2METHwds.crl (hash: +lyZVjdf3OXjq68UOo5xOeSK2BkJ6BC+We5ML0sA++I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:d0:05:53:ca:2e:11:73:90:65:30:a5:34:22:13:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cca6a63e2b1aa8e36212ae2e3b63044c7c1db
Validity
Not Before: Aug 1 12:00:22 2024 GMT
Not After : Aug 2 12:00:22 2024 GMT
Subject: CN=f1dc4bd5a152afda92fcd1c7ab9a37c44d65a7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:65:cd:e9:d2:2a:02:d0:52:d0:57:04:32:
70:31:cb:a5:16:7b:db:ec:ba:17:e3:d3:d8:45:ed:
e6:1f:c4:c8:c1:27:66:eb:80:35:9a:6f:a8:01:f5:
69:c6:d9:00:cd:21:82:c9:2c:af:57:3e:82:61:5a:
bf:d9:78:36:34:2e:2d:cd:c5:29:64:94:f9:ff:bb:
50:54:5f:e0:02:59:82:69:77:ef:7d:27:0f:f6:fb:
00:ba:1b:aa:a0:19:d9:ee:63:ef:b9:67:c0:16:4d:
1a:6f:f9:c3:20:bf:bb:4a:61:12:ca:39:4b:54:40:
1e:36:3d:e6:2c:6a:8a:72:ff:a9:e9:8e:17:7f:33:
da:88:84:28:25:36:e8:ab:ca:ef:ac:f0:18:d5:97:
35:0a:f6:a1:dc:dc:78:fd:5a:73:36:9a:7c:a7:4f:
c3:58:33:38:72:1d:0a:1a:d1:52:27:fd:f8:4b:73:
72:d2:22:83:c4:49:5c:b5:f9:bf:c5:0b:b8:86:34:
0b:83:10:75:2d:c4:50:2b:c0:1c:05:e6:c4:2e:32:
ef:c6:a6:7d:eb:44:3a:ac:5c:ad:fa:97:ae:a4:12:
ba:08:41:4d:82:da:ec:21:86:69:5f:5b:39:cf:df:
c4:01:99:43:fd:87:5d:fa:3e:79:37:fe:05:bb:a5:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DC:4B:D5:A1:52:AF:DA:92:FC:D1:C7:AB:9A:37:C4:4D:65:A7:F5
X509v3 Authority Key Identifier:
keyid:81:7C:CA:6A:63:E2:B1:AA:8E:36:21:2A:E2:E3:B6:30:44:C7:C1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXzKamPisaqONiEq4uO2METHwds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c14b50-a446-45b1-8064-1be51cc2426e/1/gXzKamPisaqONiEq4uO2METHwds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1c:0f:cb:36:ea:d1:3e:16:0e:8b:cf:ef:e6:58:d5:36:e2:
15:b8:23:aa:43:2d:2a:16:e8:1b:88:61:24:fd:4b:3c:a4:59:
2a:67:1a:17:22:73:31:84:c8:79:9e:96:2f:ab:c5:35:66:83:
30:a7:4a:13:7d:75:03:04:bf:be:0b:d5:12:f2:a0:0b:c0:96:
82:3f:d7:7d:3c:4d:f9:9a:d4:cf:cc:21:3e:94:b4:44:fe:38:
8e:8b:01:fe:06:53:b4:ce:93:18:14:f4:dc:14:21:6f:21:73:
01:95:16:87:11:4a:2a:9c:d9:c6:97:4c:8e:62:32:40:5a:48:
77:77:08:66:07:05:15:4f:3a:31:8b:ab:9c:1b:cc:05:fa:3e:
87:35:dc:50:da:03:f6:96:c3:a8:65:63:89:41:cc:7c:80:bf:
37:4f:c9:03:01:ae:03:db:41:be:5d:42:d6:85:41:ba:40:57:
7e:15:5d:62:74:98:b1:b5:43:fc:b9:36:0a:72:5e:ac:2d:1a:
46:dc:07:05:e8:fa:b5:55:59:e2:19:7f:de:49:64:e5:d3:07:
3e:4a:bf:5b:af:6f:f7:4f:42:40:11:27:ca:c2:bd:ac:3a:2e:
32:67:c3:78:31:48:31:e0:86:99:4a:1d:cd:c9:0e:88:9e:ff:
74:f6:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:11:52 2024 by rpki-client on console-fra.rpki-client.org