Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/pjsXCAz38qmR6SlMHdtw7bVBdO8.mft
File: pjsXCAz38qmR6SlMHdtw7bVBdO8.mft (raw, json)
Hash identifier: +1NaEXi3VWeyO/z8fKlxpB8nq+SG0xnH2LFei7HCSFs=
Subject key identifier: 5A:07:2C:B5:AE:F3:A3:57:11:49:EB:5D:F9:FB:6F:FB:53:82:0A:E9
Authority key identifier: A6:3B:17:08:0C:F7:F2:A9:91:E9:29:4C:1D:DB:70:ED:B5:41:74:EF
Certificate issuer: /CN=a63b17080cf7f2a991e9294c1ddb70edb54174ef
Certificate serial: 018B8F43CA65957FF3466B4565D556C3450F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjsXCAz38qmR6SlMHdtw7bVBdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/pjsXCAz38qmR6SlMHdtw7bVBdO8.mft
Manifest number: 088C
Signing time: Thu 02 Nov 2023 09:01:06 +0000
Manifest this update: Thu 02 Nov 2023 09:01:06 +0000
Manifest next update: Fri 03 Nov 2023 09:01:06 +0000
Files and hashes: 1: m-QJV-GleJOjgwrLjVsim-NEw9U.roa (hash: SGRejXPzOIpG6YloQ/e66h1i6ozRhsNX4Jd8bp8bjCc=)
2: pjsXCAz38qmR6SlMHdtw7bVBdO8.crl (hash: TBzPhuR4ZQ+GT/K9xqtIAu4YyjnMADVdZoFc078Grj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:ca:65:95:7f:f3:46:6b:45:65:d5:56:c3:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63b17080cf7f2a991e9294c1ddb70edb54174ef
Validity
Not Before: Nov 2 09:01:06 2023 GMT
Not After : Nov 3 09:01:06 2023 GMT
Subject: CN=5a072cb5aef3a3571149eb5df9fb6ffb53820ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:a1:90:16:06:e1:f5:1d:ae:e6:96:3c:82:
f1:87:41:a0:24:c1:a7:1f:b1:6d:6d:21:f9:92:62:
ab:b8:66:4b:6f:93:65:c6:c2:ce:ee:fa:85:75:0d:
c1:59:3d:eb:0e:c8:31:a9:bf:bc:45:12:4a:a5:f3:
87:b0:5b:f6:23:ad:25:04:43:c3:be:7e:ce:02:e0:
7d:5f:1f:db:fd:54:63:44:99:ca:f6:c1:0d:da:c5:
5e:2f:0a:a4:30:3d:a7:41:76:99:18:53:18:62:69:
a8:ec:c8:cb:17:42:7d:80:44:b6:d6:4f:ab:ac:e0:
c0:4c:d1:3b:68:f0:19:da:00:7c:bd:02:31:ca:6c:
c1:cb:f2:93:98:58:48:05:de:90:8f:e5:28:fb:6a:
65:f2:3a:f2:8b:59:9b:38:90:31:e2:3d:c4:8c:62:
ab:1e:e3:22:55:2b:b8:c6:60:f8:e8:b4:d5:71:dd:
ee:ca:ca:32:bf:b8:68:ba:b4:77:f3:66:89:26:fc:
5f:9a:71:95:7d:47:25:95:84:aa:8e:bf:ea:02:3b:
5c:59:36:bb:0c:7c:99:35:54:31:a8:72:ac:8a:1b:
34:f7:5f:49:9b:4e:b6:8d:c9:4b:5e:6b:e6:75:f3:
d7:22:e5:45:3e:8f:a0:d4:49:46:29:c6:6b:6b:78:
c7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:2C:B5:AE:F3:A3:57:11:49:EB:5D:F9:FB:6F:FB:53:82:0A:E9
X509v3 Authority Key Identifier:
keyid:A6:3B:17:08:0C:F7:F2:A9:91:E9:29:4C:1D:DB:70:ED:B5:41:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsXCAz38qmR6SlMHdtw7bVBdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/pjsXCAz38qmR6SlMHdtw7bVBdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/pjsXCAz38qmR6SlMHdtw7bVBdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:97:23:ec:a6:35:cf:57:fa:4b:c8:58:6d:c7:04:d8:ed:2c:
55:04:77:3c:ac:f1:36:1e:ab:67:e5:a2:b3:f5:7b:ff:aa:26:
3c:49:85:2a:2f:5e:06:02:3c:d0:35:38:6b:7a:bd:55:e1:dd:
c5:d8:87:cb:be:b1:d1:be:c9:36:1a:89:f4:c3:7a:5c:05:d7:
cf:d8:c0:4f:f9:f9:3a:54:f4:b9:e3:d6:1a:18:d9:10:e3:5c:
fd:78:26:8d:88:a1:21:90:d2:ef:71:68:c2:ab:29:2b:82:fa:
b2:1b:b1:c3:ab:e6:74:e5:b0:bf:42:1b:b2:c5:84:06:d0:35:
ef:4e:99:23:c3:e0:50:b4:b3:d6:9e:54:f0:d4:ed:df:9c:1c:
9c:5e:ae:c0:9f:59:19:42:d7:9e:38:2e:8f:fe:7a:4d:26:df:
d4:b6:4c:88:f2:b2:70:9d:52:75:c0:50:6a:fd:a1:43:4e:7f:
5f:df:cf:d4:7c:fa:c4:c1:5f:c9:99:62:a3:22:00:42:86:85:
c6:4a:88:cb:08:df:76:4c:f7:d8:3e:d8:05:4e:e1:d6:a0:a8:
90:35:e9:15:b5:c2:66:85:bb:ac:33:cb:8e:57:27:2a:c5:cc:
02:8a:2c:a5:c5:08:b3:14:c1:a8:54:30:ff:c3:ab:d6:70:54:
81:39:cc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 10:27:08 2023 by rpki-client on console-fra.rpki-client.org