Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.mft
File: sKNxxYMduXBj4MwEvOC06bAGbM0.mft (raw, json)
Hash identifier: MBJu82U78Q8jvX4YT72EjOWQHMv/wUqafcV3LjGbU4I=
Subject key identifier: 11:B4:87:BB:39:07:02:82:53:C2:1D:3D:2B:E9:23:E1:BE:17:D0:FC
Authority key identifier: B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD
Certificate issuer: /CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
Certificate serial: 018D878583AC9752D3D246DC9F487D835F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.mft
Manifest number: 0852
Signing time: Thu 08 Feb 2024 07:01:30 +0000
Manifest this update: Thu 08 Feb 2024 07:01:30 +0000
Manifest next update: Fri 09 Feb 2024 07:01:30 +0000
Files and hashes: 1: 2quVaNU_UK4AeDSRXeyjlmj0Z7o.roa (hash: c+meiHHf1XGdXMuwSRQkvBDGJn56OsUW95s8/sFdecQ=)
2: sKNxxYMduXBj4MwEvOC06bAGbM0.crl (hash: jkmirw4SVEgDv6mesaCA87gVswx25vo1G2J4GJwMIB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:85:83:ac:97:52:d3:d2:46:dc:9f:48:7d:83:5f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a371c5831db97063e0cc04bce0b4e9b0066ccd
Validity
Not Before: Feb 8 07:01:30 2024 GMT
Not After : Feb 9 07:01:30 2024 GMT
Subject: CN=11b487bb3907028253c21d3d2be923e1be17d0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:88:ea:aa:0a:bf:e6:ea:30:fa:96:ed:ae:
bc:3f:3c:0a:3a:fa:76:0f:b2:6a:19:cb:10:17:c7:
8a:8b:dd:e2:a2:5b:ba:3c:57:b8:39:e5:82:f1:d8:
c0:cf:67:67:11:eb:44:75:6f:b3:1b:f9:66:cd:99:
62:16:6b:52:b3:65:3e:89:8d:3e:41:98:02:6f:16:
80:4e:b9:27:e6:df:ca:52:84:ce:e4:b2:43:7d:60:
fe:d0:11:cb:26:ed:a7:36:08:7b:26:82:9c:bf:fe:
8b:14:20:dd:80:a4:bc:51:ee:04:c9:53:7d:73:eb:
50:82:a8:1e:6a:ca:2b:08:e0:1b:88:a0:d6:1e:25:
3f:02:03:b3:08:e6:4e:01:0d:39:35:41:24:1a:ed:
db:3a:27:e9:3a:c9:6a:0c:9e:a8:69:f1:b8:75:31:
40:cc:bd:16:4a:f9:99:22:84:cc:ab:3b:31:fe:11:
d1:aa:3a:e3:ca:0e:06:79:62:21:04:b6:19:95:12:
8b:74:a0:ee:70:78:60:0c:b7:6a:b7:f8:f7:33:d5:
7b:38:7b:70:92:1b:42:49:be:7c:8b:eb:28:b0:77:
4e:d3:1f:25:c3:e2:db:93:65:38:57:ec:ba:74:07:
19:26:22:fa:97:b5:53:bd:97:bf:67:f7:77:45:ae:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B4:87:BB:39:07:02:82:53:C2:1D:3D:2B:E9:23:E1:BE:17:D0:FC
X509v3 Authority Key Identifier:
keyid:B0:A3:71:C5:83:1D:B9:70:63:E0:CC:04:BC:E0:B4:E9:B0:06:6C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKNxxYMduXBj4MwEvOC06bAGbM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f5f0ca-2df8-430f-aea7-5de67c61298e/1/sKNxxYMduXBj4MwEvOC06bAGbM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e9:a2:f8:d9:be:1b:37:a0:fa:fa:66:30:c4:12:18:4e:ec:
56:3c:2b:40:e2:f9:ac:78:62:16:e9:86:04:b1:4a:69:a8:91:
77:13:61:69:53:70:21:8e:57:0d:c3:e9:a6:eb:ce:bc:73:df:
14:6a:7a:b1:5e:9b:3e:17:22:2e:ab:34:58:a6:c9:10:7e:aa:
20:1d:2c:80:1a:23:88:9a:60:14:80:29:69:44:aa:87:63:86:
0a:a6:69:a7:ad:01:3e:31:6f:60:7f:e0:30:0d:da:1c:63:75:
01:69:d4:6e:3e:35:79:1a:4e:f1:78:9c:d3:75:6b:eb:8b:70:
07:52:ee:dd:27:2c:43:97:24:33:48:b8:b7:fa:2e:a7:37:6f:
b4:43:85:d6:bd:68:1a:c6:cf:96:3f:5a:9c:f8:ae:94:d6:a7:
ff:39:b5:9f:1f:89:bd:d8:fd:a8:0a:b5:67:07:53:2f:10:ce:
35:c8:4f:cb:27:ec:ea:72:cd:76:8d:96:4e:ef:ed:66:14:52:
b8:95:d9:29:95:41:b7:a0:be:61:96:32:61:30:c6:52:8f:59:
b5:92:df:d5:a8:3f:e0:23:f1:66:63:f7:96:94:aa:1f:0c:cc:
b7:55:a2:66:e0:8a:e7:e6:82:49:24:8b:d1:4f:f6:59:da:ec:
eb:fc:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:56:14 2024 by rpki-client on console-fra.rpki-client.org