Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.mft
File: 2BR0KKIohTG4dzIOEQiSonXMEmM.mft (raw, json)
Hash identifier: mqf6HY69h6jdtJ+0pXP6l3Uf/uiAlybq6qRaAxsFvYc=
Subject key identifier: 09:CD:58:44:BF:6A:BF:0F:A4:EE:95:F1:B6:B8:5C:E8:6B:05:D2:9E
Authority key identifier: D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
Certificate issuer: /CN=d8147428a2288531b877320e110892a275cc1263
Certificate serial: 018D11B764B56C1078D1C862A783376A68F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.mft
Manifest number: 08CE
Signing time: Tue 16 Jan 2024 10:00:47 +0000
Manifest this update: Tue 16 Jan 2024 10:00:47 +0000
Manifest next update: Wed 17 Jan 2024 10:00:47 +0000
Files and hashes: 1: 2BR0KKIohTG4dzIOEQiSonXMEmM.crl (hash: SGOVmlUi9tgavSsRvpBX4JNtnUjXIF6DkVdAKd6mB6E=)
2: VCKXNHisDtLslgTrjODk0lGKL8g.roa (hash: +fR0fjSeFqmZS+myTrzkbBunCVvRSxSIc6xW9HBtpaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:b7:64:b5:6c:10:78:d1:c8:62:a7:83:37:6a:68:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8147428a2288531b877320e110892a275cc1263
Validity
Not Before: Jan 16 10:00:47 2024 GMT
Not After : Jan 17 10:00:47 2024 GMT
Subject: CN=09cd5844bf6abf0fa4ee95f1b6b85ce86b05d29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:97:b0:d9:d7:9a:5a:fc:49:e5:35:48:98:
19:e9:9a:f9:75:b1:48:49:13:cb:20:0c:0f:ae:34:
e3:a1:85:d0:ad:40:46:55:24:f8:c4:65:02:40:bb:
5b:f4:b4:ae:a5:4b:ad:78:1e:8f:5e:1d:7b:32:91:
21:0f:a2:75:56:e0:78:ff:d3:61:ac:86:9c:98:9b:
ff:c4:a4:30:cd:1a:60:b3:97:45:41:d6:6f:86:94:
4c:98:49:52:dd:2e:52:46:f0:94:0e:2d:e4:d5:0d:
46:95:0a:74:58:d6:b6:dc:36:ac:48:70:17:16:10:
2d:b1:f5:34:ab:66:b2:ec:bc:37:11:9d:b1:32:fe:
20:2a:f5:86:0f:be:b7:e5:d7:7e:bd:c5:52:e0:bb:
8f:b7:53:a6:e6:2e:2e:a4:7f:f5:f2:6a:0d:57:9f:
e8:12:1f:b9:b9:34:0b:05:fe:5d:36:1f:ba:b1:ad:
ac:66:6d:77:93:a9:4f:f1:dc:6f:3c:05:bd:4f:b2:
b6:47:f5:b1:1e:96:cf:27:1c:9c:48:37:af:98:e8:
1a:c9:79:15:89:d7:1a:8a:3d:2d:a1:61:de:fd:11:
26:12:8a:e2:97:26:03:f7:63:e7:3d:60:b8:74:a4:
9b:d7:1d:83:cd:57:b0:10:87:7a:b7:e3:c8:6a:b2:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CD:58:44:BF:6A:BF:0F:A4:EE:95:F1:B6:B8:5C:E8:6B:05:D2:9E
X509v3 Authority Key Identifier:
keyid:D8:14:74:28:A2:28:85:31:B8:77:32:0E:11:08:92:A2:75:CC:12:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BR0KKIohTG4dzIOEQiSonXMEmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f252f8-38a8-4e5b-ba44-57baa1e7c4e1/1/2BR0KKIohTG4dzIOEQiSonXMEmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c3:78:df:c7:2d:f6:90:d7:c4:7f:0c:46:b8:f6:37:14:40:
a3:81:50:fb:df:7d:16:74:26:75:c8:d5:45:fc:86:ef:39:6d:
b5:df:29:1c:0c:3b:6e:42:37:92:0f:eb:08:ab:59:46:70:23:
ca:63:cf:af:47:c1:1e:56:d0:14:60:d3:50:e7:e1:b8:2b:c4:
3c:38:91:7e:b1:f6:09:df:2d:08:3c:b9:99:7d:d2:14:69:a9:
02:d9:da:27:a7:7a:13:20:7e:5d:15:82:27:05:d4:44:f0:f8:
72:2f:51:18:79:3c:a4:d6:72:7a:ff:80:2b:39:ee:4c:8f:25:
38:cd:42:13:57:71:64:1d:9b:2a:48:c8:79:13:b5:eb:27:51:
4a:1d:ab:e6:6e:79:b1:ff:5b:50:d2:9b:fa:5e:bd:e9:a0:78:
16:2b:f0:d8:6c:c0:e7:d8:69:79:e9:42:5a:96:98:46:e3:80:
b7:7b:43:fc:37:e9:92:f0:36:c7:db:19:0e:e2:d2:7a:6e:97:
ab:20:b2:18:6d:e0:78:94:6c:24:2a:ea:dc:4f:26:31:48:47:
79:f7:5b:52:7d:49:f7:d0:28:43:c7:34:70:6a:7d:d1:9a:a1:
19:82:ca:25:f3:d0:d2:70:f7:ac:15:8a:ad:14:a1:c8:a3:0b:
ce:ed:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 19:12:49 2024 by rpki-client on console-fra.rpki-client.org