Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7801d0-6ae4-4ec6-9fa4-fcae2da9d108/1/4h1fdTqIMeZqTnUk7dlyKaBD_Os.mft
File: 4h1fdTqIMeZqTnUk7dlyKaBD_Os.mft (raw, json)
Hash identifier: qGS7b37pQJt2HHtPnEr43aKgKNK2TjDL/5CjW7+EkA0=
Subject key identifier: 9F:F8:1D:B6:AA:B2:C5:4D:49:97:34:D6:74:77:FD:60:3F:71:DC:9A
Authority key identifier: E2:1D:5F:75:3A:88:31:E6:6A:4E:75:24:ED:D9:72:29:A0:43:FC:EB
Certificate issuer: /CN=e21d5f753a8831e66a4e7524edd97229a043fceb
Certificate serial: 018AF97D58C0700D7E15EA9BF1C7FD5796E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h1fdTqIMeZqTnUk7dlyKaBD_Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7801d0-6ae4-4ec6-9fa4-fcae2da9d108/1/4h1fdTqIMeZqTnUk7dlyKaBD_Os.mft
Manifest number: 088F
Signing time: Wed 04 Oct 2023 07:00:56 +0000
Manifest this update: Wed 04 Oct 2023 07:00:56 +0000
Manifest next update: Thu 05 Oct 2023 07:00:56 +0000
Files and hashes: 1: 4h1fdTqIMeZqTnUk7dlyKaBD_Os.crl (hash: jMVCyqVgc/VLyUHWwgq9A7eAV1ikUq4vUT9RRQixbws=)
2: NnjYDdNCynvH35lMW1rIeFpND0w.roa (hash: 0b/XS5MLhswmI9xbKxwjxsPxPEv78PMoisgI9DWJZxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:7d:58:c0:70:0d:7e:15:ea:9b:f1:c7:fd:57:96:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21d5f753a8831e66a4e7524edd97229a043fceb
Validity
Not Before: Oct 4 07:00:56 2023 GMT
Not After : Oct 5 07:00:56 2023 GMT
Subject: CN=9ff81db6aab2c54d499734d67477fd603f71dc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:40:11:d7:55:4b:ad:c7:df:88:ae:54:c7:
af:18:93:65:a9:41:61:5c:4e:36:75:5f:f5:fa:2f:
dd:0c:b1:32:18:26:2c:cf:8b:21:70:07:38:9c:45:
3c:23:34:2c:81:94:18:7e:75:ac:64:37:34:42:71:
40:dd:ad:39:cc:bb:fb:fa:e9:ea:7e:f3:ee:db:5a:
9a:42:f7:62:2a:ed:64:ed:9d:27:a5:cc:54:28:11:
fd:58:c3:0b:7b:95:98:43:48:03:01:5f:67:91:65:
61:c8:60:f4:fc:c6:61:73:24:84:01:cf:ea:86:10:
64:e5:e8:e8:51:d7:99:5f:d7:d6:bb:74:42:e2:b9:
24:37:09:72:3f:0c:27:88:02:90:1b:b7:dc:4f:86:
32:3a:98:03:64:15:0d:61:51:d6:61:47:d4:ad:fd:
28:bf:85:ac:38:5a:36:b8:82:10:d4:78:2c:4e:69:
e0:e4:81:48:66:05:e8:9a:76:c3:e1:68:e9:70:6b:
dd:fe:64:5c:32:85:8d:81:42:4e:83:67:96:3e:5a:
8f:25:5f:d9:79:8b:1b:dd:f5:b2:80:83:8e:b8:19:
34:e9:cf:e9:cc:d6:69:59:ac:3d:6d:0f:e0:ed:92:
58:b3:5c:b0:46:84:13:11:b3:49:a2:82:6c:a2:88:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:1D:B6:AA:B2:C5:4D:49:97:34:D6:74:77:FD:60:3F:71:DC:9A
X509v3 Authority Key Identifier:
keyid:E2:1D:5F:75:3A:88:31:E6:6A:4E:75:24:ED:D9:72:29:A0:43:FC:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h1fdTqIMeZqTnUk7dlyKaBD_Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7801d0-6ae4-4ec6-9fa4-fcae2da9d108/1/4h1fdTqIMeZqTnUk7dlyKaBD_Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7801d0-6ae4-4ec6-9fa4-fcae2da9d108/1/4h1fdTqIMeZqTnUk7dlyKaBD_Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b3:2e:57:0a:fc:bb:b0:99:58:df:3c:fd:3b:b3:11:b8:d6:
fc:10:43:5c:a4:02:2d:75:ad:fd:1f:c2:b8:43:8e:46:c9:c2:
13:4e:8b:31:5f:89:b3:c0:c0:bb:63:24:02:76:a0:bf:b6:cf:
36:90:44:5e:07:47:ac:bf:26:99:88:3f:3e:18:94:dc:a6:a6:
b3:4b:e5:bb:92:58:be:dd:7c:51:e3:95:87:97:10:c3:ee:06:
a5:e9:e3:33:52:04:4c:07:9d:a4:de:a7:8b:2b:6f:db:75:60:
2b:3a:84:61:9f:2f:81:e8:37:63:f4:b4:76:88:bb:e5:90:a0:
76:e5:bf:df:c5:69:3c:07:29:9d:ba:7b:ea:fc:5c:12:7f:fc:
45:97:2b:f3:6b:31:21:c7:24:62:0f:ad:52:41:37:d2:b3:47:
f3:78:77:f5:cc:c1:f6:9c:91:4d:16:a6:88:6b:6f:aa:aa:31:
3f:3e:05:f0:19:00:2a:17:12:20:3c:cc:64:c4:2d:9a:bd:06:
fe:b1:6c:ce:ca:bc:13:8f:94:24:8c:68:3b:f1:ec:5b:12:90:
3d:9f:0e:2e:e2:82:2b:de:09:f0:a5:94:cd:ba:22:4c:e8:5e:
32:6f:48:39:74:88:ef:40:78:4c:37:b7:be:75:d9:97:01:b1:
ae:01:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 12:35:11 2023 by rpki-client on console-ams.rpki-client.org