Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a569-7e40-4bba-bca4-5cda0bf78a2d/1/t_zoFAJHimhtIT-aGwYaYYD6KIM.mft
File: t_zoFAJHimhtIT-aGwYaYYD6KIM.mft (raw, json)
Hash identifier: 7ecX6aq+xJuWCFXG+wbNDXFt6eCpvE/43hM8BnDZNv0=
Subject key identifier: 20:CE:E7:7C:72:31:B5:68:10:A9:63:A8:FC:8E:05:8A:E8:F7:1A:2D
Authority key identifier: B7:FC:E8:14:02:47:8A:68:6D:21:3F:9A:1B:06:1A:61:80:FA:28:83
Certificate issuer: /CN=b7fce81402478a686d213f9a1b061a6180fa2883
Certificate serial: 150F0AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_zoFAJHimhtIT-aGwYaYYD6KIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a569-7e40-4bba-bca4-5cda0bf78a2d/1/t_zoFAJHimhtIT-aGwYaYYD6KIM.mft
Manifest number: 085E
Signing time: Mon 21 Feb 2022 11:06:32 +0000
Manifest this update: Mon 21 Feb 2022 11:06:32 +0000
Manifest next update: Tue 22 Feb 2022 11:06:32 +0000
Files and hashes: 1: 37z_dkNmB9kb-PAn6JabwGMNuZY.roa (hash: N9zEs28YaPxT8gyJj+2VtFXByEC/1DRCAo1azM9nrr8=)
2: t_zoFAJHimhtIT-aGwYaYYD6KIM.crl (hash: tmxVm1eDpqagw8zSV+CAxXOH+9GtVmqZv1g9Fe3HtMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353307383 (0x150f0af7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7fce81402478a686d213f9a1b061a6180fa2883
Validity
Not Before: Feb 21 11:06:32 2022 GMT
Not After : Feb 22 11:06:32 2022 GMT
Subject: CN=20cee77c7231b56810a963a8fc8e058ae8f71a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:28:71:04:b4:87:ef:28:f2:7a:7d:a2:0f:d5:
b3:a2:54:a5:6c:e0:d1:56:ea:32:5a:0b:2c:77:4c:
ac:d5:53:34:f8:f6:37:4b:6f:48:9e:cf:f4:27:8b:
cc:fc:d8:e1:fa:85:15:11:f7:37:5d:5e:02:ea:07:
96:57:b1:0f:57:02:6d:01:04:28:de:b7:27:b3:37:
09:2b:72:45:0d:9a:2a:b0:ee:8c:66:d0:db:7e:98:
ab:74:f5:1d:2c:e9:65:36:18:05:53:c8:f5:a6:78:
bc:7e:47:76:00:57:61:bc:99:fd:2d:ac:39:ef:5b:
1d:4b:96:5b:80:d2:ef:c9:cd:19:4f:47:64:6f:c8:
27:c1:3f:67:95:2e:31:aa:c3:7c:00:63:19:77:a0:
8c:a2:8e:3b:57:0a:f1:26:87:c4:c7:29:a7:ba:77:
30:84:eb:c6:b5:8a:ee:67:cd:b3:6f:21:49:5e:dc:
c3:70:bf:ac:e1:52:fc:c6:d6:ed:cd:51:1e:e9:7e:
8b:d7:d1:de:81:10:62:73:cd:74:3f:63:cd:72:2c:
90:38:06:68:9c:93:4d:c9:fe:a1:37:fe:cd:62:be:
e7:f7:63:cf:54:31:3d:c3:f7:c9:de:65:f9:0b:58:
a5:8e:cd:90:c3:ee:87:e9:41:b5:bf:c9:9e:74:7a:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CE:E7:7C:72:31:B5:68:10:A9:63:A8:FC:8E:05:8A:E8:F7:1A:2D
X509v3 Authority Key Identifier:
keyid:B7:FC:E8:14:02:47:8A:68:6D:21:3F:9A:1B:06:1A:61:80:FA:28:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_zoFAJHimhtIT-aGwYaYYD6KIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a569-7e40-4bba-bca4-5cda0bf78a2d/1/t_zoFAJHimhtIT-aGwYaYYD6KIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a569-7e40-4bba-bca4-5cda0bf78a2d/1/t_zoFAJHimhtIT-aGwYaYYD6KIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:05:d7:95:ab:84:92:eb:94:3d:2d:2a:96:35:29:14:0d:75:
ac:48:04:c6:bb:fa:d8:a8:60:24:6c:cf:d5:5b:6f:a2:42:d9:
4a:a3:24:f2:0a:9a:5e:ec:9a:53:7b:07:cd:96:a9:bf:38:6f:
72:97:9e:d5:9f:50:65:cd:31:9b:c4:a6:bf:67:0e:af:e9:9e:
58:3a:58:da:82:77:d0:7a:38:36:11:d8:0c:bb:90:83:1c:18:
84:e2:a1:ad:0c:ec:9e:9d:d7:ec:ac:95:eb:ed:49:43:de:30:
44:1a:da:39:54:cf:a3:52:c6:28:51:59:c9:58:d2:b2:f0:68:
e1:7b:5c:f5:8e:b9:91:35:ed:94:78:9d:3d:8d:2d:ed:f3:50:
c6:e5:3b:0d:6a:f6:22:71:2d:d4:23:f5:1d:29:11:2f:ce:0f:
bf:58:6f:bc:04:08:5e:c3:3b:49:66:aa:04:87:84:42:6f:2d:
a1:de:8f:01:fc:92:36:17:53:ab:05:ef:65:22:48:90:1b:7b:
78:40:a4:ab:6e:e8:7f:fe:be:53:2a:ff:c6:d6:f4:ed:b4:b6:
ce:1f:c3:07:51:61:67:d7:fc:b9:c3:bf:33:84:ad:ed:75:90:
a5:cf:45:85:6d:72:44:55:d0:28:21:60:4f:07:3d:57:26:d4:
8f:9c:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:29 2024 by rpki-client on console-fra.rpki-client.org