Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
File: Cl0ds8h0vigpimiBLKoksbQ-A8k.mft (raw, json)
Hash identifier: ErCNMOpoSkqEIAtCT1cZIlR7LeBdTfcmQoXnRTB0aXA=
Subject key identifier: 80:6F:B9:7B:09:C7:6C:69:D1:84:A6:9F:BF:7F:57:B5:D5:A5:5B:03
Authority key identifier: 0A:5D:1D:B3:C8:74:BE:28:29:8A:68:81:2C:AA:24:B1:B4:3E:03:C9
Certificate issuer: /CN=0a5d1db3c874be28298a68812caa24b1b43e03c9
Certificate serial: 018A830C061A35799FB925899D1E6C198048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl0ds8h0vigpimiBLKoksbQ-A8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
Manifest number: 065F
Signing time: Mon 11 Sep 2023 07:01:57 +0000
Manifest this update: Mon 11 Sep 2023 07:01:57 +0000
Manifest next update: Tue 12 Sep 2023 07:01:57 +0000
Files and hashes: 1: 7NJaRX6O6v5HeUz3LPaRXyzaQuY.roa (hash: c1qDX0iR44/Co9gtVWzZOyQAOAHOlkIoK3KdqhLwRTs=)
2: Cl0ds8h0vigpimiBLKoksbQ-A8k.crl (hash: o6oARd/HKOmazux/3hyd79DviOOA2faXNHIYzamNDik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:0c:06:1a:35:79:9f:b9:25:89:9d:1e:6c:19:80:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5d1db3c874be28298a68812caa24b1b43e03c9
Validity
Not Before: Sep 11 07:01:57 2023 GMT
Not After : Sep 12 07:01:57 2023 GMT
Subject: CN=806fb97b09c76c69d184a69fbf7f57b5d5a55b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:fc:0f:e9:cb:69:f2:18:2c:9d:cd:90:bb:
0d:dc:15:49:60:93:49:ff:7f:6f:2e:68:31:de:33:
56:f7:e8:e5:7e:d6:00:24:34:87:c6:bc:16:da:c1:
7c:04:05:e6:87:b5:b8:07:a9:a4:fb:88:33:a1:dd:
84:dc:05:97:58:ae:aa:d0:c7:2a:4c:2b:6f:6b:95:
86:e7:7c:38:5a:fb:4f:72:2f:f9:49:9a:c0:3e:df:
67:df:03:26:a9:1f:07:27:02:19:01:e4:b6:48:aa:
54:a6:7b:17:b4:ee:99:c8:dc:c4:d6:c5:11:8f:dd:
1a:a7:2b:00:1f:59:1b:dd:0b:59:9c:59:4b:cb:a1:
d0:85:c0:db:82:0d:7e:76:bf:4d:62:c7:86:dd:4a:
3d:9e:4c:8e:c3:2f:50:18:13:22:5e:bd:de:89:39:
37:0e:a2:78:48:ec:38:ea:e9:02:06:bb:d9:02:83:
2a:ef:9b:13:4a:17:91:47:1a:d9:ae:25:5b:30:60:
d1:b8:6e:45:47:43:a5:6b:3f:20:4b:63:dd:38:cc:
71:8a:2c:d8:11:44:6e:95:6f:b2:4e:98:d0:3f:08:
ab:cc:c6:3b:97:0e:08:85:3b:fa:ec:1b:ee:ab:39:
36:de:e8:2a:1d:57:d5:ef:77:cd:b7:af:9f:a2:ec:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:B9:7B:09:C7:6C:69:D1:84:A6:9F:BF:7F:57:B5:D5:A5:5B:03
X509v3 Authority Key Identifier:
keyid:0A:5D:1D:B3:C8:74:BE:28:29:8A:68:81:2C:AA:24:B1:B4:3E:03:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl0ds8h0vigpimiBLKoksbQ-A8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e9:8a:f2:eb:17:44:11:4e:4e:47:68:36:54:fc:04:07:ac:
56:a9:18:d2:28:43:0d:d3:16:23:1a:8d:25:c9:e6:7e:a8:d4:
f9:9d:c6:26:b9:02:2f:11:8c:e1:bb:2a:7e:e6:0b:26:09:f7:
69:e6:f9:65:a1:3f:05:f6:2f:f0:8d:18:f7:b8:62:e4:7a:3a:
b0:0e:e7:4c:b3:3e:01:e3:07:40:d8:68:a6:e6:79:d5:65:9e:
1b:d8:48:f4:84:b0:76:51:9f:72:5f:fe:c4:6c:3a:fa:86:3c:
a9:d0:ba:32:6e:73:d3:f3:58:a0:1f:da:d7:da:64:19:66:89:
c1:19:d3:2b:d8:5b:2a:10:a6:5c:80:59:8c:b2:29:b3:88:7e:
ea:d4:9b:9f:e4:18:d3:cd:39:ed:61:45:ee:8f:2f:d9:b6:58:
ed:ce:d4:01:65:92:be:b3:88:e3:9a:0b:a0:17:46:05:40:d2:
de:f5:2d:54:9a:47:ad:c2:90:c2:c9:71:19:de:45:cf:43:d5:
43:d3:b7:d7:1a:20:65:e0:d3:f1:07:24:5b:2a:65:42:b7:7a:
68:b7:e6:88:a0:08:f2:64:18:3b:c5:8f:24:29:4f:03:16:c3:
22:89:f7:9a:5f:98:b1:66:9d:8e:1b:4c:f0:6d:29:b3:e9:ec:
8f:f7:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 08:07:45 2023 by rpki-client on console-ams.rpki-client.org