Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.mft
File: gDQDJoIlMPlDhZxz5989NlUWi3A.mft (raw, json)
Hash identifier: O+LjRu1iZ0w40h+KTYk4ZyLOKCav/F8dhglklkUjYl8=
Subject key identifier: 1B:FC:97:C7:59:AA:24:F6:5B:D2:A7:0B:73:AD:AE:F8:42:CF:70:34
Authority key identifier: 80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
Certificate issuer: /CN=80340326822530f943859c73e7df3d3655168b70
Certificate serial: 018A63B6F66745E7D70000B1E24E356D211F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.mft
Manifest number: 0865
Signing time: Tue 05 Sep 2023 05:00:49 +0000
Manifest this update: Tue 05 Sep 2023 05:00:49 +0000
Manifest next update: Wed 06 Sep 2023 05:00:49 +0000
Files and hashes: 1: 7DhTH3kuTFFlluY_QX4ZHPu0v7g.roa (hash: z+/s+/PFelroAEbEmtBienEWAPy5iS/34SgA+E1Oixk=)
2: gDQDJoIlMPlDhZxz5989NlUWi3A.crl (hash: FeWa6BxS9ZtYo/mC2lweFg5hnXhtME/PnQm6Zf6Hk8A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:b6:f6:67:45:e7:d7:00:00:b1:e2:4e:35:6d:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80340326822530f943859c73e7df3d3655168b70
Validity
Not Before: Sep 5 05:00:49 2023 GMT
Not After : Sep 6 05:00:49 2023 GMT
Subject: CN=1bfc97c759aa24f65bd2a70b73adaef842cf7034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:82:86:51:3a:b5:51:fb:40:97:d0:63:2e:
c1:55:a3:af:a6:07:69:6a:b7:e2:ba:a2:cd:f6:13:
ae:be:08:bb:a7:9c:23:09:36:65:29:f1:5c:bc:28:
46:8c:78:31:2b:1d:ba:86:41:04:8b:0f:72:90:e4:
5f:fd:d5:a5:1a:39:c6:03:e4:a1:9b:1b:e9:95:97:
5c:2f:6a:5c:78:33:df:57:06:bf:a5:66:e9:26:77:
7f:1a:84:8e:58:0e:18:78:f3:d5:ed:47:c7:6d:24:
ad:a2:cb:94:c1:3a:70:48:7f:76:7f:de:69:c4:15:
38:91:97:ca:31:04:bb:72:b7:b9:e0:17:00:fd:43:
ae:7f:c6:9a:59:ff:41:c7:fa:35:43:9f:7d:fd:c6:
6e:45:a8:27:af:df:f5:29:6e:fa:92:94:27:78:90:
c4:3b:ab:6c:b8:2b:9d:a2:f8:b2:be:5e:f9:a8:40:
bc:28:dc:b6:ca:67:7b:20:d0:ab:40:dc:f3:6d:aa:
93:e2:bc:2e:50:3c:77:44:6e:24:52:79:b4:20:89:
7e:d5:d0:89:c4:63:37:a5:37:f6:71:01:6f:0d:54:
f9:73:2e:31:a6:12:3b:5f:4f:f7:3b:11:73:8d:e3:
f8:e0:eb:9e:d6:8c:3d:97:36:0a:ee:5f:68:9d:0f:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:97:C7:59:AA:24:F6:5B:D2:A7:0B:73:AD:AE:F8:42:CF:70:34
X509v3 Authority Key Identifier:
keyid:80:34:03:26:82:25:30:F9:43:85:9C:73:E7:DF:3D:36:55:16:8B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDQDJoIlMPlDhZxz5989NlUWi3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cec311-8989-4f41-a499-b695a4ba0cb6/1/gDQDJoIlMPlDhZxz5989NlUWi3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:95:f5:d8:ec:47:07:d3:43:c5:48:c4:dd:5e:f3:e6:58:c4:
30:f4:05:da:40:bf:52:d5:bb:b6:ff:72:08:5e:74:3f:7a:9e:
7d:c6:2e:16:3f:02:62:23:61:fe:28:d0:12:05:39:7b:2b:51:
86:da:f5:ab:46:a1:f9:8b:71:bd:38:37:6f:72:ff:7c:31:44:
12:a5:ce:96:59:68:89:93:54:a3:04:55:10:e8:cf:d9:79:49:
b1:4f:03:94:36:9e:a8:d9:dd:9f:4e:8a:ed:c0:a5:9f:c0:03:
f5:bd:20:37:7d:57:0a:3d:f7:3f:a1:93:96:9a:e6:b1:00:4c:
28:13:00:01:c2:a4:32:6a:6f:4d:e7:0a:6d:23:9e:c9:16:58:
3d:95:41:54:72:86:70:b3:a4:1e:6e:8b:7d:e1:59:44:bd:50:
a5:a4:dd:a2:7f:9d:97:1e:2f:a6:42:ee:95:d6:31:86:2a:54:
cb:5b:61:56:f2:8d:e5:d5:e3:cd:b2:c5:0e:47:95:99:54:83:
67:62:47:28:af:9a:15:37:32:42:20:e8:a8:10:51:26:08:ee:
ee:29:85:42:6c:85:32:b8:3a:99:78:be:ae:39:3f:ec:8e:aa:
be:55:58:83:af:67:e8:3f:30:64:1b:ea:f3:b9:c5:4a:dd:f9:
47:58:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 13:11:04 2023 by rpki-client on console-ams.rpki-client.org