Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/dof_cthbc8P1AB5Q1B7zNPG9qzg.mft
File: dof_cthbc8P1AB5Q1B7zNPG9qzg.mft (raw, json)
Hash identifier: tD6dPwD5WuFrszDBXib2n4oU7AYXW2gLMyqMBbAOUGQ=
Subject key identifier: FC:4C:B9:63:3A:C1:D5:7F:27:EE:5A:E4:A6:88:7D:7A:4C:52:8C:4C
Authority key identifier: 76:87:FF:72:D8:5B:73:C3:F5:00:1E:50:D4:1E:F3:34:F1:BD:AB:38
Certificate issuer: /CN=7687ff72d85b73c3f5001e50d41ef334f1bdab38
Certificate serial: 018C6230EC290624CC63C6722DAC79949399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dof_cthbc8P1AB5Q1B7zNPG9qzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/dof_cthbc8P1AB5Q1B7zNPG9qzg.mft
Manifest number: 0238
Signing time: Wed 13 Dec 2023 08:00:22 +0000
Manifest this update: Wed 13 Dec 2023 08:00:22 +0000
Manifest next update: Thu 14 Dec 2023 08:00:22 +0000
Files and hashes: 1: dof_cthbc8P1AB5Q1B7zNPG9qzg.crl (hash: EEiCS/p47xVRi9gSOke1vd2b+vwLlVrlkOB0vLsMh5M=)
2: eDy-J9PNFCmse8NSgg-edW23nzo.roa (hash: HzcMDz2jXAGumSBErWQhHPLBHCreKfE8qulwIvNvVJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:30:ec:29:06:24:cc:63:c6:72:2d:ac:79:94:93:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7687ff72d85b73c3f5001e50d41ef334f1bdab38
Validity
Not Before: Dec 13 08:00:22 2023 GMT
Not After : Dec 14 08:00:22 2023 GMT
Subject: CN=fc4cb9633ac1d57f27ee5ae4a6887d7a4c528c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:ce:25:f4:db:71:0e:e8:c2:8b:46:21:c4:
b0:76:f1:d0:3d:96:07:7c:14:3f:5b:85:6f:c5:15:
fd:83:06:7b:02:f8:98:2a:06:5a:70:77:de:6a:b2:
eb:0f:a5:44:ed:bd:ce:18:d9:8f:7a:a6:42:34:0e:
51:71:f9:ce:18:ea:58:94:81:18:67:a7:90:d1:ec:
1b:b2:e9:22:23:a3:8a:3c:9f:db:e1:bd:99:42:c6:
0c:13:65:95:3b:92:cc:ef:96:e0:e1:05:dd:a1:fa:
c4:bd:60:4c:ee:34:09:b7:16:2c:1b:00:6f:3c:f1:
94:a3:b5:f3:fb:6c:c2:cb:89:df:b8:f9:2a:0d:68:
8b:74:eb:3c:49:92:f2:9d:cc:8e:6e:73:ef:f0:c3:
8a:93:9c:10:5a:66:2e:6b:aa:cc:ce:14:5d:ff:fd:
67:95:77:f6:14:3c:a6:9e:23:e1:8d:8a:63:f8:44:
f3:05:74:ae:eb:df:66:e8:3e:49:ad:c0:0a:4d:fe:
1a:eb:42:c4:1e:11:3f:7f:35:72:c0:ae:e8:64:22:
e8:bf:9b:a4:4d:b5:92:7b:de:b1:fb:b8:5e:d4:33:
ae:51:3d:01:b8:31:d6:38:90:83:78:d3:2d:0a:d9:
c2:31:0f:f1:de:75:76:d2:fa:74:92:10:3f:c2:b4:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4C:B9:63:3A:C1:D5:7F:27:EE:5A:E4:A6:88:7D:7A:4C:52:8C:4C
X509v3 Authority Key Identifier:
keyid:76:87:FF:72:D8:5B:73:C3:F5:00:1E:50:D4:1E:F3:34:F1:BD:AB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dof_cthbc8P1AB5Q1B7zNPG9qzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/dof_cthbc8P1AB5Q1B7zNPG9qzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/dof_cthbc8P1AB5Q1B7zNPG9qzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:5a:38:40:c1:10:46:d0:6d:67:e9:45:c7:8e:29:20:8a:ab:
e4:0a:86:01:65:d5:fe:7c:84:f5:8e:62:1f:2c:44:cf:36:52:
84:44:98:a6:5d:82:89:e2:03:ad:9f:61:44:a5:29:5a:c4:80:
46:a2:84:bc:aa:83:40:13:1f:2f:f2:03:83:c8:74:02:bb:94:
f5:2e:86:dc:1f:4e:71:65:69:69:84:49:ed:3e:f8:5c:4b:64:
32:2d:de:9c:e2:cd:b2:86:9a:dc:86:fc:f7:a3:ec:77:a8:d5:
64:46:85:16:15:93:ee:23:35:da:d3:d9:97:28:cf:6d:ec:09:
b8:a4:30:a3:7b:c1:bb:3c:cc:89:a6:e0:69:8b:43:95:ce:50:
6f:84:f9:29:33:18:52:e2:cd:72:a1:f4:74:5b:61:2b:61:1e:
3c:90:20:cc:da:9f:50:72:fb:be:e3:ef:f6:69:f2:93:4f:01:
81:f5:bd:21:d1:49:bd:98:63:b2:6b:eb:c1:a5:18:2f:f5:e7:
98:df:4f:03:80:f4:b4:03:40:86:de:79:52:2b:89:40:83:8f:
63:84:a4:e5:1e:0f:31:3e:6b:69:37:c6:f8:09:bc:fe:ab:1e:
90:ef:23:0a:9d:74:c1:af:fa:ff:39:3a:24:0d:ed:32:f6:82:
36:7c:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:01 2024 by rpki-client on console-fra.rpki-client.org