Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/923ae4-af95-4a72-9c1f-6f97cfe54540/1/2EVNyXgJz_8vKpq5_bCm_TNhA84.mft
File: 2EVNyXgJz_8vKpq5_bCm_TNhA84.mft (raw, json)
Hash identifier: yxlalkHCT1yK4p+2wcE3Fd1Yn4++LLJRmu80+t36cfg=
Subject key identifier: 7C:C6:5A:42:88:C2:D7:5F:75:6C:AA:25:4C:C2:DE:39:90:48:80:1E
Authority key identifier: D8:45:4D:C9:78:09:CF:FF:2F:2A:9A:B9:FD:B0:A6:FD:33:61:03:CE
Certificate issuer: /CN=d8454dc97809cfff2f2a9ab9fdb0a6fd336103ce
Certificate serial: 018B8978145AD3F559B0B8B6C5F3593640C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2EVNyXgJz_8vKpq5_bCm_TNhA84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/923ae4-af95-4a72-9c1f-6f97cfe54540/1/2EVNyXgJz_8vKpq5_bCm_TNhA84.mft
Manifest number: 08A8
Signing time: Wed 01 Nov 2023 06:00:29 +0000
Manifest this update: Wed 01 Nov 2023 06:00:29 +0000
Manifest next update: Thu 02 Nov 2023 06:00:29 +0000
Files and hashes: 1: 2EVNyXgJz_8vKpq5_bCm_TNhA84.crl (hash: ebMH1XIlYNg2bw/bZo+ZZJ7jWf4XZ3o21sk4eXnSXtY=)
2: YXElSodp5SJa2zg_qp9tAluj69w.roa (hash: KbaHqxkDqF5Q8aRdhhQuGBISXyglGCUaR+FSqisjV18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:78:14:5a:d3:f5:59:b0:b8:b6:c5:f3:59:36:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8454dc97809cfff2f2a9ab9fdb0a6fd336103ce
Validity
Not Before: Nov 1 06:00:29 2023 GMT
Not After : Nov 2 06:00:29 2023 GMT
Subject: CN=7cc65a4288c2d75f756caa254cc2de399048801e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:95:0a:db:5f:81:5c:2a:4d:d0:5b:91:d3:
4d:ef:0a:ca:46:11:1b:dc:32:62:b5:c4:91:ee:87:
be:6c:d4:db:62:0b:11:99:48:15:04:a2:29:99:61:
b9:c4:3a:8b:4d:dc:34:9a:de:f0:fe:3a:02:f7:51:
a7:d2:ec:ae:8d:6d:02:e0:6a:3a:b1:77:ae:81:14:
89:ca:d3:7e:fc:d9:e1:a9:2c:c4:a7:cd:aa:d2:df:
a5:fc:39:cf:37:cc:b0:f7:0a:21:a3:40:8e:d2:d2:
7c:b6:1b:5c:36:cb:97:8f:db:66:b1:d3:aa:d7:d9:
33:81:40:e2:c4:84:99:94:69:7d:17:59:2a:16:b3:
92:7d:08:60:d4:30:e5:d7:38:94:71:f0:b6:e9:5b:
31:6a:53:2f:64:86:70:be:2b:d6:3f:49:d6:00:a5:
03:5e:ab:83:42:aa:0c:ad:e8:4f:e9:a6:31:3a:fe:
fe:ff:d6:b1:fc:79:de:af:9f:76:ec:c4:70:c8:f0:
55:d5:89:21:89:d3:28:67:b8:fd:ad:c2:45:7f:80:
39:ad:4e:7d:f1:27:7c:d7:59:42:40:f5:50:d9:05:
1a:a7:d4:0c:5b:48:78:2e:e5:8f:7a:35:14:28:37:
e9:92:43:cd:ee:c1:e4:04:b8:78:86:a9:15:a7:67:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C6:5A:42:88:C2:D7:5F:75:6C:AA:25:4C:C2:DE:39:90:48:80:1E
X509v3 Authority Key Identifier:
keyid:D8:45:4D:C9:78:09:CF:FF:2F:2A:9A:B9:FD:B0:A6:FD:33:61:03:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2EVNyXgJz_8vKpq5_bCm_TNhA84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/923ae4-af95-4a72-9c1f-6f97cfe54540/1/2EVNyXgJz_8vKpq5_bCm_TNhA84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/923ae4-af95-4a72-9c1f-6f97cfe54540/1/2EVNyXgJz_8vKpq5_bCm_TNhA84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:af:c5:0f:3d:63:ad:c6:1e:9a:7e:74:4f:eb:22:fc:d6:23:
43:f7:58:a7:a8:1d:ab:73:3e:e3:58:66:68:13:d7:91:40:5b:
2c:c6:3f:2c:df:e1:e7:af:6a:c3:45:c2:83:27:e5:9d:35:d0:
0f:78:fe:63:c6:30:8a:8e:cb:48:c3:41:16:96:60:86:c7:43:
6d:e1:25:31:6b:cb:3d:11:90:81:95:1c:05:0c:dd:e4:cc:b8:
8d:fb:eb:5a:cf:a2:fa:4d:67:67:83:9b:f5:51:31:1a:34:b0:
c5:4e:c7:e7:7e:5b:83:f9:06:1a:4a:b3:02:c3:f4:6f:cc:2d:
34:bb:99:50:0a:94:69:53:67:97:83:3d:1d:b3:8f:b1:69:90:
1f:b9:98:1f:9e:e6:93:0d:8d:4c:6d:5b:81:ed:17:60:07:67:
fc:88:30:8e:dd:2e:d9:32:4d:7e:e8:e9:28:6f:58:4f:8c:38:
70:7e:17:fe:be:5c:bf:39:0c:bc:e4:14:08:f5:e0:d7:92:f5:
46:cc:71:f1:54:a8:23:75:4d:97:7d:1c:ea:c3:b0:55:9e:57:
00:56:64:ed:57:e4:b0:02:c1:fe:2b:0d:24:a7:eb:81:e6:7e:
85:30:6c:cf:c5:9c:9d:2f:cf:60:e8:eb:e9:8a:68:c0:61:89:
3a:f3:d4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:39:04 2023 by rpki-client on console-ams.rpki-client.org