Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d2f7aa-c026-49c0-983a-99ec612578cc/1/1-kWMauWSMX0wN9jfMbukarLnt18.mft
File: 1-kWMauWSMX0wN9jfMbukarLnt18.mft (raw, json)
Hash identifier: IwDLDpLgCqX2sSQcNvWOEE7CPzm2HhTrXgJ/7ek/PKk=
Subject key identifier: A6:19:A1:A8:72:64:8C:E9:8C:0C:3C:7D:01:67:70:D2:E5:44:AA:F3
Authority key identifier: FA:45:8C:6A:E5:92:31:7D:30:37:D8:DF:31:BB:A4:6A:B2:E7:B7:5F
Certificate issuer: /CN=fa458c6ae592317d3037d8df31bba46ab2e7b75f
Certificate serial: 018BDD9548BCAC1566AF3763F33C19309478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kWMauWSMX0wN9jfMbukarLnt18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d2f7aa-c026-49c0-983a-99ec612578cc/1/1-kWMauWSMX0wN9jfMbukarLnt18.mft
Manifest number: 04
Signing time: Fri 17 Nov 2023 14:00:29 +0000
Manifest this update: Fri 17 Nov 2023 14:00:29 +0000
Manifest next update: Sat 18 Nov 2023 14:00:29 +0000
Files and hashes: 1: 1-kWMauWSMX0wN9jfMbukarLnt18.crl (hash: KnRnllYce9WiQ0QRvbc89c4Fu5RQHqgm4pVwCFk2TMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:95:48:bc:ac:15:66:af:37:63:f3:3c:19:30:94:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa458c6ae592317d3037d8df31bba46ab2e7b75f
Validity
Not Before: Nov 17 14:00:29 2023 GMT
Not After : Nov 18 14:00:29 2023 GMT
Subject: CN=a619a1a872648ce98c0c3c7d016770d2e544aaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:d0:7d:a5:27:a4:b0:11:77:f9:bb:e0:f5:
6d:fb:48:0b:81:e0:2a:66:77:59:4d:9d:90:c6:a6:
81:47:7e:3b:43:b3:c9:03:9e:bc:da:ab:f5:d3:16:
e6:5e:cb:04:ee:8e:b2:37:fc:f9:a7:a5:44:93:d9:
10:2a:99:06:7d:e8:ca:6e:15:ea:04:f7:0f:6e:8c:
9d:17:eb:65:07:e3:f8:ef:27:20:61:11:e5:f6:28:
ef:12:6f:c4:14:77:66:fb:49:3e:51:fd:29:ea:db:
31:50:0a:27:48:de:bb:ea:1b:0d:52:24:4a:44:7c:
76:ca:20:84:76:74:dd:44:df:ea:88:90:0d:7c:a6:
72:5a:a5:da:2c:a7:c0:fa:f7:16:a7:0a:4c:b5:a2:
53:6e:7b:2e:eb:26:23:ec:2d:81:40:72:81:d9:04:
6a:fb:9f:83:72:76:44:75:91:71:d1:05:95:82:9b:
4a:60:6f:59:04:23:76:f1:f1:03:f3:5e:b3:3d:d3:
2e:e4:4d:55:3d:0b:a7:30:c7:90:4b:62:04:a8:bb:
09:a1:7f:95:84:54:03:50:2c:44:04:ed:06:a6:a8:
f0:49:27:1f:63:1c:b3:38:33:bb:07:62:f3:a1:96:
59:97:3a:59:3a:b0:52:18:8b:2f:a7:dd:9f:8f:d9:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:A1:A8:72:64:8C:E9:8C:0C:3C:7D:01:67:70:D2:E5:44:AA:F3
X509v3 Authority Key Identifier:
keyid:FA:45:8C:6A:E5:92:31:7D:30:37:D8:DF:31:BB:A4:6A:B2:E7:B7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kWMauWSMX0wN9jfMbukarLnt18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d2f7aa-c026-49c0-983a-99ec612578cc/1/1-kWMauWSMX0wN9jfMbukarLnt18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d2f7aa-c026-49c0-983a-99ec612578cc/1/1-kWMauWSMX0wN9jfMbukarLnt18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7a:6d:77:97:6a:ec:ef:e5:49:6a:ab:32:51:d5:3c:94:21:
7e:16:e1:87:18:2e:ca:06:ae:a1:fd:0f:8f:f3:87:3f:b7:74:
e0:15:d0:58:02:5b:af:c8:5f:78:10:95:a6:e9:e2:b4:7a:67:
d5:37:04:29:48:0d:75:8a:9a:a3:2d:da:90:36:af:dd:4c:2e:
91:92:cf:b3:7d:5f:96:1d:03:7f:0e:cd:97:6e:8b:5a:33:b8:
a2:5e:83:34:24:b1:d0:4f:a2:91:f4:16:06:ee:cc:a0:99:36:
04:d1:7b:33:3f:fa:c7:a9:5c:c9:b0:6c:c9:21:8b:01:31:1b:
59:34:14:9f:19:e4:c3:56:81:d5:cd:f2:14:0f:47:18:d7:ed:
dd:95:e5:f9:b5:46:63:01:10:4c:78:c3:4f:81:21:e3:7e:b1:
66:73:f6:42:eb:11:a4:ee:b7:b8:a7:c3:76:d4:d2:91:88:97:
15:c8:d2:7d:e7:40:c8:92:c3:52:fa:5e:aa:8b:8c:4f:64:17:
8a:4a:23:89:8f:1d:85:ed:f0:a8:50:d5:73:c9:8e:17:d5:f0:
d8:5b:16:ca:18:cb:25:2a:c4:c0:c1:85:5b:5d:3a:a7:bd:63:
e3:61:dc:6b:6f:d5:5b:d0:9a:d2:f2:cc:ef:7f:48:29:08:42:
54:b6:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:59 2024 by rpki-client on console-ams.rpki-client.org