Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/324471-8254-4144-b814-33f0fb8e052b/1/HAxX86ao68rGH4YwDv8AifyXyTo.mft
File: HAxX86ao68rGH4YwDv8AifyXyTo.mft (raw, json)
Hash identifier: zI8rzQCRZSOMeT5ytcDGkpKcuChOE+mFSIKibmWRjTk=
Subject key identifier: 50:D1:CF:13:8F:16:CF:04:89:46:D2:72:56:25:88:B7:FA:5E:34:AC
Authority key identifier: 1C:0C:57:F3:A6:A8:EB:CA:C6:1F:86:30:0E:FF:00:89:FC:97:C9:3A
Certificate issuer: /CN=1c0c57f3a6a8ebcac61f86300eff0089fc97c93a
Certificate serial: 018C573FDF01335A4C4903B943A6636E4FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAxX86ao68rGH4YwDv8AifyXyTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/324471-8254-4144-b814-33f0fb8e052b/1/HAxX86ao68rGH4YwDv8AifyXyTo.mft
Manifest number: 075E
Signing time: Mon 11 Dec 2023 05:00:52 +0000
Manifest this update: Mon 11 Dec 2023 05:00:52 +0000
Manifest next update: Tue 12 Dec 2023 05:00:52 +0000
Files and hashes: 1: HAxX86ao68rGH4YwDv8AifyXyTo.crl (hash: 1l6oJDuuvPgo6mTPa3o7qs7/+gjZtqRL4rBjsJAwvdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:3f:df:01:33:5a:4c:49:03:b9:43:a6:63:6e:4f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0c57f3a6a8ebcac61f86300eff0089fc97c93a
Validity
Not Before: Dec 11 05:00:52 2023 GMT
Not After : Dec 12 05:00:52 2023 GMT
Subject: CN=50d1cf138f16cf048946d272562588b7fa5e34ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:4f:73:f8:e7:c3:50:0b:54:ba:9c:a5:c6:
dc:ac:8a:f3:c0:ef:f6:63:ee:00:f3:17:22:83:fc:
52:0c:5a:00:5e:23:6a:09:05:bf:c2:54:58:2a:83:
c5:e4:65:39:ae:85:7c:84:7e:01:3f:4b:90:c0:28:
3d:92:eb:e7:b9:93:b5:61:dd:74:49:08:3c:b3:b7:
09:a2:38:3a:b6:8e:ed:3d:6c:f0:e4:e8:42:ae:68:
5b:7a:0b:53:fa:5a:dd:7a:be:b6:b6:c5:14:4a:5a:
ac:c9:1d:30:35:50:fd:f8:db:1f:4d:ab:0e:31:c8:
be:6d:85:10:15:74:ce:9a:95:f5:fa:fb:3e:72:fb:
3c:23:1b:1e:eb:59:d7:7b:6d:62:30:4b:06:3a:f8:
0b:d4:2b:64:39:1c:4e:9d:4d:24:d4:7d:ca:93:77:
ad:8f:55:12:60:57:a2:07:d0:0a:e2:81:c4:65:f9:
be:09:a8:de:8c:38:01:ec:6a:65:23:f9:30:8d:39:
b4:a9:ca:45:0d:97:e4:9a:2a:c1:87:c7:88:09:c6:
d4:77:71:ee:95:45:33:dc:50:7b:fa:4c:f3:5c:9c:
3e:01:2f:ef:5f:85:9f:99:11:d5:4a:f2:53:00:d2:
29:0d:c2:47:79:c6:65:f7:5b:8c:08:b8:27:b3:1c:
55:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:CF:13:8F:16:CF:04:89:46:D2:72:56:25:88:B7:FA:5E:34:AC
X509v3 Authority Key Identifier:
keyid:1C:0C:57:F3:A6:A8:EB:CA:C6:1F:86:30:0E:FF:00:89:FC:97:C9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAxX86ao68rGH4YwDv8AifyXyTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/324471-8254-4144-b814-33f0fb8e052b/1/HAxX86ao68rGH4YwDv8AifyXyTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/324471-8254-4144-b814-33f0fb8e052b/1/HAxX86ao68rGH4YwDv8AifyXyTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bb:e6:41:ba:36:6c:09:43:b3:04:d3:89:63:0e:26:e3:43:
da:3d:e7:ec:7c:d9:2d:dd:f4:30:b2:d7:94:51:ad:5e:fc:8a:
d9:a6:64:fe:ad:ac:52:81:ff:96:ef:a2:0a:52:bb:9b:0d:30:
b5:ec:7a:32:58:48:6b:7b:e2:fe:74:0e:0a:43:f9:fb:08:3d:
cc:84:e6:bb:fd:8d:71:59:88:53:22:7f:ea:ee:2a:00:b0:b3:
c1:d8:f5:da:61:4e:ac:cb:b6:f8:31:43:64:70:10:9d:dc:55:
52:1f:a9:2c:d9:38:47:fc:38:91:3f:f0:90:ac:5d:6e:c0:7c:
db:48:b4:a0:d0:ae:6b:6f:37:19:cc:9d:de:5c:e6:fb:69:33:
fe:d4:73:83:9f:d8:4d:e6:56:a3:3a:2a:6a:da:ac:bd:e6:7e:
1f:7d:37:74:16:f8:1f:03:c2:ff:cd:fb:e4:d7:11:d9:63:d5:
52:e3:cd:48:bc:ab:01:1e:39:f7:a2:08:45:2e:85:34:dc:8c:
c7:9f:13:cf:8f:b0:28:30:18:28:f9:0b:b0:0f:18:11:80:9d:
d9:10:0a:26:d8:d6:46:67:5e:38:ab:0f:09:a4:7c:8c:cd:e1:
cc:07:e2:23:a3:8b:04:99:d6:08:01:d7:86:fb:97:bd:7b:4a:
db:7b:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 10:29:08 2023 by rpki-client on console-fra.rpki-client.org