
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.mft
File: I0BAUrjKlyu7L_aoE8pB6KlVnso.mft (raw, json)
Hash identifier: qdIo2HzmgokgeGPk7zInTbifGaPFe26By5n/dgZBCBo=
Subject key identifier: 40:8B:82:03:39:07:A6:30:77:53:AF:0E:95:E2:C7:E6:6B:AE:00:BA
Authority key identifier: 23:40:40:52:B8:CA:97:2B:BB:2F:F6:A8:13:CA:41:E8:A9:55:9E:CA
Certificate issuer: /CN=23404052b8ca972bbb2ff6a813ca41e8a9559eca
Certificate serial: 0188574D7181B188B7468A90B28D35CC7B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0BAUrjKlyu7L_aoE8pB6KlVnso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.mft
Manifest number: 0DA5
Signing time: Fri 26 May 2023 09:04:33 +0000
Manifest this update: Fri 26 May 2023 09:04:33 +0000
Manifest next update: Sat 27 May 2023 09:04:33 +0000
Files and hashes: 1: HhR8blB8h7E52uTZgbwUD9FPT84.roa (hash: pqVhte1QOEmjmOCNE3AhuV6F+cu7uFL8/CS5XqD5ksM=)
2: I0BAUrjKlyu7L_aoE8pB6KlVnso.crl (hash: Nmjbp89uCypZ0WxvJO8/3jIsOWm1zyLh7+e8p+0P5N4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:4d:71:81:b1:88:b7:46:8a:90:b2:8d:35:cc:7b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23404052b8ca972bbb2ff6a813ca41e8a9559eca
Validity
Not Before: May 26 09:04:33 2023 GMT
Not After : May 27 09:04:33 2023 GMT
Subject: CN=408b82033907a6307753af0e95e2c7e66bae00ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:dd:1d:7c:d1:a2:ef:51:b7:ec:b6:92:f0:
7d:d2:df:e8:cd:af:2e:3d:7b:95:18:66:db:d1:0d:
f8:8c:cd:89:8a:7b:1e:3f:5d:02:32:5d:77:71:a2:
89:b1:05:6e:d5:42:f6:c0:09:42:7a:ba:d3:ca:a3:
2c:85:c0:19:67:2b:1b:d1:83:0b:52:cf:7f:f0:24:
6a:9a:90:06:52:aa:d3:94:15:0d:6e:e5:c5:f1:a0:
96:b9:30:aa:99:0f:c8:6b:35:90:75:58:a2:7f:f5:
e5:ef:5f:d1:0e:08:10:98:79:36:4a:cb:cf:98:19:
bb:d1:87:8f:65:cb:45:5e:27:b1:76:d0:10:3c:6c:
77:8c:94:93:36:a9:e2:8e:d4:13:4f:01:bc:c7:8f:
4b:86:f9:59:2b:83:b7:c8:c5:ac:34:bf:d0:0a:70:
d6:60:5b:ad:a1:08:fd:3c:9d:fd:18:10:58:df:25:
f8:b2:73:af:b6:8a:6c:73:d3:45:0b:57:14:bb:62:
28:cd:50:4a:2d:98:8f:26:e8:b4:52:fa:32:99:b3:
cc:69:ae:d6:4b:f2:62:fa:4e:43:f4:67:da:bf:26:
d3:de:a6:89:f4:0b:c2:82:32:91:41:3a:03:a1:af:
9d:65:76:63:23:d6:f4:55:0c:54:1f:24:05:2f:9d:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8B:82:03:39:07:A6:30:77:53:AF:0E:95:E2:C7:E6:6B:AE:00:BA
X509v3 Authority Key Identifier:
keyid:23:40:40:52:B8:CA:97:2B:BB:2F:F6:A8:13:CA:41:E8:A9:55:9E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0BAUrjKlyu7L_aoE8pB6KlVnso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/55ebd7-5fb8-4011-bce6-bd1102bb8c1b/1/I0BAUrjKlyu7L_aoE8pB6KlVnso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f6:63:13:7d:39:88:26:1b:76:12:23:65:18:c2:72:67:cd:
f1:9b:cc:c5:ad:25:14:0c:6c:0d:46:a6:63:e1:3a:94:84:73:
c6:b1:dc:ec:e0:95:6c:ee:b5:d1:b4:08:3e:5a:6c:6d:8f:88:
41:34:0d:c7:89:47:7e:6e:3e:2f:e1:4a:ec:dd:0c:eb:bc:03:
82:d1:a4:93:29:9f:c8:ef:52:74:df:53:7c:13:56:1e:8c:f6:
44:1c:a1:bc:58:c0:3d:ad:ae:ad:1d:df:b1:7d:52:64:c0:dc:
e7:0a:10:b8:de:b7:a7:0b:a8:05:fa:bc:b5:bb:70:7b:b3:12:
49:9e:ac:88:9c:bc:97:97:16:8a:95:9f:b9:ea:04:08:ec:bd:
57:b0:2f:23:44:af:91:8f:11:9f:ce:20:9c:eb:43:fe:93:8c:
4b:ae:50:5e:dd:7c:82:1e:da:28:2f:49:bb:aa:f2:7c:aa:4b:
8b:18:18:af:dc:0d:73:9f:19:20:1d:74:b1:73:0a:64:20:79:
56:b6:25:5b:26:f9:4f:df:49:7e:c6:8e:99:24:b4:d2:7c:51:
72:26:8a:9e:91:e1:fa:46:df:6f:ef:89:f8:a1:70:cc:74:d2:
50:11:ac:53:a5:61:52:25:41:8f:b8:ae:b4:b8:52:a7:17:33:
b0:84:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:51 2025 by rpki-client