Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft
File: DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft (raw, json)
Hash identifier: W+4PXyatFg6PiwlscdyLJWS3D25vbAVfeAcqtaF/0bY=
Subject key identifier: 0F:E4:FF:64:D1:52:C5:28:07:0A:97:FD:1A:8C:16:40:2E:13:3E:7F
Authority key identifier: 0D:48:85:A8:B5:A4:F6:B4:AC:0E:45:D1:18:38:95:1E:94:E6:EF:3E
Certificate issuer: /CN=0d4885a8b5a4f6b4ac0e45d11838951e94e6ef3e
Certificate serial: 01924FE73624146B48661A974B87A594D7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUiFqLWk9rSsDkXRGDiVHpTm7z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft
Manifest number: 0895
Signing time: Thu 03 Oct 2024 01:03:25 +0000
Manifest this update: Thu 03 Oct 2024 01:03:25 +0000
Manifest next update: Fri 04 Oct 2024 01:03:25 +0000
Files and hashes: 1: DUiFqLWk9rSsDkXRGDiVHpTm7z4.crl (hash: DTYsrnhK7i9IPkQnYRxIcsJbmeiQ0B3UBpp9piLKmo0=)
2: sqcYv9KmIv-yM4HE8gmdbq7mr10.roa (hash: hqrAmWPgsmmIr++3fmHtkKaFnKTa1i5jrkH/aJtiGvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4f:e7:36:24:14:6b:48:66:1a:97:4b:87:a5:94:d7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4885a8b5a4f6b4ac0e45d11838951e94e6ef3e
Validity
Not Before: Oct 3 01:03:25 2024 GMT
Not After : Oct 4 01:03:25 2024 GMT
Subject: CN=0fe4ff64d152c528070a97fd1a8c16402e133e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:06:96:5c:1b:00:ef:d8:59:05:96:cf:51:d8:
70:d4:a9:e1:71:27:77:7b:04:61:4d:df:ad:cc:43:
89:a9:f8:e4:cc:72:be:a7:ea:ee:59:36:37:86:cb:
b1:aa:8d:6c:0a:a5:f4:29:6b:47:2f:46:54:cb:e8:
6a:e4:47:51:8c:aa:64:47:05:2b:86:f0:e9:65:4d:
e6:9e:91:ae:8a:fe:bb:d7:7c:14:cc:3a:99:77:c8:
74:bc:d8:4b:c5:00:3f:c9:86:6a:02:c3:a2:14:27:
66:0e:d3:70:fd:cf:18:ce:04:8f:a7:4d:bf:c2:1e:
a1:93:bc:14:b7:1c:8a:32:e6:b7:95:8e:ed:06:76:
02:4c:4c:ad:c6:60:45:ed:cb:9e:79:db:4a:ae:76:
65:36:36:25:a6:4d:92:f7:61:41:18:ff:f6:74:03:
6b:62:53:cb:11:34:99:19:05:f5:93:92:1b:01:2c:
87:ff:b9:55:0b:cc:f9:15:88:11:5c:45:44:cb:78:
bd:9f:53:ab:05:ab:42:8e:f7:15:6d:af:3c:50:ae:
10:6f:a8:8b:cf:35:42:5f:0c:72:87:76:4c:43:7a:
78:e6:59:cf:dc:64:95:af:fe:2b:73:42:25:5c:8f:
8a:06:7b:47:94:8e:42:96:60:48:d1:70:f4:b6:90:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:FF:64:D1:52:C5:28:07:0A:97:FD:1A:8C:16:40:2E:13:3E:7F
X509v3 Authority Key Identifier:
keyid:0D:48:85:A8:B5:A4:F6:B4:AC:0E:45:D1:18:38:95:1E:94:E6:EF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUiFqLWk9rSsDkXRGDiVHpTm7z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/885e4a-9c09-467e-804c-d8fb33f30452/1/DUiFqLWk9rSsDkXRGDiVHpTm7z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:7a:6d:b9:5d:b5:2a:19:99:ac:d9:6d:d3:22:51:74:9e:43:
85:f2:68:70:b9:6a:88:8d:e7:f9:af:1a:cf:22:62:f7:72:0d:
f6:e2:27:70:81:8c:b1:cc:46:e5:3d:f2:83:0a:24:94:85:70:
97:71:2a:1c:12:91:2b:8d:1b:03:e9:ce:a3:22:06:36:8d:30:
2b:d4:9e:97:39:e8:17:a5:cb:20:cc:4a:dc:48:09:60:10:2e:
91:eb:76:5e:1c:5f:e4:11:68:a9:56:ab:02:0f:ec:84:51:01:
bd:12:f4:52:a5:8d:90:d2:24:a8:9c:0c:41:76:13:e2:52:97:
90:3f:a3:9b:67:f0:f6:90:fa:1e:aa:25:2e:e1:1c:fd:51:4d:
14:86:8c:cf:81:ae:59:b1:56:19:4c:00:9a:45:5f:c9:1f:3b:
96:40:c8:78:ae:f9:10:ff:ba:d9:37:38:f5:a4:83:dd:d4:a4:
a2:d0:72:63:39:70:8b:94:54:4e:cf:92:a9:25:09:09:78:7c:
4e:8d:e4:b6:8c:4e:a6:8d:fd:8b:fe:a2:35:68:d5:78:5a:e1:
72:79:7e:fb:f2:94:9b:1c:67:76:2d:c8:2a:c5:4f:9c:bd:f4:
c6:f7:53:64:ea:d8:b0:0b:32:87:47:0f:78:eb:70:a0:ad:b5:
25:f4:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 10:49:53 2024 by rpki-client on console-fra.rpki-client.org