Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b6b167-07d4-47bb-be0e-434bc4ad390a/1/ALAy8CYaDqRv3BmjNOQONcCH8cc.mft
File: ALAy8CYaDqRv3BmjNOQONcCH8cc.mft (raw, json)
Hash identifier: 9ppFPnieL+7xDJJk+lSWiQVlimgWjUM0ZJrHFoTghaM=
Subject key identifier: C5:AD:14:4D:90:9A:14:2D:DC:35:71:B3:35:ED:36:3B:90:A1:FC:89
Authority key identifier: 00:B0:32:F0:26:1A:0E:A4:6F:DC:19:A3:34:E4:0E:35:C0:87:F1:C7
Certificate issuer: /CN=00b032f0261a0ea46fdc19a334e40e35c087f1c7
Certificate serial: 018D8785A31683F129699CB384CE03EAA6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALAy8CYaDqRv3BmjNOQONcCH8cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/b6b167-07d4-47bb-be0e-434bc4ad390a/1/ALAy8CYaDqRv3BmjNOQONcCH8cc.mft
Manifest number: 0860
Signing time: Thu 08 Feb 2024 07:01:38 +0000
Manifest this update: Thu 08 Feb 2024 07:01:38 +0000
Manifest next update: Fri 09 Feb 2024 07:01:38 +0000
Files and hashes: 1: ALAy8CYaDqRv3BmjNOQONcCH8cc.crl (hash: JBc7j3bRFGdY+oeZowcLWIuH3+9B5ikiMfBwjBbuo8U=)
2: BG-f1LRU9DvD1flwP_FVmeNYmRg.roa (hash: 8wxnzFBGiKRdcFixh5bbCy7WA9o15jlX/O3Qnyc8n6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:85:a3:16:83:f1:29:69:9c:b3:84:ce:03:ea:a6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b032f0261a0ea46fdc19a334e40e35c087f1c7
Validity
Not Before: Feb 8 07:01:38 2024 GMT
Not After : Feb 9 07:01:38 2024 GMT
Subject: CN=c5ad144d909a142ddc3571b335ed363b90a1fc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:a0:4f:2e:df:be:a8:21:12:2b:ed:c8:bc:
b6:89:96:e4:ba:74:04:29:0c:83:40:ca:c1:29:40:
dc:70:24:ef:dc:c2:9f:ee:98:73:79:a4:c9:b5:3c:
51:f8:00:21:b9:13:15:99:ed:45:06:dd:0e:d8:b9:
7b:69:72:09:2d:96:f7:77:ba:0b:27:65:61:d9:6d:
b0:f8:e3:ac:7a:53:59:44:e9:9b:28:37:79:18:9a:
02:77:5a:49:74:1a:93:e0:87:83:92:00:0c:9b:25:
f2:d9:0b:e6:c9:ec:b9:74:cf:e3:4a:dd:86:93:c6:
a8:e6:cb:04:c1:ef:8f:84:27:f9:a5:dd:98:cd:9c:
75:f2:65:62:27:bb:09:82:36:e1:e1:98:42:58:b1:
ce:10:ac:9e:8d:f0:07:1f:10:dc:53:90:61:d9:0b:
40:41:d4:c2:04:94:2e:1d:b7:64:eb:b5:24:37:85:
d8:11:c6:5a:07:21:57:2d:31:9c:0a:b4:86:12:95:
e8:89:4c:83:61:a3:f8:da:3b:fd:29:34:37:23:f5:
c5:91:ee:4a:fa:a8:65:3b:5b:0d:fe:1a:d1:dd:58:
7a:c8:d0:df:77:3e:73:62:50:12:96:79:76:ac:e4:
ff:7f:72:75:b1:b2:f2:b3:ea:79:33:83:af:8b:6c:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AD:14:4D:90:9A:14:2D:DC:35:71:B3:35:ED:36:3B:90:A1:FC:89
X509v3 Authority Key Identifier:
keyid:00:B0:32:F0:26:1A:0E:A4:6F:DC:19:A3:34:E4:0E:35:C0:87:F1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALAy8CYaDqRv3BmjNOQONcCH8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b6b167-07d4-47bb-be0e-434bc4ad390a/1/ALAy8CYaDqRv3BmjNOQONcCH8cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b6b167-07d4-47bb-be0e-434bc4ad390a/1/ALAy8CYaDqRv3BmjNOQONcCH8cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:c9:a9:32:1f:a8:1f:cf:1b:27:7b:23:28:a9:cd:e2:7c:
9e:8b:14:3e:a3:8a:fe:90:b8:af:40:f5:69:2e:f8:69:37:f0:
da:28:57:86:28:ec:1c:d9:68:3b:ec:3e:f2:96:44:e7:e2:e9:
44:ba:56:d5:1d:bc:1e:fe:18:cf:70:2a:38:fb:30:5e:7f:9d:
49:54:ee:1c:dd:f3:77:dd:2c:d1:20:f4:b7:af:bc:2f:0f:dd:
4a:65:3d:db:11:53:d2:53:fd:7e:c7:e0:d8:0e:cd:e0:9e:a2:
31:96:bf:62:b3:ad:42:98:72:9a:2d:50:a9:16:37:ce:57:08:
b3:eb:5f:04:11:82:a0:7f:aa:ef:e3:23:f2:99:39:5b:29:23:
37:10:bf:a1:7a:b8:f9:a1:98:6e:63:2e:75:79:de:e8:d8:b9:
62:b2:ac:df:81:16:c6:fd:02:06:7e:0f:a6:24:f0:31:db:8e:
0b:6f:ed:d7:f0:9f:51:fd:80:fe:b4:97:47:6a:8c:09:25:73:
5d:0d:f5:48:05:47:24:bd:d6:20:3d:af:26:02:94:59:96:73:
a7:60:96:f7:28:15:94:9c:41:8e:88:13:58:66:f7:4f:15:75:
29:8d:f0:65:74:a1:17:b6:ab:e5:2f:b8:0c:fd:49:71:8d:28:
94:c2:8c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:56:15 2024 by rpki-client on console-fra.rpki-client.org