Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/fNrYYE-NiHOgG3B7QLVCJvBLSB8.mft
File: fNrYYE-NiHOgG3B7QLVCJvBLSB8.mft (raw, json)
Hash identifier: 3REVp1eRdcz04Ut0VdOODfI6eM10B4depOb18SongU0=
Subject key identifier: 4A:34:E9:BF:E8:66:62:D1:9C:63:AC:4B:49:70:84:90:6A:CE:D2:CE
Authority key identifier: 7C:DA:D8:60:4F:8D:88:73:A0:1B:70:7B:40:B5:42:26:F0:4B:48:1F
Certificate issuer: /CN=7cdad8604f8d8873a01b707b40b54226f04b481f
Certificate serial: 018C6C0FFEFAE02501D702BE68F280074F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNrYYE-NiHOgG3B7QLVCJvBLSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/fNrYYE-NiHOgG3B7QLVCJvBLSB8.mft
Manifest number: 035F
Signing time: Fri 15 Dec 2023 06:00:36 +0000
Manifest this update: Fri 15 Dec 2023 06:00:36 +0000
Manifest next update: Sat 16 Dec 2023 06:00:36 +0000
Files and hashes: 1: 1zNNt1VuNqikhPnv2QFTZZ-_NIE.roa (hash: zuZzyX0cUeXsPuN9nfRYd/bdBGCM0Y3UCOzPH6N/Tsc=)
2: CciYZof1Z08vHjqQ9eMVs3DZAEU.roa (hash: tTnzKXh/+m2DsFeVDC9SkNRxehi8BLx9GVvfyQPnaUk=)
3: fNrYYE-NiHOgG3B7QLVCJvBLSB8.crl (hash: uu22WsRw0St8sNRfPu7HeCYHDlV1lWb6OyzN/5iEOZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:0f:fe:fa:e0:25:01:d7:02:be:68:f2:80:07:4f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cdad8604f8d8873a01b707b40b54226f04b481f
Validity
Not Before: Dec 15 06:00:36 2023 GMT
Not After : Dec 16 06:00:36 2023 GMT
Subject: CN=4a34e9bfe86662d19c63ac4b497084906aced2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:8b:48:e0:d1:6f:60:0f:a6:4e:47:75:7e:
61:5b:90:fe:1e:8c:e2:9c:f8:a5:a0:f1:66:72:9a:
01:46:16:69:2a:50:0e:a7:5c:7f:25:89:29:25:64:
0e:3c:d9:16:9f:16:9a:0d:a4:ba:a1:0c:cf:17:5d:
dc:2b:0c:10:92:2d:f3:82:63:ae:8e:47:4f:84:55:
43:51:7f:60:09:01:85:6d:95:09:6f:f1:69:2c:6a:
71:81:7b:e2:64:ac:91:31:22:38:77:5a:a8:ce:ef:
49:a8:22:26:52:6f:84:0a:8b:a7:ff:12:f5:77:72:
e5:19:34:1d:3b:6e:7b:43:d4:5e:ae:d1:88:1f:3a:
7f:1a:fd:31:5c:99:25:f1:73:ce:57:66:07:2e:de:
96:01:28:44:ef:60:91:eb:93:a7:3b:da:c0:ad:8e:
a4:55:a0:a7:7c:4a:c2:1c:4d:23:05:16:fb:78:4a:
83:cd:3c:46:1d:8d:7a:21:d5:e3:d0:8c:b7:dc:3f:
7e:4f:62:ef:8e:94:9e:8b:de:1b:c3:3a:4c:e3:bb:
3e:ea:3e:b8:7d:29:34:d8:d2:76:9f:20:62:72:41:
d6:f5:5c:4e:11:76:8c:da:9b:dd:b7:df:d9:38:df:
7f:99:88:f1:3c:4c:7a:00:8d:6a:b5:c9:f7:d9:a0:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:34:E9:BF:E8:66:62:D1:9C:63:AC:4B:49:70:84:90:6A:CE:D2:CE
X509v3 Authority Key Identifier:
keyid:7C:DA:D8:60:4F:8D:88:73:A0:1B:70:7B:40:B5:42:26:F0:4B:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNrYYE-NiHOgG3B7QLVCJvBLSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/fNrYYE-NiHOgG3B7QLVCJvBLSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/342391-0144-44f5-a70d-72000dbf63bd/1/fNrYYE-NiHOgG3B7QLVCJvBLSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6d:0f:6e:a3:74:c0:c1:31:cf:2d:3f:f2:d4:5b:88:e4:99:
26:30:f1:d5:d9:5d:6b:75:eb:e6:ad:25:c6:8a:f2:75:05:ef:
23:6c:b1:58:b4:37:01:78:5a:97:c2:52:12:1d:2f:77:53:89:
51:5c:a3:9c:c5:59:f4:0a:92:83:c6:74:98:28:42:74:ab:12:
fe:cb:9a:8f:1f:36:56:a3:1d:cc:ac:7a:85:7f:4a:4b:d2:89:
d0:ed:e3:31:9f:c1:e8:f6:94:15:68:f5:bf:82:b0:22:a0:2b:
2c:c2:85:8c:1e:ca:61:ac:17:03:d8:be:5a:ef:b3:57:83:63:
65:4c:68:ba:19:a3:26:17:6f:d7:53:8b:5f:91:66:75:10:5b:
9f:04:ba:a0:32:a3:ab:f0:61:20:b2:37:87:6b:d7:bc:15:03:
f4:3d:77:98:72:67:87:18:c8:5b:e0:44:e2:1b:56:b6:3c:48:
a0:d4:bd:fa:df:10:a1:38:86:88:d3:90:04:6a:ad:ff:c8:9b:
98:55:25:0b:ce:8c:be:b8:b2:ef:ef:c4:5f:ad:4c:83:65:ef:
fd:21:f5:58:d2:8d:cc:c3:f8:71:a9:1b:ba:ea:f8:e3:ef:23:
13:80:59:56:b6:60:3b:27:ec:2b:bb:49:43:26:82:06:3f:1a:
d0:39:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:24 2024 by rpki-client on console-ams.rpki-client.org