Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.mft
File: 66hVhrmRz3DgrxnAOkN24n0Cb0M.mft (raw, json)
Hash identifier: JhSySOG8o1l+RZ9J7VcFQmvbuiPznDzreH0CDprHr4c=
Subject key identifier: 34:5A:21:B1:76:1D:01:84:AF:AC:04:74:59:28:70:F5:6E:BB:5D:AF
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Certificate issuer: /CN=eba85586b991cf70e0af19c03a4376e27d026f43
Certificate serial: 018BEA0759F72323ECB5B3C4188739B3CFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.mft
Manifest number: 085F
Signing time: Mon 20 Nov 2023 00:00:32 +0000
Manifest this update: Mon 20 Nov 2023 00:00:32 +0000
Manifest next update: Tue 21 Nov 2023 00:00:32 +0000
Files and hashes: 1: 66hVhrmRz3DgrxnAOkN24n0Cb0M.crl (hash: h2uQl+sBbN7vxZmQXXoA3SVptKie7wx1pOUYfutq8Cs=)
2: GLIqflqKV2R-oEsNRVOLgy57Hac.roa (hash: u3xrm9k5eVCz9BsKSwDBNeBAGNM6tijqdw4dROy8VNw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:07:59:f7:23:23:ec:b5:b3:c4:18:87:39:b3:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
Validity
Not Before: Nov 20 00:00:32 2023 GMT
Not After : Nov 21 00:00:32 2023 GMT
Subject: CN=345a21b1761d0184afac0474592870f56ebb5daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:00:e4:1f:c4:50:be:4e:f9:ac:d5:69:3e:
a1:84:00:aa:f9:79:18:74:88:07:b0:37:da:89:de:
ad:7f:3b:1b:39:7d:23:29:5f:94:61:c5:63:ba:23:
ff:f9:1d:06:81:65:9a:22:78:40:2c:0c:aa:d4:b5:
a8:59:8e:c7:28:04:33:62:66:02:e3:95:39:82:0b:
fe:35:94:0a:42:b8:a5:d7:d5:27:15:10:8c:f9:26:
54:37:43:f3:17:ab:08:c7:e3:e4:f8:44:2a:54:73:
1f:f4:4e:82:77:1b:9f:d2:6b:f7:e6:d8:9b:a6:0f:
ac:08:01:d3:ed:57:0b:14:36:32:a8:f0:b6:55:20:
b8:f1:fd:eb:e7:0a:9b:3a:19:4a:e9:47:d2:20:5e:
9d:6f:b3:42:65:55:64:db:1c:ab:40:e5:d5:d7:f7:
d6:3a:aa:df:01:6d:19:51:5c:24:c3:64:7f:43:db:
3a:d4:22:7e:65:ff:8f:a5:93:dc:30:f5:53:e3:c2:
66:85:d8:41:1c:c5:49:d4:b7:96:3c:a8:96:8f:c1:
62:d3:82:bc:eb:62:b0:24:41:03:ce:bc:07:b0:e7:
4b:81:d2:68:76:dd:89:da:e2:67:a3:28:ae:25:5a:
f4:a7:d9:2d:5d:cc:12:e2:53:43:0b:b5:ee:70:26:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:21:B1:76:1D:01:84:AF:AC:04:74:59:28:70:F5:6E:BB:5D:AF
X509v3 Authority Key Identifier:
keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:47:aa:ab:1b:5a:47:fc:18:35:15:99:33:31:e0:ff:65:6f:
dd:80:53:a7:70:88:fb:67:ec:ab:eb:35:3d:2e:27:68:b5:43:
8f:50:f6:81:07:f6:02:88:52:9e:73:71:43:6a:bc:33:5f:5d:
57:be:81:be:71:26:74:70:54:08:f3:1d:d1:f4:8d:4f:f4:f5:
5c:b5:d1:ac:8b:de:0a:22:19:19:76:87:02:d1:c5:93:62:3c:
69:cf:e6:e9:c9:09:f4:eb:62:8a:74:a2:3b:88:db:13:69:b2:
3d:b0:91:e0:ea:b7:ab:e6:11:33:6c:3f:df:bb:3b:a4:3e:e2:
e8:80:77:d6:94:fd:ca:51:07:c8:94:ec:df:22:c1:6d:15:7d:
ce:02:72:09:43:0f:51:0d:ca:93:4b:a3:ef:65:f1:98:61:87:
06:f1:1f:e3:b6:5c:2e:0d:37:ec:e5:58:16:f6:5e:7e:4a:45:
f4:20:dd:e4:93:1b:90:3d:bb:97:08:a8:bf:d5:84:5f:a8:0d:
01:42:03:60:cd:31:ba:ef:14:94:de:25:4f:df:e2:e5:a1:48:
4d:cb:51:28:2f:2d:02:c4:7f:80:d9:58:11:2a:c3:db:41:87:
33:f4:aa:70:31:ff:cc:35:c7:3e:0b:f8:60:6a:85:ee:a8:9a:
ce:c6:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 09:30:06 2023 by rpki-client on console-ams.rpki-client.org