Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/cIndygkcCuNALrJTH3f-Y6AmJ2M.mft
File: cIndygkcCuNALrJTH3f-Y6AmJ2M.mft (raw, json)
Hash identifier: /Mcxu3XFooos4gPx2ahBOy0NibYXQNRpeClagpdwjfo=
Subject key identifier: 5A:E0:75:31:16:86:85:A8:F7:4F:4D:5B:8A:BE:3F:16:61:90:12:3E
Authority key identifier: 70:89:DD:CA:09:1C:0A:E3:40:2E:B2:53:1F:77:FE:63:A0:26:27:63
Certificate issuer: /CN=7089ddca091c0ae3402eb2531f77fe63a0262763
Certificate serial: 018AF97D7461A22D255D7BBB416B7B6BD8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIndygkcCuNALrJTH3f-Y6AmJ2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/cIndygkcCuNALrJTH3f-Y6AmJ2M.mft
Manifest number: 0870
Signing time: Wed 04 Oct 2023 07:01:03 +0000
Manifest this update: Wed 04 Oct 2023 07:01:03 +0000
Manifest next update: Thu 05 Oct 2023 07:01:03 +0000
Files and hashes: 1: 1-OGGl4TuCdZsaCEJlMScYoqfRCk.roa (hash: DkLnBngFwBjVrWZKtSX/qjRf8hajCDtWmBnbbUzE8lI=)
2: cIndygkcCuNALrJTH3f-Y6AmJ2M.crl (hash: okx9SED8bni7/RiTXZ8Ft2F6SjfX8veAueVkXDECi+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f9:7d:74:61:a2:2d:25:5d:7b:bb:41:6b:7b:6b:d8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7089ddca091c0ae3402eb2531f77fe63a0262763
Validity
Not Before: Oct 4 07:01:03 2023 GMT
Not After : Oct 5 07:01:03 2023 GMT
Subject: CN=5ae07531168685a8f74f4d5b8abe3f166190123e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:05:eb:8a:5a:41:a1:6d:48:26:4e:a7:6e:ba:
43:82:9a:70:ac:a8:69:dd:f3:57:5b:99:1a:55:47:
43:de:67:62:b2:69:ea:e4:70:a2:f9:2b:f0:4a:20:
2f:d3:39:24:1e:f5:ba:15:1e:b8:87:9f:6d:6a:7c:
61:9c:22:c8:0a:10:0b:31:ee:1a:be:8f:e1:ae:af:
51:2b:06:ef:b6:68:5b:1b:10:5e:e4:8c:0a:5b:86:
e8:ad:35:ef:65:17:1c:10:fe:98:99:41:7a:52:86:
a3:b6:4d:6b:ef:6a:55:57:26:bd:9a:77:61:e0:01:
0c:28:d0:72:36:8b:4b:d7:73:a5:62:75:82:b7:3d:
e2:a0:24:42:86:b5:73:04:31:29:40:83:c3:7e:b2:
3e:1e:b4:65:ab:7e:ab:8b:3b:91:e7:e3:cb:eb:5e:
f2:2e:05:5e:df:6f:98:05:29:de:54:56:86:b4:7e:
fa:ec:d4:62:8a:91:47:33:97:e9:08:2b:0e:f7:d0:
b1:b9:78:99:48:54:d7:b1:ff:35:74:11:ec:d3:77:
33:d9:f7:e5:0a:b8:05:40:6e:82:9c:9b:7a:6e:80:
21:d2:f0:8d:01:cf:35:ba:a3:bf:50:76:87:86:64:
45:2e:9f:57:fb:8e:f2:e4:e2:38:10:0d:9b:04:0f:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:75:31:16:86:85:A8:F7:4F:4D:5B:8A:BE:3F:16:61:90:12:3E
X509v3 Authority Key Identifier:
keyid:70:89:DD:CA:09:1C:0A:E3:40:2E:B2:53:1F:77:FE:63:A0:26:27:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIndygkcCuNALrJTH3f-Y6AmJ2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/cIndygkcCuNALrJTH3f-Y6AmJ2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/cIndygkcCuNALrJTH3f-Y6AmJ2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b3:ca:a4:e2:54:1f:82:b0:f0:13:48:db:a7:e3:d0:ab:f1:
0a:dc:e5:80:bf:9c:7c:f9:06:4d:2e:53:4f:12:7e:5d:71:96:
9c:4d:4e:b3:53:fb:f8:3a:7c:24:3f:69:4c:23:ee:0b:01:91:
32:f0:ba:b3:0b:e0:29:da:9c:bf:05:d8:ab:da:b1:47:ba:7a:
8c:fa:93:cf:9d:ea:0a:d8:27:8f:a3:01:30:11:9a:29:25:9e:
a5:99:15:3f:5d:35:7f:69:79:5d:9a:f4:85:ad:9e:b7:29:f8:
5a:16:c8:03:9c:ee:00:c2:e7:a0:64:38:8b:f7:60:57:4b:5e:
e4:c1:23:57:7e:c6:9c:a6:e4:35:4d:84:e3:2c:55:eb:b3:d3:
2f:e8:ad:0e:df:f1:e8:08:1d:44:b6:6b:9d:8e:6f:20:84:f1:
58:a2:09:dc:d8:bd:7e:e8:83:26:1b:0b:8a:cc:c1:4d:97:1e:
96:b2:55:a2:56:a8:a8:ef:32:0e:99:84:fa:53:8f:91:6d:30:
7f:8c:b4:84:a6:31:35:dd:4c:49:c2:88:c0:94:71:8e:07:41:
af:0f:16:45:30:49:86:bd:98:0e:1e:14:e0:28:80:c0:53:c0:
ee:61:29:aa:16:2e:f4:43:9f:35:55:24:99:e0:75:40:27:84:
28:a3:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 12:33:16 2023 by rpki-client on console-fra.rpki-client.org