Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/U4b6YZaygde5NC5nEGit5nj6URk.mft
File: U4b6YZaygde5NC5nEGit5nj6URk.mft (raw, json)
Hash identifier: nlXjP+2zAipEwII40sR0xHPQfGw/3/xuPn4BN/Ep+XE=
Subject key identifier: DA:81:6A:1D:DA:09:98:3E:5C:0D:87:A5:D6:F9:43:16:1F:81:C4:35
Authority key identifier: 53:86:FA:61:96:B2:81:D7:B9:34:2E:67:10:68:AD:E6:78:FA:51:19
Certificate issuer: /CN=5386fa6196b281d7b9342e671068ade678fa5119
Certificate serial: 0186E8F0EF149704A6B710D72F683E07B830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4b6YZaygde5NC5nEGit5nj6URk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/U4b6YZaygde5NC5nEGit5nj6URk.mft
Manifest number: 0CD3
Signing time: Thu 16 Mar 2023 05:42:29 +0000
Manifest this update: Thu 16 Mar 2023 05:42:29 +0000
Manifest next update: Fri 17 Mar 2023 05:42:29 +0000
Files and hashes: 1: 0sU7kS4bk04MRowpGZxfR6OMd84.roa (hash: vnqOjLRPUM7ZEQHFrqGZ3BLQfDR7wsUoEQG2Z1PNpMI=)
2: U4b6YZaygde5NC5nEGit5nj6URk.crl (hash: cAms5gde/gQyAz/tmgUSqloY/YgsyubNhb+M9+FMhy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e8:f0:ef:14:97:04:a6:b7:10:d7:2f:68:3e:07:b8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5386fa6196b281d7b9342e671068ade678fa5119
Validity
Not Before: Mar 16 05:42:29 2023 GMT
Not After : Mar 17 05:42:29 2023 GMT
Subject: CN=da816a1dda09983e5c0d87a5d6f943161f81c435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:17:0b:f4:16:ed:38:d1:ef:89:00:cc:3a:
ae:ed:aa:a9:79:2e:42:2f:71:1d:13:ed:85:1b:9e:
19:73:c3:61:6d:fb:8c:34:fd:e3:d7:16:af:c4:2c:
d7:fd:58:78:4a:59:e1:96:eb:b8:cc:cd:fb:22:43:
79:7d:b3:2a:e9:14:d5:f4:83:0d:72:27:7c:e0:e0:
ac:a3:36:19:b8:76:c1:32:d6:cf:11:60:69:7e:9b:
c7:10:da:df:95:e7:e7:00:d6:14:9d:cc:5c:b3:bd:
9d:8f:27:71:54:af:eb:50:04:99:10:49:42:85:d1:
38:8f:cd:88:18:7e:25:01:bf:63:1e:01:da:92:3b:
2d:4b:c0:d9:49:e2:9c:0a:2b:0c:b9:ff:a7:1a:df:
4f:ed:40:0b:bb:c0:c5:20:4f:22:10:57:77:91:37:
a4:c9:c6:a0:7f:3c:c3:7f:8e:b5:39:f9:f6:93:1f:
d8:f3:9d:ab:a4:68:e6:81:4f:7d:62:2b:3d:7f:b5:
fc:8b:b4:87:1d:50:fc:93:0f:13:ac:78:84:aa:14:
ff:a0:82:08:0d:46:11:85:a0:3c:eb:07:d1:66:43:
3d:54:35:be:3c:6f:b9:ef:38:05:34:d3:cc:e5:a9:
d0:fd:d0:65:20:2b:82:9a:48:66:14:fd:80:d6:73:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:81:6A:1D:DA:09:98:3E:5C:0D:87:A5:D6:F9:43:16:1F:81:C4:35
X509v3 Authority Key Identifier:
keyid:53:86:FA:61:96:B2:81:D7:B9:34:2E:67:10:68:AD:E6:78:FA:51:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4b6YZaygde5NC5nEGit5nj6URk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/U4b6YZaygde5NC5nEGit5nj6URk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84b2da-8201-4086-9d2c-da3151de36e6/1/U4b6YZaygde5NC5nEGit5nj6URk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:00:73:76:a5:80:7e:29:d9:55:4a:19:bc:09:ec:98:38:46:
61:0a:75:ae:4d:2e:5e:11:00:5c:c3:d6:64:3e:0e:04:3f:ce:
30:f4:eb:22:aa:cc:68:41:9c:65:12:f6:ce:9e:10:76:ea:20:
bf:b3:9b:14:bf:dd:57:71:dc:53:59:cf:7b:ef:42:5c:e7:27:
b5:c8:b4:b4:cf:7c:e3:6b:39:c8:5c:74:46:bb:a9:20:04:53:
8f:ad:31:c8:f2:c1:60:bd:28:b6:01:6a:76:8b:ed:17:df:63:
5d:8e:c9:6d:e2:60:45:3a:a5:64:4e:50:b0:78:0c:88:ae:9b:
7d:23:96:31:ea:d6:08:61:6e:1d:8e:4e:cb:cf:7c:bc:32:d1:
da:2c:58:1b:28:5f:79:aa:48:f7:11:94:d5:c1:88:eb:c1:16:
09:1f:14:e0:28:cb:4d:ca:1f:e3:ec:2c:01:dc:20:4b:f0:7e:
38:65:04:ac:70:94:3f:0e:6b:3e:0f:4f:c1:71:c3:64:a3:27:
50:80:dd:76:59:9c:35:3c:44:05:76:8a:fc:06:f3:b7:c0:c7:
7c:e8:8d:0d:65:80:49:0f:58:3f:ab:03:09:ce:9f:a6:7d:b8:
39:9b:bd:fb:dd:5a:39:2a:e2:74:e4:11:fe:76:01:46:33:68:
33:d0:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:40 2024 by rpki-client on console-ams.rpki-client.org