Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.mft
File: khwusBZMGDkAMMXnBcSjR5FQ354.mft (raw, json)
Hash identifier: RhZSywC3lSYoSOnIqvHEp54cPhe5En4F9JnmlG9W5nw=
Subject key identifier: B7:F0:A7:43:D1:C9:47:3D:21:31:00:4E:23:86:AF:FD:5B:6B:D0:B4
Authority key identifier: 92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
Certificate issuer: /CN=921c2eb0164c18390030c5e705c4a3479150df9e
Certificate serial: 0188CE5914C65ACE6821B1B1DBE7BE17F333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.mft
Manifest number: 0278
Signing time: Sun 18 Jun 2023 11:52:04 +0000
Manifest this update: Sun 18 Jun 2023 11:52:04 +0000
Manifest next update: Mon 19 Jun 2023 11:52:04 +0000
Files and hashes: 1: khwusBZMGDkAMMXnBcSjR5FQ354.crl (hash: Rso86eXOpSPn69PHfG7O8N+rgnj5VQLk3sp72vHokeM=)
2: s9XxIWVpoIYholtS6i8xwpmC2Ek.roa (hash: aLGEQN5bIqYUUB4qopBWeLxUvGCMBqBiK/VMP1wJvoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ce:59:14:c6:5a:ce:68:21:b1:b1:db:e7:be:17:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921c2eb0164c18390030c5e705c4a3479150df9e
Validity
Not Before: Jun 18 11:52:04 2023 GMT
Not After : Jun 19 11:52:04 2023 GMT
Subject: CN=b7f0a743d1c9473d2131004e2386affd5b6bd0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:dd:4c:ed:18:9d:6b:ec:01:d2:ec:be:6d:
d5:9c:21:bf:10:0f:74:52:57:5d:a7:e0:e2:2e:c5:
51:9f:fe:27:55:f9:c6:81:ea:4a:2d:f7:6d:5b:ab:
dd:f9:22:01:7d:21:e0:b5:2a:91:c5:9f:40:8a:b8:
9f:d2:6c:a8:79:d9:db:d5:84:01:f0:23:46:36:21:
85:b1:5f:88:d1:63:17:f2:78:3d:48:c4:6b:ae:dc:
10:84:05:0b:cb:91:c5:ad:8d:0e:99:46:ea:97:39:
7c:3a:89:b1:24:6b:13:51:15:59:a8:93:75:21:9b:
b2:c7:de:4d:a3:b5:67:14:44:60:f7:7a:3f:c3:94:
0a:00:4f:18:44:dd:a3:82:f3:40:00:15:a5:af:b1:
21:3c:72:b5:c0:2d:9f:98:78:ba:bd:ed:cc:03:9c:
0f:20:2f:fe:2b:4c:68:df:4e:c9:89:26:66:2c:df:
13:28:3f:bb:d8:bd:b4:61:d0:b7:a3:7f:67:81:a3:
33:7e:ef:e4:b9:ce:1d:fa:c7:05:01:68:0e:7d:ec:
a3:96:48:2d:39:51:90:69:47:3b:19:cb:1d:3b:e8:
69:04:61:ad:63:ff:9e:c5:7a:09:9c:17:5b:58:58:
cd:6d:ba:1f:d4:9b:d1:4c:82:18:05:46:56:de:df:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F0:A7:43:D1:C9:47:3D:21:31:00:4E:23:86:AF:FD:5B:6B:D0:B4
X509v3 Authority Key Identifier:
keyid:92:1C:2E:B0:16:4C:18:39:00:30:C5:E7:05:C4:A3:47:91:50:DF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khwusBZMGDkAMMXnBcSjR5FQ354.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f66ebb-ad73-4483-ae33-d08e8b181556/1/khwusBZMGDkAMMXnBcSjR5FQ354.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:43:c5:e9:4d:42:6b:6a:28:75:26:73:e4:08:d0:bd:bf:41:
f0:bc:8c:1f:75:ca:28:6b:a3:0a:e5:27:a6:ce:df:33:02:16:
6a:3f:bc:9f:c9:38:85:fa:6e:3c:c5:c1:93:15:09:02:a7:c1:
7b:cb:e4:4d:70:64:62:e6:a5:08:dd:c1:ec:2a:38:dc:b7:d4:
c9:91:55:e5:79:c0:16:44:19:b4:67:9b:09:1d:5a:48:27:ac:
cb:fb:8a:b5:50:43:21:78:fe:5a:54:d4:af:cf:fb:81:33:7d:
03:ef:5b:f4:c2:4b:3f:13:bb:0a:d4:dc:eb:5d:0d:ce:c4:68:
96:3d:a3:82:02:6a:5a:67:3e:dd:47:5a:f4:b8:3b:53:7e:83:
8d:8c:15:66:00:fd:a8:ea:74:41:26:c7:9f:d3:5b:88:8c:b6:
10:6b:78:f1:17:e7:3e:32:ed:e3:2b:9c:a9:91:47:96:5c:94:
c3:93:8d:0d:b7:90:ce:f4:9d:70:21:84:23:e1:18:11:de:5e:
dc:7a:ad:aa:d7:be:5f:81:ea:93:cf:17:3c:13:ae:ad:87:8e:
22:75:9a:62:e5:ef:5f:fa:bd:14:a5:00:17:11:e6:a2:dd:45:
c7:fe:6b:5f:a5:98:d3:26:a7:f0:b9:06:3f:20:65:66:8c:8f:
41:25:7e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:06 2024 by rpki-client on console-ams.rpki-client.org