Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/ICmRs6DQb5pfltjnfanzbZhRtso.mft
File: ICmRs6DQb5pfltjnfanzbZhRtso.mft (raw, json)
Hash identifier: Ln1U3s89wn4ze/fHV7Rfsqk52b0aluunLO75ucavlHQ=
Subject key identifier: DC:8C:8B:1E:B3:54:90:80:78:C4:55:36:5C:C1:4B:44:F8:F3:3C:5C
Authority key identifier: 20:29:91:B3:A0:D0:6F:9A:5F:96:D8:E7:7D:A9:F3:6D:98:51:B6:CA
Certificate issuer: /CN=202991b3a0d06f9a5f96d8e77da9f36d9851b6ca
Certificate serial: 018E10A27D2B7B837592DE38970AD2632DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICmRs6DQb5pfltjnfanzbZhRtso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/ICmRs6DQb5pfltjnfanzbZhRtso.mft
Manifest number: 10B6
Signing time: Tue 05 Mar 2024 22:01:08 +0000
Manifest this update: Tue 05 Mar 2024 22:01:08 +0000
Manifest next update: Wed 06 Mar 2024 22:01:08 +0000
Files and hashes: 1: E6wLnFDqdC1uKVsMiPmtlMf6zq4.roa (hash: EKnlo29bDL3k3pIJBWZhsh0me2czkmUIzsZe5JZEKss=)
2: ICmRs6DQb5pfltjnfanzbZhRtso.crl (hash: ESdLrTpYthGWpNmUUQyoHJlv2KC8n6osNxGLUVXcqos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:a2:7d:2b:7b:83:75:92:de:38:97:0a:d2:63:2d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202991b3a0d06f9a5f96d8e77da9f36d9851b6ca
Validity
Not Before: Mar 5 22:01:08 2024 GMT
Not After : Mar 6 22:01:08 2024 GMT
Subject: CN=dc8c8b1eb354908078c455365cc14b44f8f33c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:a8:eb:15:d2:40:54:de:66:64:2e:d1:9b:
6d:e4:7f:ef:02:39:00:ee:3b:1f:59:b7:fb:1b:69:
0f:3d:41:e9:74:60:80:fd:e0:ef:66:c0:b2:29:b7:
e6:12:e5:57:3b:9e:9d:23:fd:04:6a:d2:be:f9:9a:
e7:93:4a:9c:7d:4f:e6:ed:7c:8f:38:fc:3a:7b:49:
37:91:cd:26:d3:a6:bf:97:e7:9c:28:77:b6:7c:11:
eb:5b:05:1e:5d:d2:09:8f:5c:a0:1b:dc:1a:8f:78:
f1:19:41:78:dc:f7:b2:ef:9f:5f:10:a5:4d:e1:df:
ea:ba:70:ad:4b:de:b0:55:76:66:5e:41:32:60:af:
3f:89:c3:3b:ce:5f:9f:84:30:b0:41:14:7d:a8:75:
3c:84:6d:b6:95:03:34:bd:34:15:cd:5c:74:ea:de:
d6:e7:48:05:df:50:ed:23:17:45:ed:42:29:7b:14:
31:fa:a5:fe:61:5e:47:7f:17:2b:f2:51:60:9d:f1:
82:c1:35:5d:2f:10:46:90:af:48:80:db:e7:dc:b6:
e6:9f:54:f8:0d:9e:ca:c2:c2:f9:37:d8:ab:d2:6f:
f1:a1:d6:13:ec:b6:8e:13:c0:f1:d1:56:69:f9:c4:
95:a5:a3:ed:2d:85:90:39:b5:bf:07:44:ad:81:f3:
4a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8C:8B:1E:B3:54:90:80:78:C4:55:36:5C:C1:4B:44:F8:F3:3C:5C
X509v3 Authority Key Identifier:
keyid:20:29:91:B3:A0:D0:6F:9A:5F:96:D8:E7:7D:A9:F3:6D:98:51:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICmRs6DQb5pfltjnfanzbZhRtso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/ICmRs6DQb5pfltjnfanzbZhRtso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/ICmRs6DQb5pfltjnfanzbZhRtso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:35:c5:1d:48:2d:e6:e5:dd:ca:50:ef:b8:60:b0:d9:2b:90:
84:e0:c6:ca:fc:1b:ef:9b:2e:b2:68:f5:8a:2a:73:2b:43:ae:
02:be:28:1e:ab:67:44:c4:95:ab:1f:37:e3:d0:89:6f:61:ab:
49:13:70:e4:46:c0:a9:86:65:14:17:9c:e1:3f:b0:cb:f9:b7:
74:b4:7a:c3:8f:57:77:69:9d:a7:5e:92:ea:c3:cc:7c:5b:00:
d7:1c:94:d1:44:20:ba:ac:74:92:f1:a3:cb:ea:db:94:64:1e:
13:14:9a:73:f9:0a:b4:d6:d5:a3:6c:3c:5b:8a:a5:e4:81:c1:
dd:96:39:39:f9:35:2a:61:da:3a:62:5f:4c:de:c8:c9:44:b0:
17:e3:54:69:74:82:a8:a8:89:fc:25:51:cb:bd:97:56:03:5f:
08:6e:1c:de:8c:8e:a2:7f:1d:61:17:3f:c0:c7:0e:13:14:dd:
af:c6:7a:1f:9b:47:40:de:02:f1:75:22:c9:77:6c:df:f1:ed:
50:40:a7:ea:e3:15:6a:4b:0c:9b:49:f7:ff:dd:04:bf:d1:e9:
67:8e:19:d3:a6:50:56:75:81:9f:26:bf:30:ce:68:a4:5a:d9:
4a:42:0a:4b:81:ca:f4:4f:97:81:a7:db:cb:28:e7:61:af:99:
22:9e:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 11:26:29 2024 by rpki-client on console-ams.rpki-client.org