Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft
File: PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft (raw, json)
Hash identifier: 0hPAJrOJlu0RbNpqKXmEwOmnjO7LLQ43ZyAztikNfRI=
Subject key identifier: 2F:B7:BC:DA:85:06:3C:C1:11:D0:C5:09:27:5C:FF:77:04:5B:27:DF
Authority key identifier: 3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
Certificate issuer: /CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Certificate serial: 018D8D510054E4CDE3794F6FE449579798C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft
Manifest number: 085F
Signing time: Fri 09 Feb 2024 10:01:52 +0000
Manifest this update: Fri 09 Feb 2024 10:01:52 +0000
Manifest next update: Sat 10 Feb 2024 10:01:52 +0000
Files and hashes: 1: PsnKHX1VV7AYXqnO3gRUgOdiiSs.crl (hash: OE4VDXta4R6M2Xhe9LQ5Dp+yR8TVN6ppxKauPjqZAHY=)
2: yza_t7-O6APvb2kMcASyuhEUeFk.roa (hash: tsarCqLSpAe3VW+go20D07uAXxYOwShijoOfF80vjoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:51:00:54:e4:cd:e3:79:4f:6f:e4:49:57:97:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Validity
Not Before: Feb 9 10:01:52 2024 GMT
Not After : Feb 10 10:01:52 2024 GMT
Subject: CN=2fb7bcda85063cc111d0c509275cff77045b27df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:8d:4e:ad:c4:d9:80:de:27:33:da:80:66:
a5:a6:04:aa:2a:93:e8:d5:89:ab:1d:2e:fb:15:e3:
ee:f5:04:24:7f:fd:64:57:69:72:d0:76:48:d4:23:
5a:c3:9e:71:50:38:b3:0d:b0:11:21:13:d7:4f:6f:
2a:54:3f:39:cc:30:a5:da:d6:c4:54:77:eb:77:2c:
5d:25:dc:dd:04:6b:82:f3:97:e2:79:0f:03:c9:db:
24:f0:1f:a0:be:d0:25:f7:be:34:06:e6:6b:16:fe:
91:34:94:04:d0:8a:c4:ef:58:cf:d4:b4:e9:48:21:
e4:4a:eb:a8:18:92:39:d2:8a:5d:cf:8a:5b:3f:5c:
8f:58:04:9b:57:64:d5:47:37:1d:58:e8:38:73:eb:
9c:cb:8a:ad:a6:53:b9:bd:cf:9d:9e:f6:22:0c:b7:
a5:50:d1:41:00:88:c7:e8:c8:75:6a:11:43:fc:00:
a2:fe:b8:c8:a6:41:64:ec:35:fb:c3:03:33:b8:e4:
5d:de:a9:3e:c6:4a:c5:24:63:d8:39:7d:a6:48:91:
c6:09:84:57:a4:38:b8:b5:17:5a:c7:be:3f:7e:df:
96:6e:a8:a1:a4:f2:f9:7b:19:7e:4e:80:0f:cb:d3:
1d:1f:0c:d2:53:08:f8:f3:74:69:8e:7d:4a:fd:f9:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B7:BC:DA:85:06:3C:C1:11:D0:C5:09:27:5C:FF:77:04:5B:27:DF
X509v3 Authority Key Identifier:
keyid:3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5a:ee:6b:82:40:1d:e9:fc:3b:fa:76:0c:b4:34:0a:00:20:
de:8e:e5:23:52:2c:29:c9:66:a6:34:42:da:a9:dd:6d:c0:0f:
63:d7:24:60:7c:05:53:36:46:be:0c:38:c8:7e:01:58:65:ea:
af:c6:0e:1a:94:cf:97:72:85:36:a7:9b:e2:ab:66:ff:aa:f7:
31:21:d5:03:5e:99:54:af:12:ae:1e:1a:e1:a5:dd:80:04:e3:
f3:17:be:6e:64:a0:fe:23:5b:82:15:81:30:94:5c:9e:eb:80:
c0:f8:e0:a3:8e:80:ec:b3:53:c4:04:9d:15:0e:74:4d:14:c2:
07:46:37:65:61:b2:eb:16:ba:a8:a7:f0:6e:e9:02:c9:a0:34:
ae:d9:7c:0a:ed:6e:38:39:52:72:b5:11:4e:7c:c4:72:fb:11:
c8:d4:09:b8:96:6c:4b:47:09:b2:90:c0:7b:20:29:d9:30:50:
d1:da:6d:89:40:3b:48:91:bf:53:f8:7a:fa:f3:1d:d7:79:0a:
e8:c3:2e:d9:89:c6:9e:ec:b5:bd:85:5e:6e:8d:a3:99:a7:9d:
d7:87:e7:9b:d5:72:cf:95:83:55:7d:79:98:c9:9f:9a:de:07:
f3:b1:d5:1d:2b:81:bd:6c:b1:54:3a:25:c3:fe:8c:57:37:06:
07:e3:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:26 2024 by rpki-client on console-ams.rpki-client.org