Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/358688-d937-432d-b6be-328189791759/1/2hOJ3oSDvRQtP8ez98o-dV0YwJw.mft
File: 2hOJ3oSDvRQtP8ez98o-dV0YwJw.mft (raw, json)
Hash identifier: rwXpD/Y1TOQgrc4xQ1O/BwYyWLY2+YFGVXXPNiLJgo8=
Subject key identifier: B4:82:62:22:07:01:C7:87:9C:D7:C4:68:0A:C3:47:7F:48:30:1A:E7
Authority key identifier: DA:13:89:DE:84:83:BD:14:2D:3F:C7:B3:F7:CA:3E:75:5D:18:C0:9C
Certificate issuer: /CN=da1389de8483bd142d3fc7b3f7ca3e755d18c09c
Certificate serial: 018CAF7134C47CCA437AE6ED1C1D1AB9DADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hOJ3oSDvRQtP8ez98o-dV0YwJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/358688-d937-432d-b6be-328189791759/1/2hOJ3oSDvRQtP8ez98o-dV0YwJw.mft
Manifest number: 1000
Signing time: Thu 28 Dec 2023 08:01:20 +0000
Manifest this update: Thu 28 Dec 2023 08:01:20 +0000
Manifest next update: Fri 29 Dec 2023 08:01:20 +0000
Files and hashes: 1: 2hOJ3oSDvRQtP8ez98o-dV0YwJw.crl (hash: oRk4TEKDeeBzY/DQ8TNIsfzcedSx3moVsTfIa5wnUeA=)
2: H6advh5_9ZcR3RNbxD06QXR-p1U.roa (hash: EyeUdtOzYuU3/KqaohS+gwnX1GZ3Cf7wmMOcubH6EuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:71:34:c4:7c:ca:43:7a:e6:ed:1c:1d:1a:b9:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1389de8483bd142d3fc7b3f7ca3e755d18c09c
Validity
Not Before: Dec 28 08:01:20 2023 GMT
Not After : Dec 29 08:01:20 2023 GMT
Subject: CN=b48262220701c7879cd7c4680ac3477f48301ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:f1:e4:a6:af:41:62:75:d9:32:16:ea:07:
52:8c:fc:79:12:8d:fa:7b:88:aa:ce:3d:ba:06:9b:
14:2d:09:16:e6:97:19:b7:50:5f:19:f2:93:21:c8:
4d:ea:08:a3:49:9d:c4:07:22:33:01:b8:59:c5:26:
db:1f:9b:b4:aa:19:26:3f:b6:44:90:21:9e:62:c0:
4b:50:44:77:21:6f:6c:f9:37:ba:a3:7c:e9:47:1c:
f8:6a:68:32:4d:09:55:f0:b3:f5:eb:65:68:7f:0e:
ab:f0:d1:21:fa:18:5d:c6:1f:46:46:5a:7c:4b:fc:
c1:48:5a:53:1b:f4:56:fa:43:06:f8:85:1e:1c:fa:
49:b7:ab:a9:8b:6f:4f:6f:0f:0e:d2:fe:5a:58:72:
a0:11:9a:7d:62:73:8a:21:94:f9:0f:c2:d3:ba:82:
c8:3b:4e:ed:e8:28:ee:ad:a5:9d:73:16:b3:d3:8a:
0b:1c:d7:f4:2d:50:c3:32:6a:39:9d:0e:fc:29:e6:
6f:b8:a1:23:b2:c7:d3:86:46:ba:85:28:cb:fb:d3:
6e:e0:76:e5:be:cb:14:4f:3d:ef:a5:b2:fa:c0:e1:
ec:4b:5b:30:eb:44:83:79:80:2a:7b:d8:3f:3e:60:
29:3c:be:08:4a:b1:b3:2d:39:29:92:75:50:aa:c3:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:82:62:22:07:01:C7:87:9C:D7:C4:68:0A:C3:47:7F:48:30:1A:E7
X509v3 Authority Key Identifier:
keyid:DA:13:89:DE:84:83:BD:14:2D:3F:C7:B3:F7:CA:3E:75:5D:18:C0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hOJ3oSDvRQtP8ez98o-dV0YwJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/358688-d937-432d-b6be-328189791759/1/2hOJ3oSDvRQtP8ez98o-dV0YwJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/358688-d937-432d-b6be-328189791759/1/2hOJ3oSDvRQtP8ez98o-dV0YwJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d3:b9:3d:62:68:3f:7f:a2:6c:35:34:a7:55:d8:27:73:bb:
00:c9:5c:59:6d:77:ec:f5:5d:e4:14:13:85:c6:79:1f:40:20:
fe:5c:8a:84:8a:c7:49:0d:5d:c5:03:3d:fb:af:bb:e5:62:fb:
fc:e9:9e:f1:ab:0d:7d:38:fc:94:27:ad:f5:c1:ae:4a:72:d8:
d1:ea:3b:49:e7:d4:e8:2b:e6:69:5c:f1:7f:22:84:07:56:fe:
65:dd:36:2b:75:93:4e:f9:79:2a:3f:53:a0:ad:e6:a7:8d:a3:
6e:aa:ef:12:7a:3b:55:d1:51:25:63:be:26:3e:22:89:03:68:
71:5e:86:74:25:70:9e:85:17:fa:b0:54:1c:e0:5e:bc:e9:b0:
94:8c:14:62:18:26:70:25:5f:70:29:82:f0:c9:7e:dc:99:1c:
d6:0b:02:48:fa:09:3e:6d:23:ee:ab:ab:ad:01:54:82:4a:53:
07:ac:a9:15:54:2b:e2:2e:ab:68:8c:b3:ec:72:e1:44:8f:37:
80:c7:ff:bf:8e:b3:00:8c:ce:fd:2a:91:16:81:eb:71:7f:99:
d5:f4:32:27:f7:bb:d9:1d:8e:84:ef:e2:e3:66:f7:0d:a3:67:
ac:3a:8e:ab:0b:bc:ea:96:d9:7e:5e:19:c5:5c:2b:f0:f5:d8:
e7:38:96:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-fra.rpki-client.org