Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.mft
File: IueHG5Jm471Rbb1UI0VoavNL_JE.mft (raw, json)
Hash identifier: B/bociFBvI0cUmqFbbvpK+4/K42wteTTsgDqUdkAMpI=
Subject key identifier: 6C:E9:F4:8F:58:36:84:59:EC:06:6A:56:C5:6A:AF:E4:BC:CC:5C:9C
Authority key identifier: 22:E7:87:1B:92:66:E3:BD:51:6D:BD:54:23:45:68:6A:F3:4B:FC:91
Certificate issuer: /CN=22e7871b9266e3bd516dbd542345686af34bfc91
Certificate serial: 018B7EF4CC3CDC4A9F919E8EFF1543C4B166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IueHG5Jm471Rbb1UI0VoavNL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.mft
Manifest number: 0F60
Signing time: Mon 30 Oct 2023 05:00:54 +0000
Manifest this update: Mon 30 Oct 2023 05:00:54 +0000
Manifest next update: Tue 31 Oct 2023 05:00:54 +0000
Files and hashes: 1: IueHG5Jm471Rbb1UI0VoavNL_JE.crl (hash: TgsGHf3MMYGtnucfBujwpDjgMzbU1Cbo12qVhj3DTrs=)
2: Q9-AEV-rooRNtc1ZBn25vaNDPYI.roa (hash: /azish7PPhKtQ3sORpVQRsa4azpRacpbOkkt+VGLJJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7e:f4:cc:3c:dc:4a:9f:91:9e:8e:ff:15:43:c4:b1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e7871b9266e3bd516dbd542345686af34bfc91
Validity
Not Before: Oct 30 05:00:54 2023 GMT
Not After : Oct 31 05:00:54 2023 GMT
Subject: CN=6ce9f48f58368459ec066a56c56aafe4bccc5c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:40:aa:07:f6:71:61:2b:eb:06:e5:de:0c:
ec:3e:60:3c:7a:25:ed:81:3c:7b:6e:17:84:e1:b7:
46:79:c9:b3:8a:a7:07:1c:f6:7f:be:70:b6:b9:3e:
b0:9d:90:9c:3a:5b:8c:65:0a:82:1a:e7:00:07:c3:
ba:e1:2d:73:11:05:49:43:fb:3a:70:fa:d4:6d:13:
6c:91:2e:26:34:51:a1:b3:7c:11:db:0e:32:7d:a4:
19:52:09:91:ef:12:e7:2b:5e:a8:e0:a9:d5:26:a3:
a4:c8:58:8f:a7:31:ae:7f:65:a5:e2:33:cc:af:da:
d9:7b:71:f7:72:4a:20:43:22:5e:f6:42:c8:8e:f9:
7e:40:50:6e:0b:39:15:98:45:5f:95:75:c9:b4:be:
3a:bd:33:54:b7:6d:2f:19:b8:28:ca:20:56:03:f6:
3d:7e:86:7d:b5:0d:eb:d8:65:f0:5e:c1:e8:3d:a4:
8b:3c:6e:21:16:1a:ef:64:78:4f:2d:38:6d:53:81:
db:ac:82:e6:dd:ba:60:b3:36:4d:f7:c5:38:28:78:
77:77:b0:89:d3:e9:bc:43:54:6b:9c:65:07:c6:52:
d2:a4:d3:7a:8e:a0:86:85:53:09:e5:d2:b7:aa:05:
be:39:75:f8:24:fe:53:27:6f:e1:b1:e8:49:d5:87:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:F4:8F:58:36:84:59:EC:06:6A:56:C5:6A:AF:E4:BC:CC:5C:9C
X509v3 Authority Key Identifier:
keyid:22:E7:87:1B:92:66:E3:BD:51:6D:BD:54:23:45:68:6A:F3:4B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IueHG5Jm471Rbb1UI0VoavNL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ad:f3:2f:36:d1:93:ba:1e:2d:6e:e9:1f:09:cd:86:77:17:
f6:b5:cc:09:e6:6f:56:49:2f:83:c3:1a:92:e3:60:48:95:67:
3d:fc:30:b6:79:8e:2a:28:87:f1:5a:8d:64:dd:1e:75:8d:70:
ed:7c:ec:ce:54:59:a4:bb:bd:5b:78:bd:73:21:0c:3e:8c:24:
00:d7:91:19:58:6b:97:d0:b5:a1:50:14:db:0c:e1:a5:b9:49:
09:f9:df:18:cd:ff:b7:c7:cf:8e:62:ca:09:48:3f:24:bb:d7:
fd:fd:46:d8:f9:70:a9:44:3e:00:23:f3:d5:48:42:78:1a:1e:
86:d8:cf:a6:54:35:c5:15:6d:f7:5a:eb:e3:a9:75:63:ec:e9:
51:39:01:c8:97:e2:08:71:7d:a0:4b:b7:ef:8a:13:52:df:f2:
ae:32:2a:12:48:9a:93:e6:7a:59:27:7f:af:44:77:d7:e6:5f:
3d:d8:9a:01:47:33:74:82:66:df:66:6e:ec:70:b5:b9:44:50:
b1:2c:3e:56:1f:73:d6:b8:49:9c:f6:dc:e5:11:09:3d:c3:f8:
3a:b1:45:4f:a8:71:a1:03:24:09:e0:82:e2:63:66:f4:1d:ea:
ce:5d:1b:24:75:9a:aa:3e:b1:79:c3:aa:be:83:3c:a3:52:5f:
2b:18:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org