Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/23abd9-3e06-479a-9ed9-8f36615838d1/1/3VKOULs6YktG7mIWBZ5km46ERF0.mft
File: 3VKOULs6YktG7mIWBZ5km46ERF0.mft (raw, json)
Hash identifier: 585ne1/bkH0oba0KtOFnTHA/RPhRsObXPY0VA3u77FA=
Subject key identifier: AA:94:4D:D5:79:56:C3:BA:68:5B:E8:09:2F:28:6C:D4:0D:3A:96:88
Authority key identifier: DD:52:8E:50:BB:3A:62:4B:46:EE:62:16:05:9E:64:9B:8E:84:44:5D
Certificate issuer: /CN=dd528e50bb3a624b46ee6216059e649b8e84445d
Certificate serial: 018D7C5C0BBFFF7C62855A0C16936BDC0373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKOULs6YktG7mIWBZ5km46ERF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/23abd9-3e06-479a-9ed9-8f36615838d1/1/3VKOULs6YktG7mIWBZ5km46ERF0.mft
Manifest number: 07D9
Signing time: Tue 06 Feb 2024 03:00:23 +0000
Manifest this update: Tue 06 Feb 2024 03:00:23 +0000
Manifest next update: Wed 07 Feb 2024 03:00:23 +0000
Files and hashes: 1: 3VKOULs6YktG7mIWBZ5km46ERF0.crl (hash: xe0viKegCTS4QpvwNKsORpJLNtpiGs4gQWhVgdDzJSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7c:5c:0b:bf:ff:7c:62:85:5a:0c:16:93:6b:dc:03:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd528e50bb3a624b46ee6216059e649b8e84445d
Validity
Not Before: Feb 6 03:00:23 2024 GMT
Not After : Feb 7 03:00:23 2024 GMT
Subject: CN=aa944dd57956c3ba685be8092f286cd40d3a9688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c1:2d:96:d8:f0:b4:5a:4f:a7:0a:17:e6:be:
af:f9:b1:e4:d9:b0:a3:05:bf:8e:d9:7f:f6:82:58:
f7:ea:e4:44:7a:b5:08:dc:2d:81:0e:44:be:19:68:
95:18:a0:14:52:2d:ac:b0:3a:03:44:16:6e:22:bf:
bc:f4:35:ab:3a:c4:c4:3f:2a:36:87:f9:c5:ce:d6:
a8:a1:3d:97:0d:b0:86:43:c3:09:e3:78:84:c0:ba:
63:45:9d:09:3c:7f:82:b3:4b:73:02:5c:a7:51:79:
37:a0:c0:a6:b2:f9:25:b4:b7:44:d1:b4:50:a5:5d:
14:52:b7:93:b2:c7:37:c4:e1:aa:9b:a0:2e:15:eb:
33:8e:d5:d4:2f:28:77:2b:c5:79:1d:38:ee:d0:fa:
0f:1b:81:91:d2:6a:f1:65:9d:09:91:1d:f6:81:2c:
37:c3:0e:b2:71:ae:85:e8:2f:d2:3f:ed:fb:1d:13:
1f:e8:56:d3:37:6d:b0:7d:2b:2d:e8:17:50:a8:33:
23:32:7f:7f:04:f1:61:4f:2f:18:42:c4:9b:41:f8:
30:41:c7:53:b4:18:9e:6a:4c:ba:4a:9d:39:ce:b2:
4b:66:3c:7e:0e:8b:d3:4d:97:7a:d6:f7:63:a5:9f:
4b:0a:ee:60:ae:e0:8f:06:e5:a3:68:9a:31:50:85:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:94:4D:D5:79:56:C3:BA:68:5B:E8:09:2F:28:6C:D4:0D:3A:96:88
X509v3 Authority Key Identifier:
keyid:DD:52:8E:50:BB:3A:62:4B:46:EE:62:16:05:9E:64:9B:8E:84:44:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKOULs6YktG7mIWBZ5km46ERF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/23abd9-3e06-479a-9ed9-8f36615838d1/1/3VKOULs6YktG7mIWBZ5km46ERF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/23abd9-3e06-479a-9ed9-8f36615838d1/1/3VKOULs6YktG7mIWBZ5km46ERF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:9a:6b:5c:42:7c:c8:36:de:43:b0:ad:fb:52:70:96:06:82:
c7:df:1c:69:e1:25:da:ea:af:b5:92:26:db:eb:bb:73:a9:5f:
ac:2d:77:e8:1c:97:fd:4e:c0:93:b5:45:8e:67:9d:7b:fa:31:
b9:14:0e:01:81:64:7f:a7:99:1c:92:34:74:67:de:34:36:86:
d0:13:36:30:53:07:ae:d2:a9:14:35:e3:c6:b0:6d:35:a9:e2:
8b:f1:43:e2:f8:d7:98:1d:d6:75:2f:a1:66:71:9c:d9:57:5f:
a7:cc:d5:7a:42:ff:d0:84:19:d0:40:c6:c4:d3:7f:74:60:c4:
63:17:9c:fa:b4:b5:26:6e:d3:2d:67:8e:71:b6:7a:de:78:24:
70:a6:55:c1:67:d4:22:30:56:c8:4d:f0:4d:32:86:29:d1:41:
51:56:35:e6:be:96:09:1a:08:7c:08:a9:ee:51:a9:c9:96:9e:
5c:2b:3b:09:29:7b:28:e8:8d:59:42:4f:8b:02:e8:23:5e:c3:
14:5b:64:0e:58:1f:be:2d:6b:c8:dd:0a:88:d1:93:03:22:e2:
68:ce:e8:63:f0:fe:a8:ef:98:18:ac:5d:da:9c:f6:81:d7:79:
37:fa:71:ec:bf:3f:59:63:a9:5b:76:55:ec:fb:db:ec:c5:a6:
c9:4b:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 15:04:17 2024 by rpki-client on console-ams.rpki-client.org