Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.mft
File: nadDNq7s_nxGljFjp0diKc6Kgw0.mft (raw, json)
Hash identifier: S6/q3muBWDu8rnxnWVk9IFnYBCb7oSTvmRqM3A3hRt4=
Subject key identifier: 20:F7:04:9A:4D:EC:0C:71:4C:6F:2A:B0:A1:7B:7D:69:5C:DF:E7:E0
Authority key identifier: 9D:A7:43:36:AE:EC:FE:7C:46:96:31:63:A7:47:62:29:CE:8A:83:0D
Certificate issuer: /CN=9da74336aeecfe7c46963163a7476229ce8a830d
Certificate serial: 01843CC90AB59785887CFDE0C2839C7EC8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nadDNq7s_nxGljFjp0diKc6Kgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.mft
Manifest number: 02B2
Signing time: Thu 03 Nov 2022 09:18:38 +0000
Manifest this update: Thu 03 Nov 2022 09:18:38 +0000
Manifest next update: Fri 04 Nov 2022 09:18:38 +0000
Files and hashes: 1: DydUuP22lhsj5IJOZI91l-mKows.roa (hash: 84vtpeJOzuUxcasG7grPw8/tW3yZ1AEP1CkrVzM+Hjs=)
2: nadDNq7s_nxGljFjp0diKc6Kgw0.crl (hash: IsIHqIiF5W4NkfHBW0jSfXccS6ERO/70W4sJUiPfB30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:c9:0a:b5:97:85:88:7c:fd:e0:c2:83:9c:7e:c8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da74336aeecfe7c46963163a7476229ce8a830d
Validity
Not Before: Nov 3 09:18:38 2022 GMT
Not After : Nov 4 09:18:38 2022 GMT
Subject: CN=20f7049a4dec0c714c6f2ab0a17b7d695cdfe7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:38:b0:ae:ca:38:37:79:fe:11:0a:24:34:
7d:d0:eb:34:bb:2a:f4:32:31:93:6b:2e:cb:15:b8:
c8:1e:6b:b2:07:cc:30:72:ac:0a:bf:9d:6c:20:50:
fc:fb:53:0f:2b:8d:63:83:27:7b:eb:1e:46:12:3f:
f0:c7:ed:4e:e2:dc:b8:dc:2a:44:33:b4:a3:c5:93:
88:50:ba:05:4f:bd:5e:d5:f4:64:eb:2f:a4:44:60:
ff:df:a9:ad:17:97:14:13:25:cc:11:a9:11:00:65:
ee:14:25:7d:4e:1c:b9:ef:9b:7b:bd:0f:36:78:93:
eb:38:8f:82:97:4e:38:3f:57:eb:6e:ee:62:1f:93:
97:94:ac:46:63:7a:7c:bb:75:51:d1:aa:ad:81:64:
8e:ee:fc:64:a2:a5:34:c1:af:01:6e:48:a6:ed:25:
1a:6e:29:8a:73:5b:f8:8a:d7:b5:71:e5:15:82:d0:
3c:96:b4:bd:47:2a:1e:94:f9:95:4a:69:3e:c9:77:
dc:4c:8a:80:01:45:22:3d:69:3a:40:ba:f1:52:68:
88:8b:1d:c6:78:6c:f6:b6:6d:48:6c:bc:0a:7b:f4:
dd:fc:b9:93:0d:cf:d4:93:12:3d:2b:a8:66:60:1c:
8d:8d:9c:15:6f:77:4e:43:5e:86:85:6d:1f:03:02:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:04:9A:4D:EC:0C:71:4C:6F:2A:B0:A1:7B:7D:69:5C:DF:E7:E0
X509v3 Authority Key Identifier:
keyid:9D:A7:43:36:AE:EC:FE:7C:46:96:31:63:A7:47:62:29:CE:8A:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nadDNq7s_nxGljFjp0diKc6Kgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/581f28-59b7-4758-ab40-88b92029e914/1/nadDNq7s_nxGljFjp0diKc6Kgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4f:df:1d:e8:31:3c:6c:02:53:7f:fa:dd:2a:29:17:e4:ea:
46:37:75:a0:67:91:79:90:21:fc:3d:c1:15:65:b3:6b:f9:23:
7e:e5:91:fc:4f:d6:35:db:da:ab:e2:a4:df:f1:4c:96:78:87:
8c:6e:21:60:67:b6:88:fb:ae:85:bb:9f:d4:07:cd:79:eb:0b:
f7:39:0f:da:ca:80:b7:fa:c6:ce:8d:1d:84:86:d7:2b:5f:32:
c5:bf:87:e1:e2:8f:b2:4e:39:ff:21:69:93:9f:55:bc:7d:60:
08:f2:fe:e3:ad:3f:a9:62:af:c9:02:52:16:94:38:eb:1d:a2:
41:4d:68:70:03:6f:36:5f:71:f5:4d:52:42:7f:cc:1b:c0:fc:
04:3b:f9:00:5f:5a:a8:b2:21:af:ff:30:9f:ae:3e:c5:01:b0:
9b:dd:74:67:01:41:20:3a:69:0e:0b:76:b9:3f:4b:fb:8f:ba:
b2:ec:e4:72:22:a9:1f:aa:ff:e2:b9:45:20:b7:15:8a:b6:35:
8d:4f:8b:8f:44:68:ed:e2:1e:2e:5a:b9:ba:12:cd:2b:20:2e:
f7:98:e6:65:ea:78:7e:27:11:84:c5:ee:33:29:54:4e:8a:50:
f6:56:34:58:c3:54:15:37:fd:ab:d8:70:9b:c2:1d:52:5b:c0:
fd:02:d3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-fra.rpki-client.org