Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b30fdb-32e3-4eb2-841f-8b20aa3baae9/1/DQPfUfCBhTHYreggjrgiU1QRboA.mft
File: DQPfUfCBhTHYreggjrgiU1QRboA.mft (raw, json)
Hash identifier: /y4bap9wgYrla6XJlTlkST5ZPcyyWzbvw1Tdoks8xYk=
Subject key identifier: 67:0F:37:D6:AF:78:1E:2C:B2:C9:36:11:8D:9E:F3:D0:50:C5:77:F8
Authority key identifier: 0D:03:DF:51:F0:81:85:31:D8:AD:E8:20:8E:B8:22:53:54:11:6E:80
Certificate issuer: /CN=0d03df51f0818531d8ade8208eb8225354116e80
Certificate serial: 018C1E63784784BFFC26424D4F9D0AE2D13C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQPfUfCBhTHYreggjrgiU1QRboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b30fdb-32e3-4eb2-841f-8b20aa3baae9/1/DQPfUfCBhTHYreggjrgiU1QRboA.mft
Manifest number: 0C60
Signing time: Thu 30 Nov 2023 04:01:24 +0000
Manifest this update: Thu 30 Nov 2023 04:01:24 +0000
Manifest next update: Fri 01 Dec 2023 04:01:24 +0000
Files and hashes: 1: DQPfUfCBhTHYreggjrgiU1QRboA.crl (hash: TlCgpQP9x3elh1u09HUw0k/TUGoKjI75fctEcuSYwJ8=)
2: Mmd8c-pFIEVgyCn5QqnDoVMwDDo.roa (hash: PYHZp1QZoRWg6VH9jRLd/mVesAmYUzR6UQzAAl/kyNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:63:78:47:84:bf:fc:26:42:4d:4f:9d:0a:e2:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d03df51f0818531d8ade8208eb8225354116e80
Validity
Not Before: Nov 30 04:01:24 2023 GMT
Not After : Dec 1 04:01:24 2023 GMT
Subject: CN=670f37d6af781e2cb2c936118d9ef3d050c577f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:2a:d5:bb:33:d0:c7:f7:cf:45:ac:ad:b8:
ee:8a:39:56:c3:39:a6:43:d7:e3:f4:63:f7:0d:d5:
20:62:d0:b2:8c:bb:45:fb:46:cb:b6:02:01:a6:94:
17:b7:c9:4e:f8:6d:bc:9d:66:ac:15:6b:ba:5b:e7:
8f:5a:03:fe:ac:75:1e:d0:88:5b:00:36:9a:74:ca:
70:1b:86:76:a1:37:f2:e5:ab:d3:6b:9a:ae:f0:5b:
74:f3:75:04:81:79:82:31:2b:72:84:d3:e2:ac:b3:
e6:92:11:6a:3e:0d:11:3e:f1:e7:a1:7e:2d:90:40:
f7:86:a6:01:28:f9:0e:e6:ed:cc:70:ec:5a:0a:96:
d8:0e:21:ed:c8:21:1c:1a:a3:a0:0e:09:3c:38:50:
29:7b:37:c2:2a:4c:27:12:a3:0f:c9:38:9f:2a:8a:
6c:ac:7d:4a:9f:3c:55:e2:80:02:ba:5e:d4:6a:18:
f8:a0:49:ce:f3:6c:a5:54:6c:37:7d:bc:e9:1f:d6:
25:9d:6e:5c:84:1e:62:35:8a:2a:56:fc:7f:bd:1c:
84:69:a0:10:2f:9d:a1:96:7e:0a:aa:8c:db:1b:b7:
53:38:db:32:48:b8:29:e3:9a:0e:b5:0c:d1:18:19:
b3:89:2d:da:71:4b:a6:42:d2:5e:1f:55:bf:cf:f7:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0F:37:D6:AF:78:1E:2C:B2:C9:36:11:8D:9E:F3:D0:50:C5:77:F8
X509v3 Authority Key Identifier:
keyid:0D:03:DF:51:F0:81:85:31:D8:AD:E8:20:8E:B8:22:53:54:11:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQPfUfCBhTHYreggjrgiU1QRboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b30fdb-32e3-4eb2-841f-8b20aa3baae9/1/DQPfUfCBhTHYreggjrgiU1QRboA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b30fdb-32e3-4eb2-841f-8b20aa3baae9/1/DQPfUfCBhTHYreggjrgiU1QRboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:18:e0:e6:ba:b5:5f:5c:41:65:9f:58:91:4a:32:8d:7a:85:
e7:c5:2c:de:55:16:2e:0f:c5:1d:80:12:51:c6:4c:44:2c:fe:
95:58:14:8e:3e:77:5b:8e:d3:56:1f:9f:b7:3a:6c:a1:43:b5:
38:89:e8:c6:8b:81:0f:e5:1b:9b:3b:e3:db:0b:b1:3b:4c:78:
8d:d9:0b:96:d2:4c:9f:5e:f2:7c:2b:72:1a:03:68:a4:38:96:
8c:18:98:97:0b:51:6b:cb:65:be:e3:0f:48:17:b1:7d:64:83:
15:5d:1e:27:89:4b:e4:95:3e:8c:c7:90:81:67:85:b7:aa:bb:
3b:a3:dc:ae:ba:3d:9f:9e:8a:5b:15:15:fe:85:73:e2:24:a6:
4c:f9:77:06:51:94:fa:a9:da:91:75:bc:40:86:99:5c:6f:79:
e1:50:ea:08:7d:76:9d:77:23:cf:9a:ab:85:1a:72:4a:0e:86:
72:37:f2:19:f4:1f:6a:72:1a:8b:70:1c:17:d6:a8:2b:43:29:
88:e9:2e:dd:a9:23:1f:f1:0d:6e:91:a0:db:e8:52:de:f7:0b:
38:a8:be:74:d3:d9:8c:02:4b:ee:d3:c4:65:d1:48:40:73:7d:
39:6f:19:87:76:0c:e0:e7:46:33:c6:9d:77:21:fe:0a:15:c8:
92:21:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 11:39:47 2023 by rpki-client on console-fra.rpki-client.org