Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/47f8cb-e1df-4494-849e-5c41a09d1951/1/oCDNh5zUBIBZk1Zr393SdWiOzGU.mft
File: oCDNh5zUBIBZk1Zr393SdWiOzGU.mft (raw, json)
Hash identifier: Cm9s3WmS/D8gKCNUU5Mk9Y4VA6s6riWSjl17LYd5ZdY=
Subject key identifier: C7:BB:4A:45:05:03:34:DF:9A:45:B9:8F:EF:E3:98:6E:CD:C4:93:50
Authority key identifier: A0:20:CD:87:9C:D4:04:80:59:93:56:6B:DF:DD:D2:75:68:8E:CC:65
Certificate issuer: /CN=a020cd879cd404805993566bdfddd275688ecc65
Certificate serial: 01864A4CD218164AA119A04552AAFD0BB1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCDNh5zUBIBZk1Zr393SdWiOzGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/47f8cb-e1df-4494-849e-5c41a09d1951/1/oCDNh5zUBIBZk1Zr393SdWiOzGU.mft
Manifest number: 09B0
Signing time: Mon 13 Feb 2023 10:23:13 +0000
Manifest this update: Mon 13 Feb 2023 10:23:13 +0000
Manifest next update: Tue 14 Feb 2023 10:23:13 +0000
Files and hashes: 1: oCDNh5zUBIBZk1Zr393SdWiOzGU.crl (hash: k3d2ZJDZCjPm9ZavPfRBVo4bOFNbiwSQbp9J35m6ynk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:4c:d2:18:16:4a:a1:19:a0:45:52:aa:fd:0b:b1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a020cd879cd404805993566bdfddd275688ecc65
Validity
Not Before: Feb 13 10:23:13 2023 GMT
Not After : Feb 14 10:23:13 2023 GMT
Subject: CN=c7bb4a45050334df9a45b98fefe3986ecdc49350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8a:7c:32:13:64:b5:38:84:fb:e1:ed:e1:e6:
26:87:68:40:de:de:d0:de:81:72:d3:2f:14:0c:d6:
0e:a7:ba:75:38:a6:04:80:e6:4f:35:ce:8d:4d:fc:
48:19:b4:b6:10:f4:e4:b9:98:35:93:37:d0:52:cb:
f0:16:e2:aa:be:20:d5:07:c5:64:0f:8e:3a:5b:e0:
84:45:b3:05:52:0e:01:cc:cb:e6:58:77:0e:5f:48:
82:5e:ef:aa:ba:3f:67:47:97:ba:be:d6:58:0f:f1:
ea:f3:c2:93:d7:8a:0f:2c:3a:c0:e7:d5:eb:29:f9:
c3:a0:79:aa:23:e8:f5:85:23:c4:40:f0:60:4e:08:
e0:e4:52:61:17:b0:ee:04:c7:cd:96:fa:b7:95:a2:
4f:83:d7:d8:12:f3:6b:cd:58:a5:fe:c1:f1:09:f5:
cd:31:52:a1:4b:ab:6a:3f:34:3d:9c:2a:c6:1e:b8:
39:af:c6:12:ff:8e:cf:0d:84:c6:85:bd:ee:93:ec:
6b:00:57:30:ab:1d:dd:1a:55:e0:cf:81:34:b7:32:
e3:a6:b9:0f:ff:e7:cd:bc:19:39:cf:99:d8:36:ff:
16:65:ae:1b:5a:a7:56:7d:ad:fe:bd:6f:7e:1c:91:
ea:b2:33:8a:fe:fc:da:fe:8f:8e:11:c9:e2:fd:3f:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BB:4A:45:05:03:34:DF:9A:45:B9:8F:EF:E3:98:6E:CD:C4:93:50
X509v3 Authority Key Identifier:
keyid:A0:20:CD:87:9C:D4:04:80:59:93:56:6B:DF:DD:D2:75:68:8E:CC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCDNh5zUBIBZk1Zr393SdWiOzGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/47f8cb-e1df-4494-849e-5c41a09d1951/1/oCDNh5zUBIBZk1Zr393SdWiOzGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/47f8cb-e1df-4494-849e-5c41a09d1951/1/oCDNh5zUBIBZk1Zr393SdWiOzGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e1:09:0c:82:63:c0:07:f7:ae:40:53:f0:e4:cd:82:64:33:
d0:85:04:4c:f0:b5:94:ca:18:0c:88:e7:1d:55:04:7b:64:6b:
a3:3c:47:b7:ad:ef:24:1c:ef:62:b7:e7:77:af:02:95:60:44:
9a:27:cd:de:3d:a1:de:38:91:ea:38:dd:ce:13:41:58:66:dc:
76:c8:cf:7b:5f:e7:38:4f:a2:2a:36:2a:41:16:d1:23:57:46:
7b:37:d5:47:8f:ee:8b:22:f1:f1:a5:2e:48:90:aa:ad:78:52:
f0:e8:1b:a5:07:68:34:70:6b:80:0c:54:53:f7:5b:f5:12:67:
10:b3:82:b8:32:3f:c0:a8:b7:fa:82:33:8b:f5:82:38:38:10:
5f:f5:df:d6:b1:a8:b2:80:1e:d7:d2:a7:88:46:f9:f0:59:64:
ec:b8:ed:fc:d7:87:9e:29:5d:03:9f:71:45:65:26:11:2d:d7:
96:8b:db:90:86:d6:2e:2d:7e:1e:65:23:64:68:32:49:4a:87:
45:c2:a0:20:31:37:04:86:f8:42:3b:d2:cb:ad:d1:49:a8:c6:
fa:0a:80:d1:71:01:72:ad:0b:28:f3:51:f1:cc:a8:fe:8b:cd:
ff:08:27:45:d7:93:d3:bb:fe:ea:67:f4:40:19:f1:08:ad:2a:
19:74:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:13 2024 by rpki-client on console-fra.rpki-client.org