Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/85265e-8972-4e4c-be4c-253408b299f8/1/THjK4SDrIEbj-l2VNoIetGX-3GU.mft
File: THjK4SDrIEbj-l2VNoIetGX-3GU.mft (raw, json)
Hash identifier: MY6FseLI/663G+VWNqXE5WUHSdp9LQlAc9Wg2S6TsKc=
Subject key identifier: 43:6C:E4:FF:6A:D5:A6:DE:8A:F8:0B:EC:64:C5:C3:5A:45:23:0C:E2
Authority key identifier: 4C:78:CA:E1:20:EB:20:46:E3:FA:5D:95:36:82:1E:B4:65:FE:DC:65
Certificate issuer: /CN=4c78cae120eb2046e3fa5d9536821eb465fedc65
Certificate serial: 01830DEB76F16F5B25C960A33E334A3CA37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THjK4SDrIEbj-l2VNoIetGX-3GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/85265e-8972-4e4c-be4c-253408b299f8/1/THjK4SDrIEbj-l2VNoIetGX-3GU.mft
Manifest number: 3B
Signing time: Mon 05 Sep 2022 13:51:18 +0000
Manifest this update: Mon 05 Sep 2022 13:51:18 +0000
Manifest next update: Tue 06 Sep 2022 13:51:18 +0000
Files and hashes: 1: THjK4SDrIEbj-l2VNoIetGX-3GU.crl (hash: nLfa26gTxAr/4rEU67WdB5f754CI/L5o57GBC8oXVsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:eb:76:f1:6f:5b:25:c9:60:a3:3e:33:4a:3c:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c78cae120eb2046e3fa5d9536821eb465fedc65
Validity
Not Before: Sep 5 13:51:18 2022 GMT
Not After : Sep 6 13:51:18 2022 GMT
Subject: CN=436ce4ff6ad5a6de8af80bec64c5c35a45230ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:9c:bf:8b:48:87:fb:c8:7a:f1:7a:47:b2:
40:f5:81:70:08:31:12:cd:e7:7f:a8:b4:a6:51:e8:
63:ef:92:86:34:94:7d:24:87:f6:ee:b6:8f:67:5c:
3e:0c:68:35:c3:4c:0d:2c:a0:cb:1d:ba:fc:5f:b6:
08:26:d1:1b:cb:0c:18:81:96:34:e2:f3:e9:4c:b8:
82:dc:78:bf:9b:22:39:6b:57:07:0f:83:56:95:9f:
6c:0c:39:6c:04:e8:03:da:bc:44:6d:4e:38:26:c7:
ef:62:fc:71:ee:c8:10:00:cf:78:8c:40:98:96:5b:
dd:ba:ff:e4:0c:f1:3f:6b:3f:0d:fe:56:55:97:c7:
0a:2c:1a:9d:e9:d5:9e:9e:8a:e0:eb:d9:eb:63:2f:
cf:8d:69:83:67:50:03:ef:34:c3:60:1c:22:9b:1d:
d3:3b:19:62:55:b3:98:66:02:fd:2d:a5:4e:cf:34:
01:c9:dd:e5:8e:21:bd:74:2f:d6:cf:76:7d:4f:38:
07:4a:27:81:2e:66:7d:cc:59:3a:f4:7e:11:64:4e:
9f:b1:1c:02:85:ae:1a:92:62:ac:e1:2e:61:e1:95:
aa:9b:4a:4c:ec:bc:da:7d:c5:d9:07:0f:72:be:5d:
2a:64:db:97:fd:78:2e:5c:63:a5:5d:f5:b4:17:9b:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:E4:FF:6A:D5:A6:DE:8A:F8:0B:EC:64:C5:C3:5A:45:23:0C:E2
X509v3 Authority Key Identifier:
keyid:4C:78:CA:E1:20:EB:20:46:E3:FA:5D:95:36:82:1E:B4:65:FE:DC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THjK4SDrIEbj-l2VNoIetGX-3GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/85265e-8972-4e4c-be4c-253408b299f8/1/THjK4SDrIEbj-l2VNoIetGX-3GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/85265e-8972-4e4c-be4c-253408b299f8/1/THjK4SDrIEbj-l2VNoIetGX-3GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:96:98:61:9d:e4:50:54:2a:c6:0c:07:f0:d0:8d:a3:f9:5d:
68:13:2d:b4:25:0f:e9:ff:2f:67:c6:45:40:c7:ff:37:1e:91:
34:d3:26:63:54:d8:56:08:70:d9:c7:8f:0c:4c:1a:ec:f6:ea:
71:c1:30:17:c2:0d:8f:04:df:5f:f6:59:0e:be:1a:f2:92:f1:
f2:18:17:57:1d:ec:48:5e:96:bb:b4:bd:05:e1:9f:b2:be:7e:
a9:c5:bc:db:e9:c7:5a:d7:e7:4d:3c:aa:c4:1d:39:59:91:8d:
db:93:37:18:f8:e8:fb:b5:a6:fc:d7:d5:d9:6d:15:8f:1b:c6:
d1:8f:c7:26:63:13:1a:01:a8:f3:4a:76:3d:ef:d4:fa:58:1d:
27:4a:14:9a:eb:5f:ca:43:e9:5a:5b:d3:60:e3:33:29:7c:e3:
59:a1:98:c8:20:61:c4:1a:07:72:ef:21:c7:68:38:9a:82:48:
ac:8d:36:8a:e6:7e:eb:32:f2:05:0d:7c:a1:28:f9:3e:b7:09:
0a:ff:7c:3c:85:07:38:63:b4:18:39:0a:29:b7:fa:14:80:d0:
7c:98:cc:15:ca:27:5c:b7:46:7a:44:a3:95:5b:b8:66:5c:34:
28:04:7d:bd:ba:28:a3:e3:91:87:3d:3a:a5:01:f0:9d:91:03:
04:f6:1c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:49 2024 by rpki-client on console-ams.rpki-client.org