Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f6895e-e60d-408b-9a98-b180f1fdbb2a/1/v1fF-KbYudFwc5QISRApBE7evck.mft
File: v1fF-KbYudFwc5QISRApBE7evck.mft (raw, json)
Hash identifier: MM/M7Ng22apwiIlu0iZk/5H7RvCdjzoBXfRwA/pq9MA=
Subject key identifier: D0:BD:2C:40:65:8F:51:54:0C:51:9C:3A:0D:6F:FA:3A:CB:D5:5D:D1
Authority key identifier: BF:57:C5:F8:A6:D8:B9:D1:70:73:94:08:49:10:29:04:4E:DE:BD:C9
Certificate issuer: /CN=bf57c5f8a6d8b9d170739408491029044edebdc9
Certificate serial: 018CC8DFFB5FC4F716F8BF98E33E18FE9F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1fF-KbYudFwc5QISRApBE7evck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f6895e-e60d-408b-9a98-b180f1fdbb2a/1/v1fF-KbYudFwc5QISRApBE7evck.mft
Manifest number: 014A
Signing time: Tue 02 Jan 2024 06:32:51 +0000
Manifest this update: Tue 02 Jan 2024 06:32:51 +0000
Manifest next update: Wed 03 Jan 2024 06:32:51 +0000
Files and hashes: 1: v1fF-KbYudFwc5QISRApBE7evck.crl (hash: d+Zkgh8kJi2AgA7XDjWq5rnoOq/78vlb52qQI8OXTKY=)
2: vXkf8FjS3dndfFsCb1LtQF11zfo.roa (hash: q8KdrA55AypWbeL/Idqts1QK1gjKr/B6mT6VuMD+PvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:fb:5f:c4:f7:16:f8:bf:98:e3:3e:18:fe:9f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf57c5f8a6d8b9d170739408491029044edebdc9
Validity
Not Before: Jan 2 06:32:51 2024 GMT
Not After : Jan 3 06:32:51 2024 GMT
Subject: CN=d0bd2c40658f51540c519c3a0d6ffa3acbd55dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b5:89:e6:30:6c:60:5b:4a:2d:c5:be:14:f2:
24:5e:46:68:27:9c:b7:20:9f:b8:44:d8:9c:e7:0d:
e9:79:33:69:c6:cc:28:ce:70:53:f7:df:65:8d:33:
2c:f7:07:96:45:6d:e8:d1:23:6d:3a:7d:41:db:c3:
67:45:9f:46:3c:63:9c:5e:84:fc:2a:5a:55:40:de:
16:4f:54:8d:6b:01:39:2e:4b:b5:e0:eb:67:e4:b6:
7c:65:07:07:89:27:26:b3:d0:c1:b2:63:4a:e1:42:
40:2b:d0:69:3c:ae:6d:f2:83:c7:48:59:a3:d1:2e:
11:0d:4e:8e:67:57:03:d1:37:99:d4:a0:cd:9a:37:
84:d5:bf:6c:e4:02:27:ab:89:1e:51:f4:ae:43:92:
ab:65:25:18:67:5e:36:9e:75:30:79:b3:3d:80:7a:
5d:dd:72:41:1b:96:ca:e8:c0:09:78:be:a8:d6:dd:
1e:b9:7f:13:7c:5b:e1:55:8a:c0:56:51:52:3f:cd:
d9:75:48:f0:98:19:88:0e:fe:09:19:97:a3:33:ec:
da:a8:dd:6d:2d:e3:23:6f:04:6e:20:19:12:37:0f:
69:55:6d:42:14:85:d5:fb:7b:84:1a:49:07:8f:66:
93:6f:5d:eb:ff:41:1d:6b:e2:0c:36:e2:c9:1b:55:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BD:2C:40:65:8F:51:54:0C:51:9C:3A:0D:6F:FA:3A:CB:D5:5D:D1
X509v3 Authority Key Identifier:
keyid:BF:57:C5:F8:A6:D8:B9:D1:70:73:94:08:49:10:29:04:4E:DE:BD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1fF-KbYudFwc5QISRApBE7evck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f6895e-e60d-408b-9a98-b180f1fdbb2a/1/v1fF-KbYudFwc5QISRApBE7evck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f6895e-e60d-408b-9a98-b180f1fdbb2a/1/v1fF-KbYudFwc5QISRApBE7evck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9c:11:12:cd:cb:91:ed:d1:06:df:a4:4b:ca:56:ae:ed:22:
cf:fd:83:41:99:e6:9c:78:64:69:f6:5b:d4:82:f5:19:32:5d:
d7:d5:28:9e:17:31:ab:be:43:bd:cf:fd:f3:17:3e:3b:a1:70:
ec:a2:45:55:6b:61:f5:aa:90:bf:3d:b1:c2:db:f3:3c:af:e0:
db:43:45:79:d5:d0:51:89:02:a3:ef:cd:02:7b:38:97:bb:03:
33:6a:59:56:f2:76:b5:bb:40:21:ae:ec:c8:51:92:af:20:e5:
09:56:f1:c3:e8:9f:c2:7d:fc:2d:c8:2e:8f:0c:01:3a:05:48:
c3:02:98:24:ab:ab:a5:05:57:97:6a:6d:c9:47:6e:5d:14:cf:
84:f7:1c:ab:c3:18:32:cd:6b:be:a7:6e:d9:a8:7a:8b:dd:30:
01:88:6d:22:3c:3d:cf:14:d9:68:4b:a7:cd:e0:f1:fd:e4:c9:
47:2b:0e:51:7e:df:c5:80:02:d3:a8:48:03:b3:08:14:51:2b:
f6:85:25:df:cf:35:99:c1:83:fc:55:eb:9d:7f:ae:29:6b:84:
1d:d4:02:2d:c8:4e:b7:89:1b:b3:3a:d5:52:e3:b5:21:4b:84:
44:a9:48:98:dd:4d:dd:5a:7a:d4:d7:21:f3:69:63:03:4a:70:
fe:2b:1a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:54 2024 by rpki-client on console-ams.rpki-client.org