Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.mft
File: PZtrfMeAqwMBkcGWkK_3D-G-70U.mft (raw, json)
Hash identifier: JvNcJmf/mMUuiVhWDyflbLyNb9FSKInKpD/72YBGcVA=
Subject key identifier: F7:58:98:61:C1:02:D6:DD:30:39:48:76:0E:FC:7B:7F:E0:DF:A5:C9
Authority key identifier: 3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
Certificate issuer: /CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
Certificate serial: 018B94A0DE3B80D465545195B61A48290A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.mft
Manifest number: 0896
Signing time: Fri 03 Nov 2023 10:00:52 +0000
Manifest this update: Fri 03 Nov 2023 10:00:52 +0000
Manifest next update: Sat 04 Nov 2023 10:00:52 +0000
Files and hashes: 1: PZtrfMeAqwMBkcGWkK_3D-G-70U.crl (hash: DLfmYIoMdoBE+4RLCBCyNZwqx80OEgicMj4rA3koHGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:a0:de:3b:80:d4:65:54:51:95:b6:1a:48:29:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9b6b7cc780ab030191c19690aff70fe1beef45
Validity
Not Before: Nov 3 10:00:52 2023 GMT
Not After : Nov 4 10:00:52 2023 GMT
Subject: CN=f7589861c102d6dd303948760efc7b7fe0dfa5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:43:49:e2:9f:96:a0:27:3f:be:f9:94:a0:
c7:fa:85:47:06:8b:a3:28:95:12:97:32:69:66:fa:
62:f6:80:84:aa:ce:80:ea:da:1e:5e:ac:1e:71:67:
24:e8:cd:56:1a:f8:63:36:24:c7:60:aa:fd:0e:4f:
09:fd:ee:8e:7e:67:2d:1d:be:54:d8:fc:fe:39:8e:
67:f6:50:5d:6f:05:f9:1b:7d:78:da:88:af:8f:33:
84:4a:5c:a9:69:25:03:19:6d:33:36:eb:32:0b:8e:
2a:27:e5:86:b1:fc:29:18:eb:e5:a8:6a:83:e5:db:
de:c9:f1:44:78:a0:17:7b:6b:dd:f8:37:93:6d:95:
39:69:43:80:a3:24:d5:c7:41:be:51:b2:64:44:d9:
54:d6:74:7c:31:60:a8:46:a2:38:00:be:7d:ca:f1:
e3:f3:cb:4d:79:77:51:16:df:b0:2b:88:38:f2:0a:
66:9a:4b:6a:36:23:4b:70:26:ea:4b:76:c1:7d:1a:
a3:39:a1:9b:4b:25:1d:fb:b8:24:1d:b0:0c:91:6c:
1f:dc:ed:0d:5d:7e:6a:18:18:36:37:e7:e8:1b:e8:
2c:da:14:54:cf:58:47:95:9b:26:03:08:65:2d:a5:
37:17:0b:b8:0c:db:d7:9d:13:2c:9a:9c:6e:96:ec:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:98:61:C1:02:D6:DD:30:39:48:76:0E:FC:7B:7F:E0:DF:A5:C9
X509v3 Authority Key Identifier:
keyid:3D:9B:6B:7C:C7:80:AB:03:01:91:C1:96:90:AF:F7:0F:E1:BE:EF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZtrfMeAqwMBkcGWkK_3D-G-70U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/04e8f4-05db-4eff-9dda-f32cfa059e2f/1/PZtrfMeAqwMBkcGWkK_3D-G-70U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:03:22:38:c0:c4:b2:28:ed:27:54:b8:85:4e:a6:3e:3f:
6c:df:aa:fe:36:f1:d7:1a:e5:18:59:64:a7:f8:e6:42:50:55:
da:da:83:9d:76:de:ba:39:0b:70:a6:3b:61:ed:00:d2:bd:21:
c8:ab:0a:15:71:ce:c5:5d:f7:2c:6f:88:ee:31:1e:40:f5:a3:
03:90:1d:36:7b:6a:92:7f:61:f4:ce:20:8f:f6:8a:1f:b5:d1:
de:4d:48:d1:70:e5:de:22:4d:50:c5:bb:53:db:11:7b:ec:39:
08:67:dc:0f:79:0d:56:f4:c7:2a:98:5a:06:47:49:5e:97:a5:
e1:bb:8f:ff:42:bb:13:41:83:c3:b0:a8:27:02:ff:66:82:9d:
5f:3e:11:6d:57:ab:34:db:33:a7:88:c4:c4:35:e2:cc:1f:f5:
26:4e:e4:19:4b:dc:26:f9:b5:e8:b5:1d:6a:00:38:65:b3:af:
90:41:42:7a:d3:00:bb:61:74:23:13:12:5b:18:56:2c:23:ac:
46:47:4c:30:97:ac:32:d0:84:dc:bd:35:b1:15:ca:f5:38:5b:
d2:c7:ab:80:8c:f2:e4:c2:f5:76:64:13:ad:e4:14:97:62:3a:
3f:f3:29:f3:e0:99:8e:4e:d6:30:ee:0a:0d:dd:a4:4e:12:bf:
97:3f:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 12:39:52 2023 by rpki-client on console-ams.rpki-client.org