Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/27cf00-a8bd-4108-a56a-76a09215f9e9/1/PocS976MtId4P8CmmwG32-hynnE.mft
File: PocS976MtId4P8CmmwG32-hynnE.mft (raw, json)
Hash identifier: iSxaahchPBAQRUcLjH66bmhB8VORy8C9bx1toL5qBFA=
Subject key identifier: 4C:91:79:9E:89:CF:52:94:55:7F:7B:5F:74:E0:00:8C:74:39:BD:BA
Authority key identifier: 3E:87:12:F7:BE:8C:B4:87:78:3F:C0:A6:9B:01:B7:DB:E8:72:9E:71
Certificate issuer: /CN=3e8712f7be8cb487783fc0a69b01b7dbe8729e71
Certificate serial: 018BEFD26EF6AFC4F8671E489E95DF1AEE8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocS976MtId4P8CmmwG32-hynnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/27cf00-a8bd-4108-a56a-76a09215f9e9/1/PocS976MtId4P8CmmwG32-hynnE.mft
Manifest number: 08AF
Signing time: Tue 21 Nov 2023 03:00:27 +0000
Manifest this update: Tue 21 Nov 2023 03:00:27 +0000
Manifest next update: Wed 22 Nov 2023 03:00:27 +0000
Files and hashes: 1: PocS976MtId4P8CmmwG32-hynnE.crl (hash: dlXylzN/UzARbOFNtovkTshFn4KhweSFXJiqWB+7N6E=)
2: UYU6nWbasUNTNvYQPHOhE3QLEik.roa (hash: rw6/n/45cyWg3IF91fNTO+dBAGPHknMZlYkTBn1++q4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ef:d2:6e:f6:af:c4:f8:67:1e:48:9e:95:df:1a:ee:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e8712f7be8cb487783fc0a69b01b7dbe8729e71
Validity
Not Before: Nov 21 03:00:27 2023 GMT
Not After : Nov 22 03:00:27 2023 GMT
Subject: CN=4c91799e89cf5294557f7b5f74e0008c7439bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:16:66:24:cd:a2:01:a9:af:b6:35:09:00:
d5:5a:70:89:c0:eb:26:17:50:5e:67:a7:12:53:f8:
5c:20:04:64:e7:b5:50:bf:87:45:c7:3d:1d:18:68:
44:5a:cc:66:72:84:96:41:50:dd:18:ed:0a:d3:27:
bc:30:51:a9:d1:13:1b:84:9d:f5:86:77:8a:2e:e3:
73:6c:02:49:4a:e3:af:dc:27:41:06:d1:d4:43:9e:
fa:f3:06:6b:a3:59:66:aa:35:fd:8c:12:21:04:b8:
8b:dd:a1:af:cf:cb:4a:b1:4d:bb:2a:a1:b3:be:20:
eb:d0:e1:0d:00:3e:5a:4e:4a:a9:fb:98:60:71:cc:
dd:c2:a7:cd:9d:d0:47:c7:7b:cc:1c:66:37:c1:27:
bc:f1:b4:e8:fc:cc:98:de:25:4f:c7:5c:26:aa:d5:
bc:d9:c6:56:ad:57:5e:ff:f1:8c:19:7b:45:05:d4:
66:6f:24:fe:c4:63:f4:7c:c4:94:9e:8b:86:93:d4:
75:1c:65:40:ce:c5:1f:3c:73:de:5b:b6:4a:86:9e:
99:a5:fd:84:0b:28:b8:b1:24:b9:da:eb:d3:51:ed:
c8:c8:18:c5:2f:00:66:21:b7:15:a7:f8:68:8b:69:
84:d2:28:38:b6:bd:0e:4a:fb:81:b1:2d:0e:e4:95:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:91:79:9E:89:CF:52:94:55:7F:7B:5F:74:E0:00:8C:74:39:BD:BA
X509v3 Authority Key Identifier:
keyid:3E:87:12:F7:BE:8C:B4:87:78:3F:C0:A6:9B:01:B7:DB:E8:72:9E:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocS976MtId4P8CmmwG32-hynnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/27cf00-a8bd-4108-a56a-76a09215f9e9/1/PocS976MtId4P8CmmwG32-hynnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/27cf00-a8bd-4108-a56a-76a09215f9e9/1/PocS976MtId4P8CmmwG32-hynnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bf:17:b3:7e:38:03:f1:c1:52:d5:77:c6:0b:28:c7:0c:9e:
79:67:aa:64:86:dc:af:53:58:5e:62:73:7e:e0:d5:58:06:77:
dd:fa:3d:76:17:a5:a5:bb:65:71:41:f2:ed:d7:02:53:4f:c9:
16:b4:73:99:a0:bc:7d:79:aa:3a:e7:ee:36:80:8c:21:9e:e9:
1d:d3:9a:9b:8b:cf:6f:35:eb:69:dc:0f:98:98:0c:9c:6e:40:
8d:c6:b9:a2:0a:07:9c:0f:fa:39:3b:18:69:a2:3d:52:0f:95:
ee:bf:10:59:c0:03:a9:30:94:fc:cc:8c:8f:81:ae:74:51:23:
54:3c:6d:9a:bb:df:b9:d6:e2:4c:f1:71:1e:3c:d2:a9:85:eb:
79:31:7b:82:8f:30:2f:5b:70:66:fe:05:39:e4:f1:45:e5:e2:
74:f7:7a:97:b9:a8:c5:82:bc:31:91:62:9f:c8:d0:00:7f:80:
bc:ca:a5:81:ae:8a:cf:b6:7d:51:d2:1e:1f:60:c0:92:8a:25:
e1:5b:3f:3c:d4:5f:f8:41:2d:ee:b2:ef:26:7c:d4:eb:7d:2d:
97:66:10:61:f8:15:1b:b7:37:71:b3:bc:60:ce:fb:26:46:1a:
5f:b9:c7:81:d7:10:de:dd:91:0d:d8:c9:9a:18:79:ed:41:cc:
9d:df:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:42 2024 by rpki-client on console-ams.rpki-client.org