Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/lCmzpJDsh9-uC4imtsiazdPLt88.mft
File: lCmzpJDsh9-uC4imtsiazdPLt88.mft (raw, json)
Hash identifier: I1OG/YtIG1+UmDcxMnZ3heo9tAI6pq464Wm/9sK5tik=
Subject key identifier: 84:FE:D5:07:B7:B2:80:32:F5:A9:8E:42:F4:88:E8:C0:08:A6:37:5A
Authority key identifier: 94:29:B3:A4:90:EC:87:DF:AE:0B:88:A6:B6:C8:9A:CD:D3:CB:B7:CF
Certificate issuer: /CN=9429b3a490ec87dfae0b88a6b6c89acdd3cbb7cf
Certificate serial: 018B6A5B51DE0CC1DBD4126C004233602491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCmzpJDsh9-uC4imtsiazdPLt88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/lCmzpJDsh9-uC4imtsiazdPLt88.mft
Manifest number: 08B2
Signing time: Thu 26 Oct 2023 05:00:51 +0000
Manifest this update: Thu 26 Oct 2023 05:00:51 +0000
Manifest next update: Fri 27 Oct 2023 05:00:51 +0000
Files and hashes: 1: Y_BcJswwqDzriN2yAjmq3dcKqMs.roa (hash: mlSCjf/WSJKs87EMHZPu9+VqLwSCsCsVwGRFBpurQtA=)
2: l-6Fjxe1U3IsSbzvi5N5R8p6cCY.roa (hash: MIom/3gwet/sjI1ECZuu4TESVlZAbkghw95McBPZ8AY=)
3: lCmzpJDsh9-uC4imtsiazdPLt88.crl (hash: Pn8J7UTZN2ebtrfH5wZM9pvcJpJZBQTjHlOMEhcGdn0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:5b:51:de:0c:c1:db:d4:12:6c:00:42:33:60:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9429b3a490ec87dfae0b88a6b6c89acdd3cbb7cf
Validity
Not Before: Oct 26 05:00:51 2023 GMT
Not After : Oct 27 05:00:51 2023 GMT
Subject: CN=84fed507b7b28032f5a98e42f488e8c008a6375a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:08:eb:3c:81:f5:03:f1:65:4b:28:c0:d7:04:
87:3e:8d:24:42:9a:18:4c:95:a3:51:d3:9b:92:73:
a4:1a:2c:3d:c6:64:c8:0b:11:01:f8:ea:b2:eb:eb:
55:f5:cd:d7:a7:76:a0:2b:b1:7b:3d:d9:f3:46:38:
94:4a:8a:4f:82:de:43:dd:69:ae:aa:07:95:d9:9b:
b2:05:9d:02:3e:fd:ab:79:cd:39:1f:3d:fb:37:be:
e7:01:f9:91:7b:4f:c7:08:18:36:e0:de:68:25:9e:
01:5e:28:97:de:30:04:fa:58:c3:7e:5c:a2:58:b8:
df:39:4f:dd:52:3e:0d:24:3d:9b:1b:b9:fd:2d:0b:
65:39:be:5c:dc:a2:98:d1:5c:c0:ea:bb:29:ac:51:
76:fd:54:88:1f:8f:dc:1f:a4:b6:e5:8a:41:4a:b6:
e2:75:86:17:29:72:a1:74:1d:f4:2f:9e:67:8e:ab:
5d:e0:38:c5:b8:62:f1:60:bc:29:93:7a:11:8d:19:
ca:47:d0:60:9e:7f:5d:bb:f6:63:46:d1:21:00:f4:
5a:2a:4b:8c:48:66:bf:f4:5f:7a:46:1f:2a:1d:5b:
1d:35:61:f7:91:e1:bd:c0:93:50:0e:3c:c5:1f:1f:
56:45:5b:79:1b:31:36:0a:a6:f2:dd:2c:4f:b9:84:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FE:D5:07:B7:B2:80:32:F5:A9:8E:42:F4:88:E8:C0:08:A6:37:5A
X509v3 Authority Key Identifier:
keyid:94:29:B3:A4:90:EC:87:DF:AE:0B:88:A6:B6:C8:9A:CD:D3:CB:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCmzpJDsh9-uC4imtsiazdPLt88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/lCmzpJDsh9-uC4imtsiazdPLt88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e32f2e-35db-4afc-9c3b-cab8ef3902a4/1/lCmzpJDsh9-uC4imtsiazdPLt88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:db:71:73:89:f3:a1:6c:4b:d6:a9:34:23:a5:d8:02:14:d7:
d2:34:97:b0:fa:ed:16:b5:3c:29:0d:74:51:4b:52:27:23:6f:
85:c1:06:29:7f:6d:89:95:28:5d:fc:3e:ac:75:03:78:db:d5:
e2:dd:74:c4:c7:00:5d:e6:c7:9c:cb:79:4c:c5:e9:b8:9b:6f:
8a:30:ff:f8:7d:47:1a:20:31:a0:dd:7f:77:fc:cc:ac:45:a0:
ee:20:ce:5d:31:88:7b:f2:a2:c6:aa:bd:03:65:ce:3a:de:5d:
3f:f6:a6:09:c3:d8:54:1e:30:aa:a2:c6:69:f9:f8:31:b2:7b:
bf:8f:d4:36:04:a7:ef:bb:fd:32:a6:81:84:6c:9f:18:42:92:
3c:8e:9f:47:68:78:fd:d0:13:c0:b6:02:e6:64:69:84:02:56:
3b:43:5e:86:cd:f7:4b:8a:4d:54:fa:d0:0f:00:65:12:a9:f5:
3e:58:1e:c9:0b:b2:c6:af:9e:df:e1:0d:c7:5a:4e:bd:10:fc:
b9:da:5a:b5:77:71:64:cb:b9:e4:4e:2d:70:7a:fb:cb:c0:cb:
21:cc:7a:f0:e8:13:db:bf:23:74:b5:75:bf:fd:a0:23:3d:ef:
d8:58:b0:fb:2d:83:9a:2f:b8:6c:1d:74:4a:d5:b1:96:00:07:
a0:e9:c9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:36 2024 by rpki-client on console-fra.rpki-client.org