Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.mft
File: Y8CI6txSzG01p_t2UYIICnRG92o.mft (raw, json)
Hash identifier: 70GfMFkWNsx6MkZibJkhyVfDM7p0pispP0wJJgDlu9o=
Subject key identifier: A0:AA:C1:A6:2F:E5:8C:AF:E1:AC:D7:B6:1B:F2:35:07:C4:4D:79:E7
Authority key identifier: 63:C0:88:EA:DC:52:CC:6D:35:A7:FB:76:51:82:08:0A:74:46:F7:6A
Certificate issuer: /CN=63c088eadc52cc6d35a7fb765182080a7446f76a
Certificate serial: 018E185CD6BD6A0E92DC87959B742FBC5652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8CI6txSzG01p_t2UYIICnRG92o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.mft
Manifest number: 095F
Signing time: Thu 07 Mar 2024 10:02:00 +0000
Manifest this update: Thu 07 Mar 2024 10:02:00 +0000
Manifest next update: Fri 08 Mar 2024 10:02:00 +0000
Files and hashes: 1: Y8CI6txSzG01p_t2UYIICnRG92o.crl (hash: BJBn9HeRsse2ghA6FRSqvsM7P5LRdvwB806JWphG94I=)
2: q_SilLDcr3AklFc2zeeBouelwzk.roa (hash: sgyRnqH44pG2IZjuVaVW/KXQIl2KZ586FprTpQj4CU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:5c:d6:bd:6a:0e:92:dc:87:95:9b:74:2f:bc:56:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c088eadc52cc6d35a7fb765182080a7446f76a
Validity
Not Before: Mar 7 10:02:00 2024 GMT
Not After : Mar 8 10:02:00 2024 GMT
Subject: CN=a0aac1a62fe58cafe1acd7b61bf23507c44d79e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:0d:6e:26:a1:e4:34:91:a5:6a:71:83:07:
09:72:ed:f6:8d:e3:fa:9c:f6:55:15:70:f3:22:d0:
a8:da:6a:75:94:19:0a:44:59:0b:2d:57:1c:e8:86:
c7:e9:8c:f1:60:b1:ec:ad:47:99:09:86:99:60:44:
58:16:be:50:b3:95:c9:ff:63:95:a9:bb:ea:8e:54:
57:b1:31:42:e0:85:6a:1b:99:26:4a:62:48:ca:56:
9a:fb:08:88:4b:b8:c6:73:48:3b:ab:76:77:26:21:
92:0c:88:23:8a:f2:25:b4:6d:ff:6d:65:89:3c:a2:
c3:4c:fe:9a:7a:e4:d9:18:a1:00:b2:1e:09:9b:22:
3a:8c:cb:32:de:f5:34:50:41:e3:a7:d0:47:9f:72:
11:57:fb:0b:02:c6:cd:80:3d:58:58:3a:29:dc:1a:
ab:59:ed:1c:ad:a9:9a:30:86:f0:ba:01:ee:f3:1a:
64:ec:26:16:5d:49:14:1a:ec:98:94:8d:f9:2f:7d:
4f:4e:a0:22:73:dd:c5:c0:a0:ca:07:d2:7c:c6:cc:
5a:07:28:87:d8:b1:6c:e7:d2:47:2e:0f:c4:73:e0:
bf:aa:db:59:24:2c:07:c5:4c:7d:bd:02:c4:71:69:
8e:11:8b:bf:32:8c:1a:60:62:e7:1d:0c:8f:72:bf:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AA:C1:A6:2F:E5:8C:AF:E1:AC:D7:B6:1B:F2:35:07:C4:4D:79:E7
X509v3 Authority Key Identifier:
keyid:63:C0:88:EA:DC:52:CC:6D:35:A7:FB:76:51:82:08:0A:74:46:F7:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8CI6txSzG01p_t2UYIICnRG92o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:09:0c:14:ac:c7:31:65:47:21:b0:f6:7c:8c:ff:ca:1d:93:
1c:fb:b1:25:c6:0c:18:5a:9c:4b:d6:fe:f1:da:20:8b:96:54:
9c:68:90:8b:a3:c3:2c:a3:60:9b:0f:fe:07:65:24:3b:a6:f2:
70:aa:1a:7a:d3:ab:1f:ba:25:e8:75:be:33:f1:d4:c3:60:b4:
64:bb:b2:15:6e:c9:ed:ed:fc:f8:f8:7e:cc:d5:06:c3:df:49:
6b:05:8d:71:56:1a:ef:d2:e8:71:aa:c8:f1:87:f6:07:85:09:
1f:8f:6f:ae:1e:9f:a3:8c:b8:03:08:fa:6c:70:ec:95:fe:42:
8c:53:99:f0:b9:57:85:d8:28:bc:5c:a8:d5:62:1b:6d:19:9a:
67:0a:6a:98:cf:87:f9:18:41:9e:7f:85:59:86:f1:d0:2e:93:
7f:61:88:d1:de:62:51:11:c3:43:b6:d4:7a:e4:55:2e:f1:2b:
f7:f1:73:0c:93:49:a9:ab:92:fb:28:93:0c:bb:c8:a9:fa:0f:
b7:a8:4b:83:c1:da:a8:2f:e5:22:a7:dd:3e:af:ae:37:6b:91:
b7:6a:fe:ab:c0:aa:fd:50:21:3c:d0:e7:ba:a5:0a:fb:73:6d:
5a:dd:5d:a4:af:cc:d7:a4:de:a5:24:ad:41:f4:71:5c:c4:6c:
53:17:90:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-fra.rpki-client.org