Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/ryA5AAF2U8xODcGxO-oXegZT-y0.mft
File: ryA5AAF2U8xODcGxO-oXegZT-y0.mft (raw, json)
Hash identifier: EgeohALeq+VvBUw8NnOJLT3a5JHxkpJFkILXAz+jpa4=
Subject key identifier: 12:6E:82:2A:47:FC:96:80:0C:B4:5A:69:9E:1D:16:78:05:A2:9C:55
Authority key identifier: AF:20:39:00:01:76:53:CC:4E:0D:C1:B1:3B:EA:17:7A:06:53:FB:2D
Certificate issuer: /CN=af203900017653cc4e0dc1b13bea177a0653fb2d
Certificate serial: 018B36A5D427465BFF66619E09A056556021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryA5AAF2U8xODcGxO-oXegZT-y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/ryA5AAF2U8xODcGxO-oXegZT-y0.mft
Manifest number: 0875
Signing time: Mon 16 Oct 2023 04:01:59 +0000
Manifest this update: Mon 16 Oct 2023 04:01:59 +0000
Manifest next update: Tue 17 Oct 2023 04:01:59 +0000
Files and hashes: 1: XfOhFKk0NQWozk0pM3ag2lCEX10.roa (hash: epUN7GOOJpjxW7yX1+J+8u2nkPAlUUbiP4ODTyQkwZY=)
2: ryA5AAF2U8xODcGxO-oXegZT-y0.crl (hash: PU3g9uJiV46xbdhpPMxweLx+GC+LahIIBW9JLj9VGzs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:a5:d4:27:46:5b:ff:66:61:9e:09:a0:56:55:60:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af203900017653cc4e0dc1b13bea177a0653fb2d
Validity
Not Before: Oct 16 04:01:59 2023 GMT
Not After : Oct 17 04:01:59 2023 GMT
Subject: CN=126e822a47fc96800cb45a699e1d167805a29c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:06:1d:a3:c0:9c:b1:29:fb:54:e3:a0:ef:
7c:86:68:47:89:87:ae:c1:cd:e6:98:1b:38:e0:fc:
33:8c:95:84:f4:61:67:5c:da:6b:d2:98:84:8b:84:
66:5a:c0:be:cd:b2:46:c9:86:0a:01:ea:fe:3f:a6:
cb:84:99:bd:67:04:ef:a0:e0:58:52:31:1d:bc:f3:
06:be:16:34:6f:7f:90:5b:4f:00:34:04:f8:60:f4:
53:7c:aa:4c:a9:e6:f8:80:42:8e:9a:6e:78:34:97:
db:e3:65:4f:81:a1:13:10:24:8b:b3:18:9c:a5:90:
fc:bb:aa:1b:c0:76:6f:64:ff:f7:a5:dd:58:2a:4b:
62:95:b1:46:a7:e0:7f:f5:f0:a4:27:21:82:2e:2c:
3a:b7:6c:a4:b5:c1:79:b7:1d:13:6e:62:71:76:7c:
78:93:6b:59:5d:95:67:8a:b6:e9:a3:7a:cb:38:76:
c5:cd:9c:2f:0d:37:a4:40:f9:9a:32:a7:4e:f0:76:
f7:55:ca:53:45:41:7f:3a:ca:ab:e8:74:3f:ae:c9:
10:b6:4a:de:9b:e0:ed:85:90:0b:cd:ff:80:8f:1a:
2e:af:a2:d4:aa:11:38:ef:c8:5f:82:78:8f:c8:73:
d6:74:8b:80:d7:b0:b2:f5:fc:13:6d:11:52:b2:80:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6E:82:2A:47:FC:96:80:0C:B4:5A:69:9E:1D:16:78:05:A2:9C:55
X509v3 Authority Key Identifier:
keyid:AF:20:39:00:01:76:53:CC:4E:0D:C1:B1:3B:EA:17:7A:06:53:FB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryA5AAF2U8xODcGxO-oXegZT-y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/ryA5AAF2U8xODcGxO-oXegZT-y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/009445-c9c7-49e5-a8ca-0aaee4f3651b/1/ryA5AAF2U8xODcGxO-oXegZT-y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:57:9a:81:0d:18:61:70:28:71:80:41:d4:77:5b:e9:e6:d7:
31:f4:bb:73:fc:09:d0:29:63:28:32:1f:cd:0b:ff:0e:b4:34:
9a:0f:d7:4c:6c:d8:22:10:94:4b:60:ca:f2:f7:f4:34:74:a8:
25:3a:f4:cd:db:78:6c:51:ce:e6:66:3d:05:3c:bc:bf:0e:8c:
06:18:89:a8:f5:8f:ea:6c:ae:26:31:03:80:a0:86:99:e1:8c:
8d:09:d0:51:b0:cc:c8:32:42:53:1e:c6:a9:1d:cf:09:06:e4:
75:96:b9:e1:8b:12:c1:da:c4:10:7a:a1:13:f1:4e:ac:59:f0:
ba:3b:19:e3:98:7d:c7:0b:5e:03:cd:6c:df:bd:bd:d5:af:76:
bb:e0:37:a8:ce:65:85:51:d6:c7:bd:da:0b:f3:aa:be:11:ca:
f5:c0:31:4a:70:4f:1c:bd:af:16:3c:c2:a3:c6:75:c9:9a:a9:
cf:a2:05:7e:8b:f6:03:84:d8:97:63:02:d3:c2:d1:c6:64:2c:
b2:88:49:b9:78:45:98:50:0d:21:ea:03:f5:e4:68:c3:67:14:
15:96:ba:fe:60:a6:fa:f7:b9:1a:9e:28:06:cd:a4:8c:08:d4:
49:38:0b:86:fe:71:38:8d:25:23:94:9f:35:61:a9:9f:a0:a6:
5d:20:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:54 2024 by rpki-client on console-fra.rpki-client.org