Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/iTz6Unh3SnEeRL4dawwnl_IvK3c.mft
File: iTz6Unh3SnEeRL4dawwnl_IvK3c.mft (raw, json)
Hash identifier: BU0aDQQ2EL47botSfKE1oNFnPcgLntk2+vCPargpH6s=
Subject key identifier: D5:3C:3E:BE:8D:55:15:22:34:69:B3:5F:D8:38:0E:2A:29:B8:4E:53
Authority key identifier: 89:3C:FA:52:78:77:4A:71:1E:44:BE:1D:6B:0C:27:97:F2:2F:2B:77
Certificate issuer: /CN=893cfa5278774a711e44be1d6b0c2797f22f2b77
Certificate serial: 01933D6EBAE048FD2F849F38879AF458BEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTz6Unh3SnEeRL4dawwnl_IvK3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/iTz6Unh3SnEeRL4dawwnl_IvK3c.mft
Manifest number: 096C
Signing time: Mon 18 Nov 2024 04:01:27 +0000
Manifest this update: Mon 18 Nov 2024 04:01:27 +0000
Manifest next update: Tue 19 Nov 2024 04:01:27 +0000
Files and hashes: 1: Pbp1eciHO-UhIJpPdZFn8wF63FI.roa (hash: EiHHNAaeKbw5gHhaTNQ4Y0I8tatl+hRLFmyR/dbGoU0=)
2: iTz6Unh3SnEeRL4dawwnl_IvK3c.crl (hash: RqtkL9s2R5oiasFj2rLXnW8eJ+hhJu9FgZxst9rydZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3d:6e:ba:e0:48:fd:2f:84:9f:38:87:9a:f4:58:be:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893cfa5278774a711e44be1d6b0c2797f22f2b77
Validity
Not Before: Nov 18 04:01:27 2024 GMT
Not After : Nov 19 04:01:27 2024 GMT
Subject: CN=d53c3ebe8d5515223469b35fd8380e2a29b84e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:af:5e:f9:b8:3f:21:aa:6f:a0:cf:e0:13:
d6:e8:49:fc:9c:f0:64:e2:44:8d:5b:3f:7a:11:ab:
bb:44:7c:08:d9:5e:b5:83:37:ac:06:57:8d:56:ed:
67:f4:23:d1:f7:c4:54:10:7a:ef:e3:28:04:e5:d0:
26:c7:29:03:4a:5d:0e:39:54:c5:d9:2a:3c:ea:b6:
1f:22:07:b4:8b:c6:03:83:8c:c3:53:65:a0:8a:80:
64:a2:61:86:96:df:f3:15:fa:00:d3:0c:e7:a0:d2:
c0:b3:7b:ff:9b:bc:63:3f:61:e7:4a:28:63:6c:8e:
3f:f1:25:b4:cf:46:37:86:3d:96:3b:63:65:ef:8a:
4d:be:13:a9:1b:d3:6f:fe:33:31:2b:0f:78:50:47:
83:a5:27:cb:b6:c3:71:df:ca:71:41:ee:9a:db:81:
49:7f:7f:15:c9:e4:b0:e9:fc:ae:a7:0d:6a:f9:2e:
a9:ec:4d:75:e0:99:4d:e0:f6:83:f2:c3:97:86:e1:
2b:e7:79:17:3c:50:d8:7b:17:7e:86:e3:37:79:23:
5e:00:9d:9e:cd:a1:9c:c4:01:8d:0f:d8:02:34:02:
fa:aa:93:25:65:ef:e3:6b:d4:be:25:de:2c:a3:bb:
36:6b:40:48:b3:28:ed:3e:25:e8:bb:49:20:d2:4e:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3C:3E:BE:8D:55:15:22:34:69:B3:5F:D8:38:0E:2A:29:B8:4E:53
X509v3 Authority Key Identifier:
keyid:89:3C:FA:52:78:77:4A:71:1E:44:BE:1D:6B:0C:27:97:F2:2F:2B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTz6Unh3SnEeRL4dawwnl_IvK3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/iTz6Unh3SnEeRL4dawwnl_IvK3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5c97a8-0a72-4646-bbef-4a58f6f4a520/1/iTz6Unh3SnEeRL4dawwnl_IvK3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:fc:b7:08:b0:a5:2d:0b:d2:d8:8f:0a:a7:fb:5f:9a:be:9e:
8d:d9:0b:72:e8:e8:13:4c:f3:06:a9:78:30:18:8a:c3:29:87:
22:d8:da:4f:73:75:34:70:62:2a:36:3c:c6:d7:97:9e:8d:5c:
a2:f6:41:a9:c8:63:33:74:5b:7e:1f:bc:ed:3a:0e:06:aa:f0:
1c:38:4c:62:15:86:86:03:d2:ee:b9:7d:6a:d9:e8:ea:2c:de:
2d:8b:f8:1a:b4:ef:9f:d4:6c:92:f2:2a:a5:5a:43:b5:09:07:
75:81:14:f7:0c:4f:5a:88:5b:a1:38:46:3a:58:4a:b9:85:f1:
6d:a1:02:27:62:ff:8d:a9:09:19:a5:2f:58:ca:39:a5:56:af:
30:92:68:e5:4c:0b:84:84:6e:9a:23:4f:73:1d:4d:35:c7:bb:
94:c3:a8:20:9a:a5:23:a9:21:8f:cd:0e:08:50:f2:c9:ed:03:
6a:95:91:37:95:5b:53:4f:27:04:71:bb:4d:bb:64:71:30:09:
c5:41:82:8c:cc:95:f8:b5:22:a4:4b:f1:31:ab:62:0d:4a:69:
60:96:e1:a9:8c:88:c7:07:fd:5d:71:c0:8f:01:38:d2:5e:7d:
18:05:a9:e6:7c:c3:08:84:b7:8a:63:85:0e:d3:78:da:31:9f:
54:fd:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:25 2025 by rpki-client