Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.mft
File: D0uZGcrOmS7vcaRAoSPbo98qlIU.mft (raw, json)
Hash identifier: T3Ywgm9YFWEXBR3EeeC2N/5/QWButQr9nnCEfL3AIVk=
Subject key identifier: 3B:93:36:38:B2:17:EB:7E:07:50:32:01:7D:E7:47:65:BC:F6:BC:05
Authority key identifier: 0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
Certificate issuer: /CN=0f4b9919cace992eef71a440a123dba3df2a9485
Certificate serial: 01874661655CC4CD0284D893F588D64A0D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.mft
Manifest number: 0D07
Signing time: Mon 03 Apr 2023 09:10:00 +0000
Manifest this update: Mon 03 Apr 2023 09:10:00 +0000
Manifest next update: Tue 04 Apr 2023 09:10:00 +0000
Files and hashes: 1: 0VPF_se6BtjoYHWbXQWBAsf1Xeo.roa (hash: v9oEgexxnA0gWhssC/gE2RFjA2hdpTWdm+j6IXQ6dVc=)
2: CcrzYImIWt2KQrqZSzpgoaTkZyM.roa (hash: S03bTL7n7lHfhZp69cHeuNuYA35EETjxzdWhYanKxnk=)
3: D0uZGcrOmS7vcaRAoSPbo98qlIU.crl (hash: JYHm6Empac5JJmx2NJcz39EChWwWhrHeQOku+lmn2lA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:61:65:5c:c4:cd:02:84:d8:93:f5:88:d6:4a:0d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4b9919cace992eef71a440a123dba3df2a9485
Validity
Not Before: Apr 3 09:10:00 2023 GMT
Not After : Apr 4 09:10:00 2023 GMT
Subject: CN=3b933638b217eb7e075032017de74765bcf6bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cc:0f:21:a8:b4:2f:5f:04:f6:e2:19:0c:d6:
70:aa:50:b9:b5:dd:3e:94:99:8a:38:9a:0e:98:16:
b6:e9:a3:0a:55:e1:2f:25:2b:f1:ff:b6:0f:e1:0b:
9f:67:c7:bb:f6:c5:19:19:f1:8c:be:e7:b6:c8:1a:
40:16:25:1b:92:1a:9e:52:48:d8:52:48:2e:c2:8f:
2c:8f:2e:be:23:f9:e7:29:aa:94:b0:3e:bd:32:ac:
65:50:82:a1:b5:44:a8:6a:0b:4c:fd:a1:5f:29:6d:
cd:9a:5d:2d:60:8d:af:19:26:ee:9d:2f:d2:f1:1d:
30:df:bf:43:7a:c2:af:fc:6f:f5:1f:70:b2:b3:60:
0b:d8:3f:5e:ba:e7:d9:c4:64:33:20:b1:9d:37:cc:
7b:e2:24:ff:4e:2e:e6:da:de:3f:6b:ae:15:38:30:
20:02:4b:de:8e:92:a2:c5:84:a4:04:e5:25:1c:eb:
a1:dd:80:15:49:24:ac:95:aa:80:74:49:56:31:70:
1f:8b:f6:b2:d9:a9:05:e1:de:10:a4:4b:cc:55:16:
82:8f:8e:43:13:10:cd:b0:43:b1:c7:11:01:5b:bd:
57:af:7d:0c:58:d9:b1:f9:aa:9d:9a:9b:e2:d9:bd:
39:cc:27:9a:6f:23:51:8e:ee:3a:6e:4d:81:1e:6f:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:36:38:B2:17:EB:7E:07:50:32:01:7D:E7:47:65:BC:F6:BC:05
X509v3 Authority Key Identifier:
keyid:0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:66:83:c5:4a:47:e7:64:32:d6:0c:d2:45:49:d4:2a:10:bc:
46:0e:13:87:ab:c7:e7:d5:a2:f8:14:3e:85:08:cb:e5:38:4b:
33:9d:65:ea:fe:c6:14:d2:19:6e:01:31:fe:ee:9b:b1:72:85:
59:e4:25:a4:12:4c:99:b8:bc:12:73:ab:06:fb:77:4f:91:6a:
4c:5e:b8:19:fa:bd:44:86:12:c5:3b:82:cb:68:04:fc:63:84:
62:89:3a:c9:0f:e6:9c:22:f4:c6:f3:77:80:58:23:84:7c:8a:
d9:e4:a3:96:5e:ae:26:a3:1b:0d:d6:e2:3c:40:3f:03:e7:5e:
b8:9c:69:fd:3b:00:2e:67:b3:69:13:a2:f3:45:b2:f0:93:02:
bf:5a:91:8f:cb:ab:6e:47:31:a4:5a:c1:9d:52:2a:94:0a:c0:
ab:b5:62:36:bf:bf:99:c8:a4:72:8e:7e:60:65:ef:73:91:71:
b7:32:65:36:d8:e9:05:ec:69:22:d3:f5:0e:80:3e:39:73:81:
33:de:f4:22:ff:f9:0a:38:97:ec:e3:93:93:4c:f1:cf:30:58:
4c:77:73:be:d8:1d:e3:4d:58:da:81:7e:65:3a:2b:ce:49:6b:
d8:2e:09:a2:09:97:6c:cb:4d:95:04:34:00:69:37:3f:34:df:
5d:8d:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:53 2024 by rpki-client on console-ams.rpki-client.org