Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.mft
File: SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.mft (raw, json)
Hash identifier: W5FBzaRdbDJ5hOBydAiZ3tHvLZLqClBf5znnPCEvFgI=
Subject key identifier: 3C:86:77:9F:6E:64:B9:CD:4B:27:25:B7:56:20:43:3F:97:6A:DA:1F
Authority key identifier: 49:9F:94:C7:53:6F:68:EF:3E:80:53:CD:73:16:F3:E9:BD:54:D2:57
Certificate issuer: /CN=499f94c7536f68ef3e8053cd7316f3e9bd54d257
Certificate serial: 01878DA36D1085678B0CB540B5903D2107C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.mft
Manifest number: 0858
Signing time: Mon 17 Apr 2023 05:15:10 +0000
Manifest this update: Mon 17 Apr 2023 05:15:10 +0000
Manifest next update: Tue 18 Apr 2023 05:15:10 +0000
Files and hashes: 1: CdLVK4qrZZd9ZacNNas3p0hcNPQ.roa (hash: 4pymKLngHPJdk6cAxh3GBKvoYHRqFLXpIigPxUWPyv4=)
2: SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.crl (hash: zryk55gvTpfnErM3g2ZN3Bgk1QCe4wNRW4yfKp+F//M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8d:a3:6d:10:85:67:8b:0c:b5:40:b5:90:3d:21:07:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f94c7536f68ef3e8053cd7316f3e9bd54d257
Validity
Not Before: Apr 17 05:15:10 2023 GMT
Not After : Apr 18 05:15:10 2023 GMT
Subject: CN=3c86779f6e64b9cd4b2725b75620433f976ada1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:55:68:9c:03:e5:01:46:40:4d:b8:64:d0:
42:09:a4:b3:72:29:79:ca:83:c6:25:c5:cd:b1:88:
04:98:97:54:b2:dd:8f:8b:b1:6f:3a:79:3f:33:6b:
2b:77:26:16:13:a1:2a:d9:0a:f4:20:f1:4f:97:35:
b5:3c:ec:cb:76:37:9f:e2:e7:8e:a4:41:0b:29:ee:
f2:81:b8:3f:9a:61:02:1e:b6:d2:7c:35:72:8c:21:
e4:4e:ac:c9:2e:a8:c8:22:f2:81:46:21:de:87:2f:
42:c3:b3:4b:e3:7a:6e:c3:c6:91:e1:4b:77:f4:27:
55:1a:18:b0:84:f7:4f:9c:6d:ea:02:d0:cb:20:c5:
d4:44:38:5c:b3:eb:b0:39:c1:77:3c:5e:6d:4f:50:
cc:2b:9c:26:0f:d1:22:55:e1:1a:b8:00:9a:66:ca:
c2:d7:1c:be:8f:5d:fc:65:a6:0f:d8:e7:55:dd:a6:
7c:c7:23:34:42:14:53:65:ef:c4:43:80:0a:a1:68:
8c:9c:73:ab:1a:27:36:8b:c3:42:83:b9:80:03:ae:
85:c7:3b:7d:61:42:04:32:0b:e6:29:3f:9b:28:c8:
39:a4:84:24:b6:77:78:19:55:2e:7f:30:08:0c:cb:
af:d5:8e:86:dc:23:32:98:28:ee:44:8d:90:e3:7a:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:77:9F:6E:64:B9:CD:4B:27:25:B7:56:20:43:3F:97:6A:DA:1F
X509v3 Authority Key Identifier:
keyid:49:9F:94:C7:53:6F:68:EF:3E:80:53:CD:73:16:F3:E9:BD:54:D2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f72ee7-946f-4810-82f0-2cf4ded8e57e/1/SZ-Ux1NvaO8-gFPNcxbz6b1U0lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:a5:e6:0d:4d:f4:4d:1a:93:fc:fa:3c:9f:62:0b:85:30:
7d:0a:45:bf:b6:5d:3e:e6:11:ab:70:90:5a:74:bc:f2:40:a7:
77:3d:3b:dc:6a:ba:ef:70:a2:50:20:82:45:c6:71:25:74:e0:
21:c1:d9:8b:4c:1d:5c:2c:8f:c7:15:98:bc:84:28:22:0d:68:
d3:85:35:71:c3:03:1f:f2:2c:25:19:c9:05:67:5c:2b:68:70:
5c:96:bd:94:d7:64:f9:6a:e5:97:2a:b5:7c:79:ee:fc:c3:c5:
43:ac:f2:a2:85:80:bb:0f:9c:be:78:2b:a7:91:7f:12:85:69:
b2:b9:85:82:bb:04:bf:dd:80:8d:72:20:fb:a6:8f:85:02:fa:
58:0e:da:d0:8c:4e:15:37:1a:0c:56:d8:7a:7f:bb:5a:f4:51:
69:6f:90:b5:23:23:32:c3:20:89:d7:00:44:4b:c8:ba:28:97:
3c:81:d7:fc:8b:5d:93:51:0c:91:ce:8d:fe:a7:43:40:b2:5f:
d5:e6:d1:cb:7d:ea:8a:fa:16:e7:4f:3d:50:c1:b0:d9:72:fd:
8d:a2:7d:21:31:68:f9:bb:4b:06:5c:68:fb:61:99:89:61:c5:
5f:19:f3:a9:bd:c8:1c:25:af:5f:f7:12:11:59:ec:08:69:9f:
38:23:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org