Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.mft
File: s3k9sWAZvnNxetsj1uUcTfDdELE.mft (raw, json)
Hash identifier: TCWvB6G0yP0rHkc9yXWIn5PAk1DR603T2xcUoCOnv+k=
Subject key identifier: 62:BF:E6:FA:71:44:F0:63:6E:15:76:A7:36:98:2B:B8:F4:A8:40:A0
Authority key identifier: B3:79:3D:B1:60:19:BE:73:71:7A:DB:23:D6:E5:1C:4D:F0:DD:10:B1
Certificate issuer: /CN=b3793db16019be73717adb23d6e51c4df0dd10b1
Certificate serial: 018CAAB939DA1BF1EFF48FC4AAFB9761BBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3k9sWAZvnNxetsj1uUcTfDdELE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.mft
Manifest number: 0929
Signing time: Wed 27 Dec 2023 10:01:54 +0000
Manifest this update: Wed 27 Dec 2023 10:01:54 +0000
Manifest next update: Thu 28 Dec 2023 10:01:54 +0000
Files and hashes: 1: 1HbF1EFYT8lVKKagEEw5zeVG6MI.roa (hash: +1f/aliLiX7qUKfNIoZqWM/Ff/FxZaqKzThIQcL3VG8=)
2: s3k9sWAZvnNxetsj1uUcTfDdELE.crl (hash: hEvWTt/4aO1aVy2bEqIZqNSYUReZjF0tE64iI+RGzDQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:b9:39:da:1b:f1:ef:f4:8f:c4:aa:fb:97:61:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3793db16019be73717adb23d6e51c4df0dd10b1
Validity
Not Before: Dec 27 10:01:54 2023 GMT
Not After : Dec 28 10:01:54 2023 GMT
Subject: CN=62bfe6fa7144f0636e1576a736982bb8f4a840a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:80:42:f8:40:95:8e:bd:79:72:6d:94:0e:47:
31:cd:8d:19:16:a7:17:df:0a:a5:05:d4:57:da:42:
50:30:b1:da:0d:23:92:82:a9:c4:af:90:d9:0e:c5:
ac:4d:07:ae:29:1d:8a:f9:97:6d:10:3d:27:ec:1a:
f9:79:09:d9:bf:41:cd:29:8c:63:69:f7:23:cd:6e:
96:74:f1:57:43:08:44:bb:99:91:c0:64:ee:09:f7:
e6:6f:c9:18:45:c7:7c:6a:b7:c8:9f:4c:43:9a:2f:
b7:d1:a1:ad:ce:bb:b5:cb:06:88:84:e6:84:7e:b6:
bf:b2:72:f0:d2:9a:b0:3e:1c:c3:54:e5:c2:83:25:
a5:32:23:70:25:a3:04:91:3a:cd:e9:ef:57:42:2e:
3e:a4:f6:67:05:10:29:c3:bf:87:38:96:f3:9d:72:
73:68:7e:d9:25:1e:c0:e6:80:36:92:3d:a8:ce:3f:
ff:52:49:8e:fc:71:50:2f:df:7a:6b:fb:83:ce:1f:
3e:c1:e6:36:88:5f:2e:88:9b:09:ed:de:66:1b:2e:
8b:f3:01:6a:58:25:64:33:eb:a7:63:81:84:79:99:
b3:27:c2:db:e1:54:1b:30:85:8b:0d:77:45:c4:ce:
47:2b:4f:44:f1:c4:34:91:22:8d:29:42:73:33:28:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BF:E6:FA:71:44:F0:63:6E:15:76:A7:36:98:2B:B8:F4:A8:40:A0
X509v3 Authority Key Identifier:
keyid:B3:79:3D:B1:60:19:BE:73:71:7A:DB:23:D6:E5:1C:4D:F0:DD:10:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3k9sWAZvnNxetsj1uUcTfDdELE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/64fa3c-aed2-48cd-934b-9614d8039f8e/1/s3k9sWAZvnNxetsj1uUcTfDdELE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:31:93:20:bd:39:c1:be:5c:78:5f:36:48:3a:a7:85:d5:ca:
71:ef:dc:38:65:b7:de:b7:62:e9:7b:2e:ce:3e:57:56:01:d5:
b6:b0:c2:bb:9b:45:8f:6b:5b:b6:1f:cd:58:a8:8e:d1:1a:92:
ae:a0:a7:ee:4d:b3:f1:ef:7b:fb:d5:d9:63:f1:31:bc:e0:db:
21:57:86:31:5b:6c:81:7b:2a:2b:10:91:72:b4:6d:6b:66:e4:
fe:b8:f8:9e:7b:ca:54:3e:cd:02:e1:b8:eb:ab:8f:ea:2e:81:
a6:56:32:9b:1d:5b:49:6d:1e:05:03:98:94:1e:c0:28:4f:f3:
1b:c0:46:a1:6c:8b:59:04:6c:2a:28:c5:67:c3:01:27:cd:b7:
dd:fd:a8:28:e1:e5:d7:28:a7:e1:a9:cb:10:44:70:44:14:fd:
f4:5b:11:a8:23:4a:fc:cd:e3:9e:2b:3a:cb:0f:ee:c2:7e:5c:
7c:dc:27:4b:eb:4b:57:3b:bc:fe:20:3e:a8:b6:2a:4d:49:67:
5e:ee:8b:64:c0:e7:b0:1b:42:60:9c:2d:b9:3f:92:d6:22:a6:
52:b5:a2:18:2e:34:ac:62:51:b2:56:0f:54:d2:a0:c1:cb:d4:
94:d9:0d:e9:12:d3:8b:1c:5e:2d:f6:40:29:84:75:7d:d9:92:
b8:b2:83:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:07 2024 by rpki-client on console-ams.rpki-client.org