Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b47712-a25d-49ad-b073-2052628c71f8/1/qK1eEKoPchcYFx9B5J9_Sf-Heaw.mft
File: qK1eEKoPchcYFx9B5J9_Sf-Heaw.mft (raw, json)
Hash identifier: T9tV1M4r21NbEZ+v5bpSU3Zn/vFBe+kqR/6QoWWjyws=
Subject key identifier: FE:FD:2E:69:50:9E:D6:64:86:53:B4:12:9D:D9:36:19:5E:E3:C8:E9
Authority key identifier: A8:AD:5E:10:AA:0F:72:17:18:17:1F:41:E4:9F:7F:49:FF:87:79:AC
Certificate issuer: /CN=a8ad5e10aa0f721718171f41e49f7f49ff8779ac
Certificate serial: 018E9CF7E361CFFD78B79A716BEE1E7206D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK1eEKoPchcYFx9B5J9_Sf-Heaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b47712-a25d-49ad-b073-2052628c71f8/1/qK1eEKoPchcYFx9B5J9_Sf-Heaw.mft
Manifest number: 10FB
Signing time: Tue 02 Apr 2024 04:01:14 +0000
Manifest this update: Tue 02 Apr 2024 04:01:14 +0000
Manifest next update: Wed 03 Apr 2024 04:01:14 +0000
Files and hashes: 1: qK1eEKoPchcYFx9B5J9_Sf-Heaw.crl (hash: cFpvEuvHjuulyRsEVLuTHb6ioaHh4DBx8Iv00B8hrKg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9c:f7:e3:61:cf:fd:78:b7:9a:71:6b:ee:1e:72:06:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ad5e10aa0f721718171f41e49f7f49ff8779ac
Validity
Not Before: Apr 2 04:01:14 2024 GMT
Not After : Apr 3 04:01:14 2024 GMT
Subject: CN=fefd2e69509ed6648653b4129dd936195ee3c8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:0e:d5:30:6f:61:c3:70:e1:ee:f4:37:68:
88:df:32:69:11:ea:89:ab:1a:3f:d2:f9:21:34:20:
79:19:08:0c:f7:1a:44:0b:94:77:b6:d8:01:e6:59:
c2:89:34:1d:ae:61:40:27:4b:99:ca:9a:c3:85:92:
e1:24:65:66:76:1e:53:4e:cf:99:43:1b:57:0e:44:
46:cc:eb:90:a7:a4:ca:b1:c3:56:63:31:86:96:29:
30:78:8f:71:08:a0:f6:c4:89:63:38:3d:5e:cb:da:
8b:7f:03:89:25:cc:60:11:d9:68:36:b4:58:ba:d4:
19:31:87:20:5b:9b:75:37:40:2d:7b:81:23:cd:d7:
85:11:fb:76:77:fe:81:b2:41:f5:fe:51:d7:45:23:
b2:73:a1:d4:51:f7:17:f3:ef:8a:d1:0c:8c:e2:6c:
bb:91:39:12:c5:8f:b4:a8:e2:a2:b6:97:47:18:7b:
41:45:38:3c:0c:a5:d5:ca:2b:6c:ad:1a:d6:fe:52:
97:84:12:f1:69:3d:82:77:56:ac:ce:50:47:d7:bf:
54:0d:bb:83:a6:49:29:e6:7b:da:9f:b9:8c:aa:90:
1b:6d:5c:74:c9:bd:58:8e:64:11:9a:c9:38:6e:9b:
25:b0:01:87:8c:52:f9:14:f3:31:75:5f:2b:e0:8d:
36:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FD:2E:69:50:9E:D6:64:86:53:B4:12:9D:D9:36:19:5E:E3:C8:E9
X509v3 Authority Key Identifier:
keyid:A8:AD:5E:10:AA:0F:72:17:18:17:1F:41:E4:9F:7F:49:FF:87:79:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK1eEKoPchcYFx9B5J9_Sf-Heaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b47712-a25d-49ad-b073-2052628c71f8/1/qK1eEKoPchcYFx9B5J9_Sf-Heaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b47712-a25d-49ad-b073-2052628c71f8/1/qK1eEKoPchcYFx9B5J9_Sf-Heaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:12:94:6a:28:a0:2f:13:60:47:2a:ed:82:43:a0:35:4b:a9:
f9:42:e1:65:42:2e:db:f2:26:2a:0c:f4:d6:f1:36:e9:87:55:
69:f3:86:2b:96:64:95:b4:af:eb:11:84:e0:ce:b4:b8:6b:9f:
7f:3a:c0:66:32:3e:1d:99:33:ef:37:21:ba:25:81:67:ef:07:
c7:b7:f5:99:30:65:b4:c5:01:6d:8e:0d:4a:72:04:76:23:b3:
d1:36:d1:e7:7a:72:d3:1e:80:4d:57:6c:d6:15:71:a7:f5:df:
ac:5b:a7:21:28:dd:13:13:55:6c:9e:3b:7f:59:92:9e:7e:2a:
73:b0:76:aa:d2:68:67:85:0e:fa:81:96:7d:6c:71:1d:d6:b6:
e2:68:a8:bd:36:d3:94:d8:de:25:be:c3:4e:65:0c:22:99:0d:
e6:c5:ef:d5:fc:a6:a4:b5:1f:1c:c9:76:4a:ac:0d:6a:39:30:
51:d5:b8:5a:e3:a3:ff:dd:99:6f:b4:b4:e1:e2:3b:62:f6:f7:
b4:52:62:38:50:87:d1:47:4c:38:2e:79:e9:5c:1b:6a:7a:7a:
12:d4:ff:32:8a:8b:f4:47:13:6b:e5:e9:8b:13:01:b6:df:2b:
a0:de:9e:24:86:8e:c2:7f:57:3a:12:d1:e5:f9:dd:38:67:b9:
e7:fd:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:11 2024 by rpki-client on console-ams.rpki-client.org