Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.mft
File: UCD71VfD5YlMMt2AHw76SDvRTZo.mft (raw, json)
Hash identifier: uhNcbcw04CsyGQ8vxfADEmLq4mDdO2tsiN1Lg9H7nNQ=
Subject key identifier: CF:FC:A2:B2:39:5A:CE:6C:4F:22:14:38:74:78:70:ED:26:C5:38:E5
Authority key identifier: 50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
Certificate issuer: /CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
Certificate serial: 018C333383222F691DE9AA2C9ECEFF1A200A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.mft
Manifest number: 0676
Signing time: Mon 04 Dec 2023 05:01:02 +0000
Manifest this update: Mon 04 Dec 2023 05:01:02 +0000
Manifest next update: Tue 05 Dec 2023 05:01:02 +0000
Files and hashes: 1: UCD71VfD5YlMMt2AHw76SDvRTZo.crl (hash: qSgeHqfQ2DOWHPVaiPV96T7wwVyUKIzg8vEr/L95qO8=)
2: eSv8_LUzKe_NjGGRagcyebZDwIg.roa (hash: W64/cq0SVg3GOqp6ewdhndDVrl5sR8evn8zl+0xSPvc=)
3: n3mq16F8vqcT4qeYtHFuehenhAw.roa (hash: U8M79AXA/++7BQf5kvN7hEbXWF4Rwj+db0L6gmmBWgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:33:83:22:2f:69:1d:e9:aa:2c:9e:ce:ff:1a:20:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5020fbd557c3e5894c32dd801f0efa483bd14d9a
Validity
Not Before: Dec 4 05:01:02 2023 GMT
Not After : Dec 5 05:01:02 2023 GMT
Subject: CN=cffca2b2395ace6c4f221438747870ed26c538e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:bf:71:ac:23:f6:a3:18:50:44:d4:c5:46:
ba:da:09:72:8d:e9:81:7e:4d:5f:7f:6b:89:65:70:
f0:08:59:16:7f:2a:1c:aa:e2:ea:b0:b6:1b:81:61:
f4:14:cb:79:74:37:41:95:62:2b:6f:15:17:28:fc:
5b:c1:1a:66:23:8d:03:60:30:6c:4e:5a:c6:cf:f6:
5d:ec:22:22:51:ab:82:83:f5:5d:c5:7b:6f:d3:cf:
90:f0:d9:88:ac:73:27:8b:f7:d8:d5:36:a9:36:d3:
62:29:04:c0:ae:f7:8b:08:50:ab:54:45:e9:8a:e1:
29:d6:70:aa:90:67:9a:68:01:71:e7:a8:91:c7:49:
a8:18:f7:ad:8f:2a:4e:2b:b0:63:54:48:e6:58:8d:
2f:17:8a:32:bb:c3:28:e8:9f:c9:2c:b1:9e:34:78:
df:17:ec:fd:69:93:3c:1c:56:f5:5a:92:cd:1a:1e:
de:64:0e:00:e4:3e:df:cc:6e:41:4f:c2:eb:5e:db:
1e:aa:0a:60:c0:63:c5:60:50:04:5a:ea:d9:bf:9a:
36:4d:80:3d:25:02:e0:ed:38:c4:79:76:ce:bb:14:
00:d2:21:52:98:43:ed:0c:8b:bb:a3:1e:0a:6c:33:
7a:fb:1d:03:89:fd:71:15:73:76:89:54:88:71:2e:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:A2:B2:39:5A:CE:6C:4F:22:14:38:74:78:70:ED:26:C5:38:E5
X509v3 Authority Key Identifier:
keyid:50:20:FB:D5:57:C3:E5:89:4C:32:DD:80:1F:0E:FA:48:3B:D1:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCD71VfD5YlMMt2AHw76SDvRTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f922b3-fa15-4ce9-8fec-4cf0909be7f8/1/UCD71VfD5YlMMt2AHw76SDvRTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:34:83:7b:3a:f3:80:5a:9e:f9:70:63:93:65:7e:12:e3:93:
79:50:a5:0a:26:76:8f:a5:90:ef:d4:e1:fe:6e:f5:1e:8c:bd:
18:ca:ec:eb:b8:3e:51:ca:5e:dd:df:26:d9:d2:df:ce:ff:c1:
08:bb:88:22:ac:bb:9e:d4:82:91:22:aa:b1:8f:29:cd:d3:75:
e4:bb:b0:f3:38:04:b8:a4:12:bf:38:c3:ff:ae:9d:a5:59:7b:
05:7c:b7:a0:32:96:19:d0:de:ef:6d:ef:c4:ec:65:c7:1d:ab:
27:b1:63:33:b2:77:4b:2f:03:fc:61:b0:93:c1:d9:3e:31:d9:
42:45:68:d7:3e:44:0c:0c:7d:6e:6e:5a:30:f8:24:7d:56:81:
4a:1e:40:86:a7:63:43:00:e3:1f:c1:c9:ff:7f:92:41:ac:1d:
02:b3:a0:44:28:1d:6a:9b:fc:34:16:af:f1:46:fb:67:e5:13:
d9:d9:d1:a4:89:27:00:8e:b5:ad:55:5e:ed:88:a7:e6:f1:98:
56:40:89:fa:2a:2b:a5:df:62:d6:09:a9:2e:83:c7:a9:01:dc:
54:8a:d9:75:ba:86:7f:ec:54:d6:11:3c:d8:4a:8e:d9:b9:27:
b2:f7:08:c1:88:35:f1:27:d7:dd:4a:2a:63:0c:88:d2:bd:b0:
38:29:35:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:13 2024 by rpki-client on console-ams.rpki-client.org