Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.mft
File: dWIOVmZRi7cAQJ-0CHqHXJnzchE.mft (raw, json)
Hash identifier: wvUWgE+h6TV2v4sR14BhVEjMzX0T8So3VNnkx+2TaZw=
Subject key identifier: 68:F8:A3:DB:5F:4B:38:99:9D:A8:85:EA:BA:9F:CE:AD:16:A5:AB:07
Authority key identifier: 75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
Certificate issuer: /CN=75620e5666518bb700409fb4087a875c99f37211
Certificate serial: 018BFFEB04B118BAB0B813D6D54957D3EABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.mft
Manifest number: 08CF
Signing time: Fri 24 Nov 2023 06:01:14 +0000
Manifest this update: Fri 24 Nov 2023 06:01:14 +0000
Manifest next update: Sat 25 Nov 2023 06:01:14 +0000
Files and hashes: 1: DFPFXta21as4NEpN2OPTGT43naQ.roa (hash: UCJHSyKjvf6td8B5r8ejqO4sQ4jj0S0dXq734H0NjBs=)
2: dWIOVmZRi7cAQJ-0CHqHXJnzchE.crl (hash: 0E/lYbTxcS4YJM7uI1Ss3PN9y3lhQ3xOLtHFV0Wnjng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:eb:04:b1:18:ba:b0:b8:13:d6:d5:49:57:d3:ea:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75620e5666518bb700409fb4087a875c99f37211
Validity
Not Before: Nov 24 06:01:14 2023 GMT
Not After : Nov 25 06:01:14 2023 GMT
Subject: CN=68f8a3db5f4b38999da885eaba9fcead16a5ab07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:20:65:38:21:de:6f:79:17:a1:0c:df:53:
a1:31:e3:b8:13:38:78:a0:fc:e8:b2:38:10:83:1b:
2b:4a:fd:36:62:10:77:0e:14:78:44:9a:fe:44:eb:
59:a2:07:ac:c0:6b:30:73:aa:52:66:c4:f7:15:0c:
4e:c4:35:7f:0b:1a:b1:8c:3c:6f:78:4c:df:d5:3d:
ef:8b:cd:ee:35:8e:37:df:1c:a0:d9:a0:d4:9f:63:
c6:2f:f3:0f:e1:f6:17:a1:5f:bb:24:93:13:dd:5f:
0a:8a:75:de:ab:1c:16:14:95:75:7e:72:83:3f:a7:
7a:91:42:f2:0c:5e:fa:80:a8:0a:16:36:e7:b7:4c:
5c:90:2f:59:71:0d:e9:56:10:fc:56:6d:2a:77:16:
c8:51:23:91:9c:31:74:88:c4:73:8d:c5:c2:ed:32:
84:98:2c:00:d6:c1:fd:76:f7:fa:3c:6a:33:84:4e:
10:c7:1c:1e:38:4c:3d:0f:73:88:b9:e4:9e:bd:1e:
6a:29:8a:e9:b1:e4:6a:fb:8b:7f:30:99:23:9e:e3:
80:5c:bf:65:ba:b8:e1:dc:c0:1b:98:09:58:fe:56:
60:3b:a7:63:90:4f:b8:53:34:c0:09:37:69:75:25:
ed:a7:a9:88:73:e4:e5:52:69:ae:f8:d1:d8:4a:99:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F8:A3:DB:5F:4B:38:99:9D:A8:85:EA:BA:9F:CE:AD:16:A5:AB:07
X509v3 Authority Key Identifier:
keyid:75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:77:33:1f:d7:f9:82:99:74:49:a8:a1:4e:89:00:72:59:18:
ac:5a:fd:16:98:40:40:43:a2:6c:8b:a0:47:dd:37:29:32:b6:
5e:91:8d:c9:47:b5:f5:96:fe:32:cd:89:50:22:8e:9d:62:ce:
b2:ee:c8:7f:ed:3a:4f:89:56:11:c9:22:ec:5e:04:93:9e:5b:
32:14:fd:e8:df:a2:ae:16:a0:a5:6a:8e:62:25:ff:30:28:1d:
2f:21:b8:20:81:9b:2b:04:e8:6c:37:e2:e6:ea:f1:ac:80:d1:
cc:59:5c:ba:e4:3b:08:7d:94:9e:81:53:25:cc:43:d6:de:93:
27:c7:39:6c:d3:91:d2:43:62:33:82:4e:52:cd:32:a8:19:12:
74:79:4f:55:22:5a:f5:51:26:d2:0a:42:35:b1:5e:6b:b0:0f:
5e:c1:8a:37:10:4f:7c:69:b9:e9:82:ff:c8:bf:80:99:92:65:
87:b8:3b:e3:da:63:31:38:d2:5f:1d:32:cb:d9:2e:52:0b:44:
03:7f:0e:15:f4:e4:31:8e:55:fd:7a:59:bf:05:4e:86:52:14:
ea:c8:b1:c4:a9:aa:10:c7:75:df:35:f6:7a:ee:e0:b3:3f:a9:
75:b3:67:85:30:c4:2e:bc:f2:3f:30:a9:a9:dd:84:f5:47:8f:
85:a3:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:19 2024 by rpki-client on console-fra.rpki-client.org