Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/r2UetqnmR5PTYF9CmDxDpSr4kXU.mft
File: r2UetqnmR5PTYF9CmDxDpSr4kXU.mft (raw, json)
Hash identifier: S5f9XIW45VoLqPcHtJWqomV3LVUbrbXMxX8dDRfkYgA=
Subject key identifier: 79:09:23:DD:F7:38:B5:26:3B:C3:72:82:2C:B9:24:C0:05:90:ED:BD
Authority key identifier: AF:65:1E:B6:A9:E6:47:93:D3:60:5F:42:98:3C:43:A5:2A:F8:91:75
Certificate issuer: /CN=af651eb6a9e64793d3605f42983c43a52af89175
Certificate serial: 018C686A3959DC02AFA505D59C9EC66477E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2UetqnmR5PTYF9CmDxDpSr4kXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/r2UetqnmR5PTYF9CmDxDpSr4kXU.mft
Manifest number: 0481
Signing time: Thu 14 Dec 2023 13:00:41 +0000
Manifest this update: Thu 14 Dec 2023 13:00:41 +0000
Manifest next update: Fri 15 Dec 2023 13:00:41 +0000
Files and hashes: 1: SQ6t3XMpPnEC5NDHMQACEmZKF-E.roa (hash: oIZJPvCZ3mBm640bPszi8gG32oVfQyL7iLGcOcoxw9k=)
2: r2UetqnmR5PTYF9CmDxDpSr4kXU.crl (hash: pUQgw9xHVJfcht+abVjOWSjLesOjUYB4zY84wBhSLVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:6a:39:59:dc:02:af:a5:05:d5:9c:9e:c6:64:77:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af651eb6a9e64793d3605f42983c43a52af89175
Validity
Not Before: Dec 14 13:00:41 2023 GMT
Not After : Dec 15 13:00:41 2023 GMT
Subject: CN=790923ddf738b5263bc372822cb924c00590edbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:24:48:fc:48:6e:01:1a:9f:82:c5:e9:c8:
00:a5:41:04:f1:47:e5:c0:47:5c:35:4c:18:83:f0:
31:78:e9:8d:48:aa:3c:e8:f8:b2:14:3f:0e:5b:7b:
c0:6d:52:c0:b7:70:22:a4:95:f7:ef:0e:18:df:28:
8c:20:54:9e:18:f5:b6:c7:a4:df:ba:59:0c:bd:ad:
43:56:c8:1a:61:d1:ec:7b:5c:a0:d0:eb:0c:cf:59:
3f:d0:e5:60:88:89:d1:63:74:19:7f:3f:f3:fa:4c:
23:da:8a:52:e0:23:06:ee:83:d0:ab:42:08:08:2c:
9e:4f:d9:6f:aa:64:8b:97:23:bb:7c:41:e3:0a:e4:
22:f6:50:44:ee:56:90:80:f1:4c:38:63:1d:cd:6f:
4b:e7:30:1a:78:8b:06:96:37:3b:a3:61:71:7e:6a:
36:04:ff:72:36:30:c2:90:92:f3:f2:d9:ca:06:00:
28:cf:9a:7a:d1:00:33:98:74:60:66:dc:62:ca:27:
b8:cc:99:74:75:e3:56:f2:0f:f7:c7:80:b2:56:ef:
00:f0:47:40:25:51:20:a8:d8:bf:c3:17:0f:06:c7:
1d:cc:95:42:f0:6a:df:6c:67:f0:61:75:70:9a:7b:
b3:02:ef:44:59:e8:42:3f:35:eb:73:ba:33:db:2d:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:23:DD:F7:38:B5:26:3B:C3:72:82:2C:B9:24:C0:05:90:ED:BD
X509v3 Authority Key Identifier:
keyid:AF:65:1E:B6:A9:E6:47:93:D3:60:5F:42:98:3C:43:A5:2A:F8:91:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2UetqnmR5PTYF9CmDxDpSr4kXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/r2UetqnmR5PTYF9CmDxDpSr4kXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f890ca-6309-410d-9525-b43891b28edc/1/r2UetqnmR5PTYF9CmDxDpSr4kXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0f:34:6e:e1:e0:13:6d:82:7b:d8:a9:a1:e4:b3:4b:d8:76:
c5:04:7c:af:4d:23:26:46:b3:35:13:44:80:1b:2b:52:c6:e1:
ad:33:0c:d1:2a:92:dd:3c:b3:88:ef:db:51:dc:06:9d:95:f2:
39:1b:5d:e8:3c:e8:d2:e0:39:f9:f2:12:aa:b8:cd:05:b8:da:
35:22:4f:6e:11:33:94:de:e6:75:39:cc:bf:f1:f7:ae:f3:79:
eb:a7:17:d1:07:80:9f:b0:4b:3e:55:82:11:e1:4b:46:e6:fd:
f3:3a:60:08:64:ea:52:df:a9:d7:d0:3f:dc:51:1b:f1:4b:67:
a5:5b:39:2f:6b:90:d9:9c:a7:39:ed:28:7a:cd:2f:24:ca:78:
82:ba:8a:7a:39:0f:08:c3:aa:df:e1:1a:97:89:ee:b5:35:b3:
7c:87:c9:bb:a5:0b:78:f0:4b:bd:9f:c9:55:da:7c:66:35:e6:
ed:4c:02:47:d8:6c:19:74:5d:83:74:98:ac:28:08:2b:13:0c:
a3:f9:12:dc:d5:3c:1c:ff:ae:b4:9d:b0:34:16:7d:ce:35:c6:
e4:37:c6:c3:75:21:fb:69:6e:5e:47:8b:39:28:bc:17:34:16:
a5:61:d7:03:b4:a5:37:07:3e:4c:5c:ee:c3:e3:b7:c5:a1:80:
8c:af:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:08 2025 by rpki-client