Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/nyKxytczPTS7093epLoHsaggRCY.mft
File: nyKxytczPTS7093epLoHsaggRCY.mft (raw, json)
Hash identifier: WqP91zop3vjWryjsIAO1n+KLUhLLd4Axrfq74gdgFXI=
Subject key identifier: 03:A5:27:1B:22:1A:FD:69:CC:A9:C2:14:46:13:7C:0C:A2:27:9E:DC
Authority key identifier: 9F:22:B1:CA:D7:33:3D:34:BB:D3:DD:DE:A4:BA:07:B1:A8:20:44:26
Certificate issuer: /CN=9f22b1cad7333d34bbd3dddea4ba07b1a8204426
Certificate serial: 018634FC4D840E218095FB67E3E71711C2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyKxytczPTS7093epLoHsaggRCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/nyKxytczPTS7093epLoHsaggRCY.mft
Manifest number: 04B1
Signing time: Thu 09 Feb 2023 07:03:15 +0000
Manifest this update: Thu 09 Feb 2023 07:03:15 +0000
Manifest next update: Fri 10 Feb 2023 07:03:15 +0000
Files and hashes: 1: 0jcqKJJL6lo-lQHgM_GyX4Bc7Ew.roa (hash: 7iAx7Iiu+hCFZ7Xv0I8etSr567PDF5d4pqwP8KCFiSI=)
2: NN7ujKAN2K23ilY7Nh23Li46Njs.roa (hash: iP7A2+EP6Sh733Goq3MOcYg1B+EuzJTVHeU6rUO2Wzc=)
3: nyKxytczPTS7093epLoHsaggRCY.crl (hash: A7D5vphZ92ZYphw0nHV8mKe6iO5acH58tN7sHwAmnOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:34:fc:4d:84:0e:21:80:95:fb:67:e3:e7:17:11:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f22b1cad7333d34bbd3dddea4ba07b1a8204426
Validity
Not Before: Feb 9 07:03:15 2023 GMT
Not After : Feb 10 07:03:15 2023 GMT
Subject: CN=03a5271b221afd69cca9c21446137c0ca2279edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:00:11:6a:ee:0a:54:41:2f:b5:32:1f:2e:
3d:af:e9:6e:c8:c0:45:3b:40:f5:1b:07:dc:18:5f:
d8:4a:ea:c4:6c:f5:d4:22:c3:ce:b6:50:6a:77:d0:
b2:3c:22:44:23:e5:3b:9c:90:ee:ed:5b:50:e8:b8:
fb:af:db:3f:31:71:68:c3:75:e9:29:ed:4d:2c:10:
d9:33:bc:57:49:4e:00:da:36:35:3c:04:10:de:9e:
3d:ef:89:3a:c9:f7:26:de:b8:ba:42:16:da:7f:9f:
6d:40:fb:bf:28:a6:50:3c:9b:e6:1a:b1:06:90:8a:
c1:9c:a2:98:cc:8f:4c:c5:ec:be:d3:f6:9d:48:62:
93:5f:89:46:eb:fa:27:f8:0e:e8:ee:60:27:3a:29:
a5:e3:fc:42:4e:51:62:de:4c:34:10:77:10:49:df:
c2:9d:f1:86:b8:f5:88:06:ff:13:dc:4d:bc:f7:41:
82:00:43:03:7a:56:39:72:51:58:9a:0f:1b:ec:da:
90:01:a2:e0:6a:bc:47:fe:37:5c:d8:8e:a1:f3:cf:
32:14:6f:fa:e0:f8:12:5b:64:48:75:c3:97:1a:e9:
4f:88:dc:a8:c3:b7:ad:ff:0a:1d:9b:a8:5d:b0:ab:
b4:d3:80:21:fc:33:14:e1:96:e3:b1:b4:91:3b:ac:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:27:1B:22:1A:FD:69:CC:A9:C2:14:46:13:7C:0C:A2:27:9E:DC
X509v3 Authority Key Identifier:
keyid:9F:22:B1:CA:D7:33:3D:34:BB:D3:DD:DE:A4:BA:07:B1:A8:20:44:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyKxytczPTS7093epLoHsaggRCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/nyKxytczPTS7093epLoHsaggRCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/85737e-5c58-4e0f-afef-88075d1f8dbc/1/nyKxytczPTS7093epLoHsaggRCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7d:ea:15:9f:b9:5a:ca:d0:6c:21:93:0e:01:8c:70:59:77:
c1:55:90:29:26:75:a0:a8:07:93:0b:6c:6f:1c:76:67:62:6b:
9b:03:a3:2d:4f:87:be:bd:0f:cd:60:25:0b:c6:27:48:26:83:
c6:cf:c4:06:e6:d9:c2:23:63:a1:3c:45:3e:f1:7e:68:99:df:
f1:e2:c5:77:a8:a4:40:68:d2:07:48:fc:de:43:ee:a8:73:2e:
34:c4:d9:4c:4c:61:06:01:de:75:b7:e5:12:e3:a5:f2:3e:0f:
7d:d4:f9:54:1a:de:a4:a3:cb:dc:c2:c7:83:0b:da:b4:48:82:
c1:65:5a:61:a3:a3:a4:4e:7d:c1:de:71:f6:23:15:8d:cd:a6:
96:2f:10:aa:65:ae:a1:3a:4f:7e:cb:bd:40:0e:7a:a0:64:8c:
85:52:83:40:a1:ba:50:5a:95:33:0f:2e:33:ac:3f:76:79:60:
79:1a:40:ec:a3:7d:00:34:8d:bf:35:55:62:2b:63:2c:9f:77:
de:5e:fe:f2:d2:47:26:02:e5:0e:e7:66:57:85:56:19:25:f6:
d5:6d:da:3a:cf:67:e1:df:31:69:c0:e5:4e:5f:ed:fb:b9:47:
9d:12:7b:27:f9:70:0f:52:ef:af:51:7b:ad:e8:78:86:d0:2d:
0e:47:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:27 2024 by rpki-client on console-fra.rpki-client.org