Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/oSNLuIjsVzT1eXR0VTYxce77GkM.mft
File: oSNLuIjsVzT1eXR0VTYxce77GkM.mft (raw, json)
Hash identifier: Gwl0dUFQDhbgK0yoCdyyG1mEPEz1UvNWRXHIY002tzE=
Subject key identifier: 5F:C0:E9:BE:60:67:EB:08:6A:FB:FA:13:B4:9D:2A:74:9E:70:E3:FA
Authority key identifier: A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
Certificate issuer: /CN=a1234bb888ec5734f579747455363171eefb1a43
Certificate serial: 018BFA8D3C28AD0A410170B65F24ED35C23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/oSNLuIjsVzT1eXR0VTYxce77GkM.mft
Manifest number: 0858
Signing time: Thu 23 Nov 2023 05:00:41 +0000
Manifest this update: Thu 23 Nov 2023 05:00:41 +0000
Manifest next update: Fri 24 Nov 2023 05:00:41 +0000
Files and hashes: 1: oSNLuIjsVzT1eXR0VTYxce77GkM.crl (hash: 5xlngD3jfREi+Bn2U+E081k6pze5FGWHBJPSFO0Yl5Y=)
2: xFh2LkOMFveWfom8hzBgs1_u9Y0.roa (hash: sAIZxbCWZ627yVleGlLas7E+j58E889d2ZlwuL1gK8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:8d:3c:28:ad:0a:41:01:70:b6:5f:24:ed:35:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1234bb888ec5734f579747455363171eefb1a43
Validity
Not Before: Nov 23 05:00:41 2023 GMT
Not After : Nov 24 05:00:41 2023 GMT
Subject: CN=5fc0e9be6067eb086afbfa13b49d2a749e70e3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:e7:3c:76:aa:e1:81:93:14:b6:7b:00:0e:
5a:c9:5f:91:c0:27:04:15:54:2c:2d:ae:d2:cd:56:
81:64:af:d8:cb:39:48:58:d8:c9:d4:72:c9:a3:b9:
30:df:a0:cf:61:ce:f2:51:e9:ed:c3:f8:c3:52:b3:
7c:c2:fd:5c:61:0c:75:71:24:43:04:de:ae:48:1d:
f1:96:25:ac:30:1b:9a:4e:2d:35:6d:1e:17:1a:5d:
5d:1e:38:76:71:3e:0f:88:13:f0:23:35:e6:0c:69:
94:03:4d:f7:fc:af:59:79:a7:e0:39:2f:49:de:01:
41:1a:80:be:b5:4c:18:bf:f9:4a:aa:c3:9d:6e:b4:
4b:b6:1e:1c:25:01:e7:d8:6b:37:01:28:79:7e:ce:
fd:c0:42:c2:53:ed:d2:16:18:72:85:67:0e:7a:73:
f9:3d:22:b0:e1:fd:d6:8d:c1:50:cc:d8:09:e6:4e:
ee:77:40:ab:1d:2a:25:72:5d:f8:69:05:76:b1:1a:
b6:4a:6f:9a:99:1d:74:47:83:37:80:ed:76:38:28:
49:6a:f6:63:f9:00:03:60:fb:c4:c3:06:85:d7:1d:
98:6b:6f:8f:54:ee:51:c8:3d:12:95:c1:f8:ca:bd:
58:b8:ce:06:ad:81:d0:9f:61:92:9f:b4:2e:e3:80:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:E9:BE:60:67:EB:08:6A:FB:FA:13:B4:9D:2A:74:9E:70:E3:FA
X509v3 Authority Key Identifier:
keyid:A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/oSNLuIjsVzT1eXR0VTYxce77GkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/oSNLuIjsVzT1eXR0VTYxce77GkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7c:00:03:08:2d:e6:e7:cc:54:4d:40:32:91:45:e0:ff:89:
0f:79:bb:93:c4:fe:cf:5a:93:57:62:d3:c5:a7:ac:96:51:65:
0d:31:7b:9b:7b:ff:83:f5:ba:31:3e:a9:6a:62:86:fa:57:10:
7a:9f:c9:26:1c:18:24:a8:6e:71:f8:e3:e1:54:41:60:96:35:
8a:7e:db:fc:65:75:c7:d0:74:47:16:b0:e8:3f:74:6c:b1:f6:
62:17:99:71:bb:00:9b:7b:aa:44:83:e8:f6:22:17:dc:26:16:
21:0e:7b:02:0f:3a:fc:c9:c7:e4:5a:55:4c:49:72:1d:74:dc:
c1:c4:47:6b:4a:bf:be:a2:ae:fa:f3:2e:3d:85:0b:b9:ee:10:
22:0d:96:1d:77:51:53:f1:65:55:7b:01:10:65:9c:3a:24:80:
21:42:c9:1c:d8:64:60:94:e4:9e:64:05:97:e8:51:15:c4:f0:
c8:99:09:a1:1d:39:06:d0:a4:c0:0e:b2:0e:eb:d7:01:b2:41:
66:29:63:aa:2e:2e:eb:91:f5:4a:02:8c:93:8b:11:ff:fa:f5:
ec:b1:2d:b7:40:45:d8:15:f0:12:7c:95:9a:34:2d:af:66:99:
02:75:1b:3e:02:fa:db:c8:8f:0a:a8:58:44:91:b6:43:18:20:
09:81:32:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 14:39:32 2023 by rpki-client on console-fra.rpki-client.org