Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/801f55-ec8a-4a83-a21e-96a42efce978/1/nSGDQ0SnaBZoLSEaMUQEDl-FNNA.mft
File: nSGDQ0SnaBZoLSEaMUQEDl-FNNA.mft (raw, json)
Hash identifier: O26hmcppY4U4GFZh6+3XXgqc4DXEHVo7SNmOt/jZU20=
Subject key identifier: DD:5A:4F:0E:F1:0D:0D:31:32:0F:BC:45:C3:B5:E5:CE:47:60:E6:76
Authority key identifier: 9D:21:83:43:44:A7:68:16:68:2D:21:1A:31:44:04:0E:5F:85:34:D0
Certificate issuer: /CN=9d21834344a76816682d211a3144040e5f8534d0
Certificate serial: 018FC84DCAECF9B3BCB87B9AD603D83E75D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSGDQ0SnaBZoLSEaMUQEDl-FNNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/801f55-ec8a-4a83-a21e-96a42efce978/1/nSGDQ0SnaBZoLSEaMUQEDl-FNNA.mft
Manifest number: 10EA
Signing time: Thu 30 May 2024 07:01:32 +0000
Manifest this update: Thu 30 May 2024 07:01:32 +0000
Manifest next update: Fri 31 May 2024 07:01:32 +0000
Files and hashes: 1: Pe_pRqoRYjPgVcVIAMoJ4l2KqAo.roa (hash: UfDTsW7nyW624VDy+lyCAsAHj8531o3IFJI4g13RF8w=)
2: nSGDQ0SnaBZoLSEaMUQEDl-FNNA.crl (hash: sziID/BQSN7DW4ffKRctBIAMMMTFzTXZbRRMMYswxqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:4d:ca:ec:f9:b3:bc:b8:7b:9a:d6:03:d8:3e:75:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d21834344a76816682d211a3144040e5f8534d0
Validity
Not Before: May 30 07:01:32 2024 GMT
Not After : May 31 07:01:32 2024 GMT
Subject: CN=dd5a4f0ef10d0d31320fbc45c3b5e5ce4760e676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:f6:dc:90:17:03:99:c7:c5:88:69:55:aa:
50:e8:12:4e:e0:9e:3e:50:08:55:60:50:f7:b5:e5:
3d:72:eb:a3:09:ef:b4:48:f8:13:e0:f8:ba:5e:e3:
90:5c:5c:e3:dc:4e:78:45:38:c5:7c:44:c7:09:9f:
ab:1f:df:cf:c6:93:01:7d:be:8b:d5:73:f7:7b:e3:
29:13:0f:e8:4d:19:37:e7:d3:75:2c:42:bf:16:c5:
24:90:c3:0f:f3:42:ea:06:4e:b7:79:54:c2:84:81:
51:73:d1:5e:c4:ec:16:af:61:76:b6:b9:c3:74:97:
14:d0:c2:58:48:ca:db:a9:86:ff:82:74:c1:64:e2:
6c:de:2a:7a:c7:d5:1c:96:c7:e2:c7:82:0a:1d:68:
4b:77:be:d0:8b:8f:1c:a6:41:9c:56:1b:8b:0f:6a:
8e:1a:93:ac:6e:18:4c:a7:6b:64:18:c6:12:3a:75:
c7:24:96:46:f1:a8:d4:aa:16:9f:06:bd:52:48:ec:
b2:71:61:4e:71:eb:0a:78:c7:80:a3:94:0a:63:02:
9e:2d:13:98:b2:4b:db:08:24:f4:21:0c:0c:7f:b1:
2f:af:d8:59:1e:ce:73:ed:bc:02:b2:89:1c:3e:da:
c5:97:8c:98:4d:5d:c0:c5:42:f6:85:2e:2c:c6:a3:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5A:4F:0E:F1:0D:0D:31:32:0F:BC:45:C3:B5:E5:CE:47:60:E6:76
X509v3 Authority Key Identifier:
keyid:9D:21:83:43:44:A7:68:16:68:2D:21:1A:31:44:04:0E:5F:85:34:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSGDQ0SnaBZoLSEaMUQEDl-FNNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/801f55-ec8a-4a83-a21e-96a42efce978/1/nSGDQ0SnaBZoLSEaMUQEDl-FNNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/801f55-ec8a-4a83-a21e-96a42efce978/1/nSGDQ0SnaBZoLSEaMUQEDl-FNNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:05:aa:23:7b:f3:58:a1:53:a9:5a:63:0f:21:83:b4:6e:92:
b4:f5:05:2d:c2:fd:fd:85:24:86:75:40:dd:74:ed:21:36:b0:
10:ae:e4:52:4a:b9:86:03:a6:fd:1f:a7:ba:b5:24:73:97:0a:
2b:a9:0b:38:b7:69:23:c2:1f:f2:2c:49:4f:59:1d:0a:fe:b0:
50:8b:86:f3:99:fd:42:82:e9:85:75:90:10:3f:f6:b7:e0:97:
2a:c4:78:c1:2d:d0:d0:d2:31:15:37:0b:a5:e8:75:7c:21:1d:
aa:a9:7b:28:fc:da:bb:b6:2a:97:8d:c5:88:57:c3:60:53:39:
f5:e9:5e:be:cf:3f:7f:52:b3:aa:b6:9f:84:30:46:9d:39:44:
1c:99:13:5f:e4:2a:9a:77:d4:f8:35:46:d8:ff:91:bd:06:aa:
42:be:e2:a0:c2:09:b0:b7:77:5c:05:06:f1:13:17:b2:af:0c:
14:5a:34:33:6e:ea:0b:58:73:c8:f5:24:36:a5:c4:a4:6b:52:
52:1e:41:7c:71:87:b9:a2:3c:0d:e0:cd:9b:75:57:95:34:11:
cf:fa:57:26:30:ab:ab:6f:d8:08:dc:61:a0:37:62:0d:92:94:
58:30:e1:4a:17:e6:1d:8a:05:46:d9:a1:5c:e6:18:1d:27:6b:
90:94:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org