Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.mft
File: 42gRbGhJIoIQkFEiAW1yIJEZe-U.mft (raw, json)
Hash identifier: yQENZmx6LgxaRlpvB9QhP6WeOwU8kHrUJ8hPSRPfNZM=
Subject key identifier: 7E:9A:78:66:23:DA:69:82:A2:36:C4:6D:DF:CD:95:A9:C0:72:3F:FD
Authority key identifier: E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
Certificate issuer: /CN=e368116c6849228210905122016d722091197be5
Certificate serial: 018AEEFA018F81B4BAF7E7722F7061EDB5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.mft
Manifest number: 0881
Signing time: Mon 02 Oct 2023 06:01:16 +0000
Manifest this update: Mon 02 Oct 2023 06:01:16 +0000
Manifest next update: Tue 03 Oct 2023 06:01:16 +0000
Files and hashes: 1: 42gRbGhJIoIQkFEiAW1yIJEZe-U.crl (hash: kin+m4EAp/Za7+iiSxQXuPYQvEx2vSSOas3v3rFArhA=)
2: 8DUrSjSP9f-NCrdqaNZIJ_lC6Ps.roa (hash: 7citmmcOIvhUo2cxrBzeNNh2vjLrQS+MC9iG3PZD2r4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:fa:01:8f:81:b4:ba:f7:e7:72:2f:70:61:ed:b5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e368116c6849228210905122016d722091197be5
Validity
Not Before: Oct 2 06:01:16 2023 GMT
Not After : Oct 3 06:01:16 2023 GMT
Subject: CN=7e9a786623da6982a236c46ddfcd95a9c0723ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:99:b8:2e:6b:04:e5:aa:da:b9:cd:7a:34:
cc:8b:68:36:cd:92:ce:f2:38:fb:59:20:69:1f:45:
07:2c:ad:c2:ce:87:f2:1f:65:ea:f9:d1:93:5b:1f:
12:48:95:a3:50:e3:e2:38:d6:cc:0b:15:6d:2b:f9:
70:90:0c:68:f3:5f:4d:5a:5e:e9:33:4a:cf:23:4e:
69:27:ab:b0:e6:ac:17:16:41:44:4a:22:fe:52:ab:
b1:3f:fb:81:a1:ec:ff:c6:9b:6d:28:53:6e:2a:94:
89:81:9d:5d:3c:81:51:b9:ca:d0:68:e6:9b:71:53:
d7:ad:58:47:57:76:09:20:8f:ad:b0:90:d0:16:ee:
ec:1f:65:83:cd:df:8c:6f:18:06:dd:bd:18:ab:6c:
95:e5:cc:11:04:47:ab:7d:d2:5e:b4:b6:14:cc:62:
69:02:c5:87:71:15:8e:bd:bb:71:73:d2:3a:55:74:
cb:69:69:a4:88:1e:4b:ba:f5:19:9c:23:ee:10:16:
5a:f4:9a:88:ec:75:cd:3f:67:b0:1e:f5:2c:64:90:
0f:97:4f:11:d9:c5:9e:75:54:88:d8:35:11:0b:b4:
c7:0b:e8:8b:0c:68:1d:fa:33:e8:03:93:61:11:3c:
e6:ca:ae:11:5f:ec:3a:57:6e:de:62:58:19:da:c5:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9A:78:66:23:DA:69:82:A2:36:C4:6D:DF:CD:95:A9:C0:72:3F:FD
X509v3 Authority Key Identifier:
keyid:E3:68:11:6C:68:49:22:82:10:90:51:22:01:6D:72:20:91:19:7B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42gRbGhJIoIQkFEiAW1yIJEZe-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/87f152-5f33-45c9-8511-fefcb4f3b4b4/1/42gRbGhJIoIQkFEiAW1yIJEZe-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:be:01:15:42:ef:8e:56:32:58:ac:64:57:dc:cd:9f:6d:91:
20:7f:6c:8f:06:89:11:fe:96:ad:80:32:cc:ed:1a:27:3c:58:
72:a7:92:23:20:86:e0:62:92:7a:42:6d:19:82:50:27:b4:bb:
d1:8a:59:02:d2:99:0d:12:d2:c5:20:fe:b4:cd:c9:99:fc:82:
b1:19:79:a1:4b:fb:47:8f:08:5b:03:d1:6b:e6:c4:b0:d4:48:
66:d6:92:68:fc:1c:a4:aa:88:08:c9:c7:ea:8e:a7:b8:99:28:
0a:c1:39:29:f6:72:c6:b9:4f:0b:7d:d0:6e:53:68:66:c0:c5:
e4:7a:5d:c0:c8:d4:e7:55:22:69:c3:ae:ec:54:1b:07:68:c5:
81:0b:16:74:a5:ea:96:3e:c9:86:6b:b1:e0:fa:34:81:44:bb:
33:ef:81:e0:85:15:8d:39:b9:f9:c6:f0:6b:f2:61:3b:9f:ca:
59:99:9e:f4:a3:ff:34:74:20:c5:b1:b0:42:ae:b4:5e:a1:44:
29:22:f5:93:45:60:4a:8e:75:db:e2:63:9d:72:9c:36:27:b6:
cd:93:49:ea:69:23:96:05:0c:e1:8c:66:ca:0d:82:bb:ff:70:
12:8d:c2:e9:fc:c7:34:f1:7e:36:9b:83:90:98:fc:f7:b4:ea:
23:98:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 07:03:22 2023 by rpki-client on console-fra.rpki-client.org