Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.mft
File: ypqFxVL8xgg5BZ_q2wUZxlwb31Q.mft (raw, json)
Hash identifier: ZELdJgYq6q5nN8sgib/cMHwZBkCopDU//K4W7j7mvyo=
Subject key identifier: 57:34:19:F6:ED:41:D9:63:03:7B:D0:74:8E:34:0E:C7:9D:CB:61:2E
Authority key identifier: CA:9A:85:C5:52:FC:C6:08:39:05:9F:EA:DB:05:19:C6:5C:1B:DF:54
Certificate issuer: /CN=ca9a85c552fcc60839059feadb0519c65c1bdf54
Certificate serial: 018CA9DCC87E5E974930D372BA20AA9EF7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.mft
Manifest number: 0862
Signing time: Wed 27 Dec 2023 06:01:07 +0000
Manifest this update: Wed 27 Dec 2023 06:01:07 +0000
Manifest next update: Thu 28 Dec 2023 06:01:07 +0000
Files and hashes: 1: stHoot9Ng7hC0x9jsUNCl2jKc9I.roa (hash: +1m1BG/bvLyvLvWXR76mTrON/Ir3Jm2erh0iksCNZpY=)
2: ypqFxVL8xgg5BZ_q2wUZxlwb31Q.crl (hash: e/QuvURLEasj9SCF+Z0tHIk4ySx5V8UaBdUwGofZs+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:dc:c8:7e:5e:97:49:30:d3:72:ba:20:aa:9e:f7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9a85c552fcc60839059feadb0519c65c1bdf54
Validity
Not Before: Dec 27 06:01:07 2023 GMT
Not After : Dec 28 06:01:07 2023 GMT
Subject: CN=573419f6ed41d963037bd0748e340ec79dcb612e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:c4:55:53:14:6c:59:9d:a1:e8:e3:8a:72:
70:f4:12:67:dc:8d:57:33:f1:46:b5:84:63:fc:85:
b1:7a:25:26:d8:69:33:85:83:d3:ae:ef:31:3e:4e:
b4:39:23:4a:43:5a:dc:30:5e:44:2b:b2:e0:1b:73:
7c:c5:11:12:d2:0f:45:6c:c2:08:6d:f1:da:dd:cd:
26:4d:15:57:48:2e:3b:40:5e:33:c3:22:53:5f:68:
4d:6a:08:86:a1:73:86:31:a7:37:e7:e9:e2:da:41:
e3:bc:11:27:ee:c4:a2:cb:18:e8:a9:bf:8d:04:b1:
3e:7a:07:ba:fc:a3:cc:0b:10:d9:75:3f:c1:3f:a6:
12:a1:c7:b8:f1:e8:04:7c:29:2e:32:05:b4:f6:de:
df:d7:95:31:2d:cb:7a:8f:28:bd:de:9f:40:34:60:
d9:5e:b0:28:12:48:99:6a:32:2d:47:68:a6:bd:ba:
d5:6d:77:f1:8f:14:e5:89:0a:e3:a1:ff:c3:d7:96:
dc:97:4b:91:72:31:ef:da:f5:80:e4:eb:4b:b6:64:
55:73:c5:4e:34:90:a2:f4:28:c8:ed:66:ff:64:dd:
45:b6:18:83:b8:32:95:6c:32:6e:f7:09:c1:78:cd:
b9:6c:01:74:88:93:26:1c:e8:5b:2a:21:25:2a:29:
77:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:34:19:F6:ED:41:D9:63:03:7B:D0:74:8E:34:0E:C7:9D:CB:61:2E
X509v3 Authority Key Identifier:
keyid:CA:9A:85:C5:52:FC:C6:08:39:05:9F:EA:DB:05:19:C6:5C:1B:DF:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/cd3dd7-b6bc-4a00-a64a-c376bc532e65/1/ypqFxVL8xgg5BZ_q2wUZxlwb31Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d1:98:79:fc:43:ac:6f:6f:b0:b3:54:71:65:7a:86:5a:24:
a4:71:a3:d0:ff:bb:89:95:c4:12:68:44:9b:27:9d:6c:98:e6:
6c:ce:ea:9c:ea:4b:fb:01:64:de:5a:92:b0:29:2f:b3:3a:07:
8b:12:3e:c6:43:23:27:6a:64:81:29:c5:ac:4b:3e:36:d0:b4:
da:a4:d8:97:9b:fe:69:22:d2:0d:66:92:3a:33:b5:34:73:d2:
fd:b8:b1:4d:a7:fd:d0:20:80:9f:23:78:c4:c4:86:c7:ea:93:
ca:78:16:61:2a:fc:7e:7f:8f:88:d6:05:9e:dd:6f:9a:ed:b8:
a5:e7:f4:44:10:85:6b:1d:b9:8a:60:26:b3:c7:ef:d2:9b:10:
91:1c:8a:60:ff:34:a0:ae:cf:78:04:6b:30:05:1b:59:c2:68:
68:c8:d8:f8:4b:0c:39:5f:85:e9:e0:99:8b:1d:f2:5e:27:f8:
24:8c:0d:42:5a:c5:a5:f3:7e:17:b8:76:cb:0f:a4:be:73:0f:
89:f7:4b:20:78:2c:df:03:30:64:fa:16:60:cf:9a:83:1f:99:
f2:86:25:5d:54:78:9b:d7:f5:1b:a5:84:20:8b:bd:db:d4:33:
2c:da:5c:49:fa:32:2f:c3:15:61:d0:74:b1:f9:fb:36:4f:a9:
ef:d6:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:42 2024 by rpki-client on console-ams.rpki-client.org