Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.mft
File: Cs8KlUY5yDWCl0vSnBmSJys2g6M.mft (raw, json)
Hash identifier: GyObnEv/DHTrdiTWZ5I5TM5b3OCG4lnmmq6fIvXSvFo=
Subject key identifier: A4:38:86:35:46:64:47:4C:BE:49:F5:B9:DF:85:8C:0D:45:84:5E:A8
Authority key identifier: 0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
Certificate issuer: /CN=0acf0a954639c83582974bd29c1992272b3683a3
Certificate serial: 018B8564C56829899C5FACF87720ACAC61F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.mft
Manifest number: 08FA
Signing time: Tue 31 Oct 2023 11:00:55 +0000
Manifest this update: Tue 31 Oct 2023 11:00:55 +0000
Manifest next update: Wed 01 Nov 2023 11:00:55 +0000
Files and hashes: 1: Cs8KlUY5yDWCl0vSnBmSJys2g6M.crl (hash: GEN/D94QdM6Q2irCR2sF0tVwFD9oFgtnd/ecQfy80JY=)
2: oIfN04kxUDJJbGn9DEu1QoV-1JY.roa (hash: fl8PfnWskew3WboUGvY7jz5gGuceGj8CRICiAgskjUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:64:c5:68:29:89:9c:5f:ac:f8:77:20:ac:ac:61:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf0a954639c83582974bd29c1992272b3683a3
Validity
Not Before: Oct 31 11:00:55 2023 GMT
Not After : Nov 1 11:00:55 2023 GMT
Subject: CN=a43886354664474cbe49f5b9df858c0d45845ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2a:37:c6:b1:e3:4e:c7:27:1b:5d:c4:2a:85:
e5:6e:50:92:3d:41:7e:db:ec:70:18:f2:5b:b4:f9:
66:8f:ac:55:e5:8d:38:5e:d3:e1:49:99:c2:38:3d:
ee:0b:72:42:2f:67:7a:a1:66:5f:8a:1a:63:35:c9:
1f:45:69:db:ae:c6:92:13:2d:51:17:9d:2f:59:29:
96:72:a4:74:95:43:83:76:c5:36:e7:b0:b4:bc:81:
47:59:60:6a:5d:07:33:34:e7:71:34:26:45:2d:33:
d4:88:1c:ec:11:fa:c6:35:28:b5:43:a2:1c:ec:e6:
2d:ad:da:d7:c0:03:c8:d1:cd:cb:64:23:b4:3d:6a:
7f:b3:cc:c8:e0:7b:8a:f9:ea:7f:a7:19:97:a0:17:
19:63:d0:df:a5:74:89:73:1f:a1:67:bf:06:1f:e9:
56:d4:68:87:d9:00:43:9f:70:e7:7c:13:8b:60:02:
5d:69:4f:c8:af:cb:49:80:26:0b:d9:6b:9c:b5:30:
3e:41:f5:95:cf:71:ca:be:19:6c:c0:0c:61:cf:09:
9f:bb:61:a3:af:bd:4e:49:f5:64:9f:f7:9a:fa:78:
6d:07:05:7e:71:a6:30:f3:a9:cc:b9:8a:39:7f:1a:
13:93:c3:e6:4b:47:b7:7b:6a:7e:c8:27:45:97:3a:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:38:86:35:46:64:47:4C:BE:49:F5:B9:DF:85:8C:0D:45:84:5E:A8
X509v3 Authority Key Identifier:
keyid:0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c7:96:ad:2e:fb:1f:3e:e3:84:f6:34:6c:14:89:86:08:8f:
43:0b:90:c7:f2:35:1c:fe:0a:93:da:42:a9:19:02:80:49:07:
4b:94:39:04:8b:48:28:41:68:43:ab:5e:d1:83:6e:54:80:61:
a4:f0:ce:71:a6:72:0f:cb:b4:a5:cd:ce:d3:ca:33:d3:2c:2b:
65:39:18:23:fe:b5:be:b9:7b:26:3e:55:aa:e0:5e:18:09:d4:
fe:b5:d9:20:e2:66:5f:6a:ba:74:da:4d:a7:b7:7c:18:ad:2d:
97:b0:99:f6:db:bc:69:dd:8f:b4:2a:89:3c:8a:f7:82:07:2e:
2b:dd:1f:98:be:4e:aa:8e:38:c3:bc:be:84:ff:90:7b:04:73:
20:12:b9:56:76:06:92:cc:6d:37:f1:37:0a:8f:bf:96:52:3a:
0a:b2:96:d8:c0:95:52:e5:92:69:22:fe:8a:35:f5:fe:fc:eb:
d9:b6:ac:c5:1d:81:45:59:d2:31:c8:18:5d:8a:48:a8:be:6d:
0c:e1:44:3b:68:80:dc:1e:39:a6:83:4d:cb:34:d5:37:93:28:
fe:48:6a:29:2c:64:20:8a:2d:f3:cd:1a:da:14:11:d3:6a:df:
d3:c9:69:a6:8e:e3:ac:d0:54:6b:db:cc:0b:09:00:74:3c:e1:
f7:16:be:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 13:18:12 2023 by rpki-client on console-fra.rpki-client.org