Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/1ead39-6070-4796-a468-ac62ef704e50/1/fAyM6QD86aRVoFVH3Ryma6GpG6c.mft
File: fAyM6QD86aRVoFVH3Ryma6GpG6c.mft (raw, json)
Hash identifier: hZ7UKxqc1LOzltuO46VDTqW/X353a8zX8d951PXd3Y8=
Subject key identifier: 02:4A:5B:F6:6A:32:B4:0D:42:61:32:DB:CE:A5:4C:49:27:54:D7:13
Authority key identifier: 7C:0C:8C:E9:00:FC:E9:A4:55:A0:55:47:DD:1C:A6:6B:A1:A9:1B:A7
Certificate issuer: /CN=7c0c8ce900fce9a455a05547dd1ca66ba1a91ba7
Certificate serial: 018AB19B5927BB370366ADED03AB5E23ED42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAyM6QD86aRVoFVH3Ryma6GpG6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/1ead39-6070-4796-a468-ac62ef704e50/1/fAyM6QD86aRVoFVH3Ryma6GpG6c.mft
Manifest number: 0CBC
Signing time: Wed 20 Sep 2023 08:01:02 +0000
Manifest this update: Wed 20 Sep 2023 08:01:02 +0000
Manifest next update: Thu 21 Sep 2023 08:01:02 +0000
Files and hashes: 1: 9SZiGqcN0PvR_aZgPmJJPLtKlH4.roa (hash: /R3BMqbTE0uZW7Xj7ySJMmdNJ6TiLFafIM1DJsORIjY=)
2: fAyM6QD86aRVoFVH3Ryma6GpG6c.crl (hash: n6KcqID8xvZCBcHBT/3gy8eSewz9mMBQGGun+zf7Zgg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:9b:59:27:bb:37:03:66:ad:ed:03:ab:5e:23:ed:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c0c8ce900fce9a455a05547dd1ca66ba1a91ba7
Validity
Not Before: Sep 20 08:01:02 2023 GMT
Not After : Sep 21 08:01:02 2023 GMT
Subject: CN=024a5bf66a32b40d426132dbcea54c492754d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:12:6a:af:40:f8:20:66:1d:36:5b:f4:07:5a:
47:40:19:44:68:9d:a2:dd:c0:6e:9a:cc:eb:2a:ff:
b3:0d:97:dc:56:c7:73:5e:3c:cf:77:2f:74:dc:45:
98:73:a9:fb:64:77:00:42:65:97:1c:4b:a8:98:16:
6b:38:5f:fe:a4:38:9f:7c:a7:2e:df:0a:e9:79:03:
47:0f:4d:6a:7c:96:06:f7:e9:80:7a:63:6a:84:58:
f9:83:7d:c7:01:2b:c1:df:53:f4:52:41:cf:3d:ad:
31:c5:e6:21:46:f3:05:97:6a:9c:2a:80:0a:3f:7c:
00:48:a3:12:4a:91:05:7c:a6:ab:a7:5b:bf:e7:d5:
fa:27:d0:c9:65:72:7c:1c:88:53:ab:99:a9:3d:c4:
a6:ed:44:b4:a5:11:fc:dd:c9:f2:6f:0a:32:76:74:
a2:f3:95:97:90:31:bf:da:65:49:dd:9b:ec:7e:19:
6c:49:95:a9:60:f0:a1:41:08:3d:ba:67:d2:f6:51:
b4:19:32:4b:5b:5b:5e:b3:b4:90:21:01:0c:25:7e:
c0:2f:56:95:ee:8a:60:1c:91:fe:9b:4e:a9:1f:c8:
56:23:f0:4f:e4:ad:5a:0c:4d:b4:07:1e:f8:4c:14:
b5:a0:38:3b:0e:07:22:b9:66:bc:c3:b0:75:e9:54:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:5B:F6:6A:32:B4:0D:42:61:32:DB:CE:A5:4C:49:27:54:D7:13
X509v3 Authority Key Identifier:
keyid:7C:0C:8C:E9:00:FC:E9:A4:55:A0:55:47:DD:1C:A6:6B:A1:A9:1B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAyM6QD86aRVoFVH3Ryma6GpG6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1ead39-6070-4796-a468-ac62ef704e50/1/fAyM6QD86aRVoFVH3Ryma6GpG6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/1ead39-6070-4796-a468-ac62ef704e50/1/fAyM6QD86aRVoFVH3Ryma6GpG6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:89:fb:78:72:9f:ca:80:a4:a9:98:13:2b:5d:17:5f:69:3a:
e5:ef:c0:0f:98:8f:aa:44:43:95:a1:ef:5d:f5:74:de:b7:68:
bc:ff:ab:d4:15:40:27:07:9a:c7:9a:3e:1f:61:94:8a:9e:53:
cf:65:5f:13:c0:34:22:a4:c2:db:cc:0a:5f:17:52:a2:a3:00:
78:c7:31:6f:81:23:63:36:43:09:60:82:7d:db:f7:0e:ac:18:
1c:28:e8:9e:7a:a7:de:56:49:c9:e4:89:23:1a:62:14:46:48:
ea:fe:f9:b4:fe:1f:ff:77:13:54:d8:a5:d9:c2:33:57:ca:40:
ca:c1:52:25:b1:55:6a:a4:02:81:82:4a:86:05:57:b1:f2:61:
d6:fc:ed:9c:91:0a:c6:98:ba:6b:31:2f:a1:5e:ea:72:db:fc:
1e:47:9a:9f:24:f0:36:56:aa:23:4e:c6:11:b9:ea:d5:62:87:
cd:03:02:0c:46:43:b1:11:97:4c:8b:19:07:f0:45:7f:94:b3:
97:e2:25:4c:2f:46:3b:20:9a:a5:f4:39:0c:a7:f1:00:60:d7:
60:c1:28:7a:6a:49:1d:fa:a0:ff:d7:1e:70:50:ff:22:94:2d:
e6:a1:62:46:b9:0d:c7:c5:b3:5d:e7:73:76:e3:12:bc:e4:a4:
99:86:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:09 2025 by rpki-client