Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.mft
File: dG-6vyolWp14yqJ-_opVdpleX8U.mft (raw, json)
Hash identifier: /FyGpNf87LzgAciDLuGLmnDu50dRjkcdf5XoDGwmN8Q=
Subject key identifier: E7:5D:6B:03:69:7E:3C:A5:F6:A5:69:EB:BC:9A:99:BE:6E:0C:1D:22
Authority key identifier: 74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
Certificate issuer: /CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Certificate serial: 018BEB19ED6EDA5E7401FA0E9DAC047F3819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.mft
Manifest number: 0901
Signing time: Mon 20 Nov 2023 05:00:26 +0000
Manifest this update: Mon 20 Nov 2023 05:00:26 +0000
Manifest next update: Tue 21 Nov 2023 05:00:26 +0000
Files and hashes: 1: dG-6vyolWp14yqJ-_opVdpleX8U.crl (hash: +H5KkZxANXXgBLleusD5BJ5VbDd5xm1amqsxIN3g4zE=)
2: ekX2qd7EDdahCY_y1n4gjgTswkU.roa (hash: l+b+5xfJEzyKk6KrNmqirkOI4/nEbh7PpTpvQIUNfII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:19:ed:6e:da:5e:74:01:fa:0e:9d:ac:04:7f:38:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746fbabf2a255a9d78caa27efe8a5576995e5fc5
Validity
Not Before: Nov 20 05:00:26 2023 GMT
Not After : Nov 21 05:00:26 2023 GMT
Subject: CN=e75d6b03697e3ca5f6a569ebbc9a99be6e0c1d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ed:70:b7:f1:75:90:f6:00:67:51:b2:a4:9c:
6e:ae:1d:15:b6:3f:1a:93:92:d7:34:01:4c:6e:34:
16:b1:1c:c4:74:f5:27:bc:ff:9e:7a:07:ab:50:72:
3d:6f:62:90:46:ef:9b:84:f4:00:94:3d:68:9c:d6:
ac:64:eb:66:61:a9:8a:47:d7:7d:79:63:56:84:a2:
22:8d:e8:65:00:ba:b8:b5:41:3c:88:73:17:0b:e2:
df:24:20:85:0b:65:6b:39:28:c9:0e:3b:69:8a:39:
5e:b9:b2:5d:8d:6f:0a:58:64:bf:1d:86:1d:a2:91:
ec:b3:9a:3b:47:45:9d:1d:c8:92:ba:19:4c:8b:c0:
09:fa:c6:b7:c2:38:ac:6a:80:a4:30:56:d4:bd:ed:
98:0d:36:f2:8e:b6:20:cd:d7:b1:be:7b:21:f9:04:
e9:76:90:32:69:6a:09:51:3e:7c:b9:e6:88:db:aa:
6b:21:c5:3f:12:1b:1d:14:3a:32:0c:ec:d9:05:fe:
79:1b:c8:81:64:12:87:51:ae:b6:2e:cf:94:83:a1:
f8:49:df:0a:12:66:7e:46:b1:04:30:ab:55:7f:6c:
0c:9f:20:67:07:ef:e6:60:f3:5c:b9:e7:32:dc:ef:
3d:e2:ca:df:13:be:c7:c0:43:84:26:18:2f:a2:a0:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5D:6B:03:69:7E:3C:A5:F6:A5:69:EB:BC:9A:99:BE:6E:0C:1D:22
X509v3 Authority Key Identifier:
keyid:74:6F:BA:BF:2A:25:5A:9D:78:CA:A2:7E:FE:8A:55:76:99:5E:5F:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dG-6vyolWp14yqJ-_opVdpleX8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1392f7-db60-425b-b5db-4460eb44dc39/1/dG-6vyolWp14yqJ-_opVdpleX8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6d:e6:48:a5:77:40:d0:66:e4:7c:38:35:a6:5b:4e:09:c5:
81:6c:c2:43:4f:e0:f8:8f:bb:6f:07:72:43:f1:f7:22:ff:94:
7f:f2:2e:c9:95:f1:de:20:2b:4c:92:bf:67:9f:f1:cd:b5:eb:
06:46:94:23:c9:46:76:02:09:0a:62:46:9a:b3:8f:7f:d2:d7:
44:d7:31:0a:5c:7c:81:6d:10:15:f4:e2:c5:13:f9:79:dd:8b:
ad:c7:c0:c5:30:80:48:27:f4:96:e3:05:e0:38:67:07:c1:67:
0a:6d:94:9e:1a:85:47:1a:cb:97:34:5c:60:46:f5:c8:29:de:
4a:aa:d2:7e:10:6f:bb:92:90:59:dc:8c:93:ec:bd:bc:f8:f5:
68:38:2b:82:ad:91:a7:cb:cf:77:89:a9:1b:08:c0:2f:8d:21:
1b:e0:c2:61:09:e8:e1:69:ee:e9:02:c8:64:62:bc:35:78:c3:
b1:1f:04:45:15:4e:0c:ad:cf:59:46:de:17:fc:86:2e:05:a8:
59:0d:68:5b:f3:0b:69:be:df:ca:09:99:62:a6:fe:5a:53:ee:
62:65:67:3b:c6:4b:ae:d6:4c:b3:3f:fe:b7:e8:15:e7:82:44:
db:f3:51:35:c0:fb:be:7c:2e:6c:df:ee:9c:16:3d:fb:07:a6:
a1:fb:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:27 2025 by rpki-client