Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.mft
File: 2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.mft (raw, json)
Hash identifier: F+kGlIk74cr9FFUGyOaqBCWsZNs9VW0CZHAKd5Z4ydw=
Subject key identifier: 72:B5:8A:09:D1:D8:4A:D2:48:B6:F5:B1:91:E8:AC:C6:B4:27:96:24
Authority key identifier: DA:16:C6:19:8D:0D:C1:94:2F:C1:1E:A8:FD:04:6B:8F:84:27:E8:29
Certificate issuer: /CN=da16c6198d0dc1942fc11ea8fd046b8f8427e829
Certificate serial: 018DA6D8FF53DCA4BC7298567091C0A50440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.mft
Manifest number: 0B1E
Signing time: Wed 14 Feb 2024 09:00:55 +0000
Manifest this update: Wed 14 Feb 2024 09:00:55 +0000
Manifest next update: Thu 15 Feb 2024 09:00:55 +0000
Files and hashes: 1: 0nxavr9Olkceoj9Ip5pQzq80Ltg.roa (hash: H1nxHG1itzB1VNdjuc+c4R+YY5ECcG+a1AVdeHoHUKo=)
2: 2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.crl (hash: p6f++wdkB00cU7VDV0o6BbypGb+VM5cQZEPxfFtCdjg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:d8:ff:53:dc:a4:bc:72:98:56:70:91:c0:a5:04:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da16c6198d0dc1942fc11ea8fd046b8f8427e829
Validity
Not Before: Feb 14 09:00:55 2024 GMT
Not After : Feb 15 09:00:55 2024 GMT
Subject: CN=72b58a09d1d84ad248b6f5b191e8acc6b4279624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:c2:43:64:15:2c:c0:08:48:9f:c5:1b:df:
13:86:ac:67:7a:85:ad:9a:2c:53:d2:aa:93:c4:3f:
a6:9e:dc:2d:08:9f:a3:e0:9c:d9:03:83:2e:65:70:
e6:a8:3f:a6:df:28:0e:57:e0:89:9a:2c:ae:ad:9e:
f1:ed:34:73:cb:ff:93:2b:f7:ed:fb:2c:b1:4f:30:
f5:fc:63:d1:3f:24:51:9b:33:62:5e:97:ad:47:35:
34:be:eb:c8:69:9e:ac:39:38:eb:30:b9:92:b3:9f:
1c:26:18:06:8e:a6:11:fe:2c:93:2a:28:0d:bf:bb:
5f:44:2b:8c:a0:6c:56:07:5d:5c:10:cf:bd:a2:0f:
30:cf:82:bb:c5:c6:23:01:bd:96:dd:b2:37:73:74:
72:45:64:33:ae:10:a8:25:8d:07:9c:ad:7d:39:15:
06:5a:5a:c5:18:b9:c1:fe:9d:77:e2:a6:9d:ce:c6:
d9:93:22:0d:88:06:44:e9:65:c2:22:bf:c1:5c:85:
d8:b2:dd:16:78:c3:82:c9:1d:c8:cb:f2:d2:ec:a0:
44:80:15:b6:1e:5c:1a:a3:76:6b:17:c8:63:fc:83:
a4:99:b4:d3:cf:8d:b4:f3:f6:ef:89:1e:a7:87:34:
9f:46:7f:f0:64:8d:4d:f4:ce:2e:0c:a9:43:65:6f:
84:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B5:8A:09:D1:D8:4A:D2:48:B6:F5:B1:91:E8:AC:C6:B4:27:96:24
X509v3 Authority Key Identifier:
keyid:DA:16:C6:19:8D:0D:C1:94:2F:C1:1E:A8:FD:04:6B:8F:84:27:E8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b6:c8:3b:5d:2d:62:98:96:15:73:aa:b4:74:17:c7:c6:53:
18:29:a6:6d:aa:66:38:2e:6f:ef:f2:19:01:ae:70:3c:d2:71:
15:c6:9f:cc:df:a8:38:af:cc:d0:46:0f:bb:fd:2c:95:b4:2a:
c9:39:2f:3a:fd:85:58:c8:4b:64:51:09:e3:81:12:2e:9e:ff:
a5:c8:84:c9:33:45:90:81:0b:1d:96:04:9c:8d:9c:7d:f3:2c:
3f:5f:ad:b4:d1:f9:15:0f:d1:ad:08:96:c0:07:16:21:97:30:
63:bf:5b:b0:4f:f9:5b:4b:d3:22:db:91:b9:5b:bc:61:f3:5f:
af:f5:7d:33:97:37:91:4b:23:16:f6:a6:5f:62:2e:05:c4:a7:
59:de:d3:6e:59:3d:a8:e7:7a:57:79:ee:94:85:bc:a1:52:70:
11:cb:ca:95:8d:6d:b2:e4:8b:23:f2:b3:30:ee:85:24:ba:f3:
67:cb:ef:a7:9e:25:89:7f:f1:cd:de:4a:89:91:1b:d5:fd:00:
1e:1b:4d:42:fb:d1:46:25:47:56:73:05:e8:1f:3d:1b:d7:f1:
90:73:b1:c6:8d:be:4f:6c:70:20:48:6b:7f:ef:52:be:9d:3f:
7d:6e:47:10:08:0b:e0:76:bf:95:c4:82:cc:74:cb:27:4d:b9:
4b:7e:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 18:19:22 2024 by rpki-client on console-fra.rpki-client.org