Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/Dq4gS2brTs_qwtLhgPLuaGuap9c.mft
File: Dq4gS2brTs_qwtLhgPLuaGuap9c.mft (raw, json)
Hash identifier: ziJ4L1dOWU92pMJE0pvWJhUt7I98tl+pnsQjCBkk9P8=
Subject key identifier: 00:2A:0A:14:27:F6:D3:76:F8:14:AE:D3:40:24:6B:3B:C6:02:F2:3A
Authority key identifier: 0E:AE:20:4B:66:EB:4E:CF:EA:C2:D2:E1:80:F2:EE:68:6B:9A:A7:D7
Certificate issuer: /CN=0eae204b66eb4ecfeac2d2e180f2ee686b9aa7d7
Certificate serial: 018C32C512FA4632B585563F33D6EF25FB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dq4gS2brTs_qwtLhgPLuaGuap9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/Dq4gS2brTs_qwtLhgPLuaGuap9c.mft
Manifest number: 0FBD
Signing time: Mon 04 Dec 2023 03:00:25 +0000
Manifest this update: Mon 04 Dec 2023 03:00:25 +0000
Manifest next update: Tue 05 Dec 2023 03:00:25 +0000
Files and hashes: 1: Dq4gS2brTs_qwtLhgPLuaGuap9c.crl (hash: HhyX13ksjZl1hGDhasfHxGEu2UdX3kwJCHudg6aJERs=)
2: Iixh3Ob8fuQDYVp8_-DBcwGKrRI.roa (hash: sSTKQNrvctWCJhvJ3uHMS4UyAxG/gUihCr8S8qnuy2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:32:c5:12:fa:46:32:b5:85:56:3f:33:d6:ef:25:fb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eae204b66eb4ecfeac2d2e180f2ee686b9aa7d7
Validity
Not Before: Dec 4 03:00:25 2023 GMT
Not After : Dec 5 03:00:25 2023 GMT
Subject: CN=002a0a1427f6d376f814aed340246b3bc602f23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:c3:90:4a:7b:cc:75:76:b2:4a:f3:2c:35:
60:c2:35:88:06:a3:f8:84:99:0d:d1:36:c7:81:19:
14:14:68:4a:1a:9f:bf:4f:ed:cf:8a:01:d6:78:74:
f5:82:59:64:7d:0a:b9:e9:a9:27:da:ad:b8:94:6c:
de:2f:16:2f:57:d3:4a:41:dc:22:18:64:9a:70:f0:
7e:49:f4:50:58:34:b2:23:07:6e:b8:c5:46:19:4b:
d4:45:e3:36:eb:26:9f:a2:5b:97:e6:3c:69:bc:5d:
61:45:8f:3b:e1:a8:77:cb:b6:60:34:8f:99:c1:6c:
35:bb:c8:00:9c:92:f2:e0:8e:b8:06:58:88:23:66:
74:0b:e6:be:8a:6f:6a:af:cb:d9:7a:59:42:96:e2:
39:7d:e1:48:ae:d4:1d:0d:26:ab:bb:72:68:bd:30:
19:85:0e:fb:97:b3:b5:9e:5a:66:53:a9:fb:c1:ec:
fb:16:b6:ab:25:24:fd:35:b6:92:83:73:41:52:49:
e4:82:1f:09:c8:c4:11:ce:ec:c1:67:20:42:00:50:
32:34:8c:0d:7e:62:9e:74:fa:96:46:e5:99:0f:8f:
1c:b5:db:1d:55:8d:4c:40:0e:c8:46:b6:e2:12:35:
8b:24:c9:db:9f:63:61:84:02:3a:c5:d8:6c:b6:b1:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2A:0A:14:27:F6:D3:76:F8:14:AE:D3:40:24:6B:3B:C6:02:F2:3A
X509v3 Authority Key Identifier:
keyid:0E:AE:20:4B:66:EB:4E:CF:EA:C2:D2:E1:80:F2:EE:68:6B:9A:A7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dq4gS2brTs_qwtLhgPLuaGuap9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/Dq4gS2brTs_qwtLhgPLuaGuap9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/Dq4gS2brTs_qwtLhgPLuaGuap9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2f:7d:10:b9:41:6d:20:8a:6a:de:75:04:8c:aa:08:12:a7:
33:c3:61:5b:18:b8:99:c7:bc:cd:a3:c8:e0:82:8d:ab:ed:f2:
20:b2:f4:dd:31:b6:1e:63:27:2e:b2:9b:4c:56:11:34:15:9d:
f3:d5:b2:1e:12:77:f9:74:5f:a2:c5:b4:01:02:c8:b4:b6:74:
c5:1f:6a:66:9a:d2:bf:27:0c:c9:84:4f:a5:c1:17:e6:42:80:
f7:52:cc:10:d6:b1:e6:86:28:4f:e5:47:52:e4:24:a1:cb:e5:
a8:ae:e7:4d:d9:a6:9f:5b:c8:ea:ab:43:09:aa:0e:d9:a1:68:
8c:d8:65:3f:1d:39:b2:e8:b0:06:00:56:8a:fa:27:67:90:34:
bf:f5:c9:82:e0:ff:46:b3:bf:61:58:5a:c4:1f:6c:5c:70:20:
44:94:49:15:53:d6:2a:1a:b7:1c:3a:3d:99:9d:90:c4:b2:2d:
0b:3d:9a:00:28:dd:c3:9a:e4:74:db:c5:19:93:ab:c1:0e:85:
4e:6c:4b:c3:53:15:85:0a:e8:ac:9e:9d:10:7f:88:12:24:d3:
0d:05:dc:79:f5:08:3b:61:f4:49:93:a7:f1:ab:46:7f:aa:32:
f6:1d:de:bf:4f:f9:f3:05:a7:28:95:aa:e5:8d:c1:ca:e4:e6:
a2:41:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 10:11:39 2023 by rpki-client on console-fra.rpki-client.org