Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/RNPgIKgZqM2mCdXqSEQe6TnkGYU.mft
File: RNPgIKgZqM2mCdXqSEQe6TnkGYU.mft (raw, json)
Hash identifier: ZvU1Vbri2hQR9b8tv/SngDKklaEPGN5Q2o63wv1/7YI=
Subject key identifier: 77:D2:0D:5D:B3:35:2F:23:C1:D2:8C:36:19:B4:74:FA:B8:62:F4:7F
Authority key identifier: 44:D3:E0:20:A8:19:A8:CD:A6:09:D5:EA:48:44:1E:E9:39:E4:19:85
Certificate issuer: /CN=44d3e020a819a8cda609d5ea48441ee939e41985
Certificate serial: 018D53CF242F6DD8F8D37FD4E4BBAF09DF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPgIKgZqM2mCdXqSEQe6TnkGYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/RNPgIKgZqM2mCdXqSEQe6TnkGYU.mft
Manifest number: 0843
Signing time: Mon 29 Jan 2024 06:01:40 +0000
Manifest this update: Mon 29 Jan 2024 06:01:40 +0000
Manifest next update: Tue 30 Jan 2024 06:01:40 +0000
Files and hashes: 1: MGaiI4GMNV4HNpTcNTjOs-cLYew.roa (hash: rif9VWI2BBKtmq77rfb6R1/5u3/x1nqEab8/yty3cio=)
2: RNPgIKgZqM2mCdXqSEQe6TnkGYU.crl (hash: KpfwpQwsQ8ZO7pS2g4BDpA1DpgvncJI8v/PXEMQEAOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:53:cf:24:2f:6d:d8:f8:d3:7f:d4:e4:bb:af:09:df:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3e020a819a8cda609d5ea48441ee939e41985
Validity
Not Before: Jan 29 06:01:40 2024 GMT
Not After : Jan 30 06:01:40 2024 GMT
Subject: CN=77d20d5db3352f23c1d28c3619b474fab862f47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:50:bd:33:dc:cf:3e:fe:b7:ed:00:6e:12:
9c:02:43:73:7d:ee:81:e2:0c:ac:9a:9f:e8:64:8d:
44:5a:ae:0d:de:2b:7f:e8:7d:9c:d7:88:e5:68:63:
1c:41:da:2e:83:34:7b:40:5b:f3:17:9e:1a:d1:21:
5c:f8:42:46:da:0d:46:fb:59:9b:87:36:aa:f8:20:
09:fc:6a:2d:4f:57:f0:4f:90:56:d5:c0:58:7d:9f:
d1:75:4e:cf:3e:0f:03:21:f6:97:d3:e7:82:b5:41:
59:44:2a:c6:58:12:19:9f:aa:fc:a5:c9:f1:08:ca:
63:21:e0:b8:da:50:08:2c:01:62:38:58:ef:e7:52:
18:e9:db:f5:88:b2:a8:d0:bd:c1:d0:06:29:6f:eb:
4b:f6:51:4e:48:96:09:17:95:dd:4e:74:48:17:c8:
29:60:d8:8a:7a:e9:21:17:6e:92:50:b8:58:97:9a:
6d:d4:05:dd:8b:41:00:19:8f:76:9f:bd:8b:bc:8c:
81:54:73:e3:bd:28:e1:89:8c:84:33:a1:34:4b:4e:
2c:46:a8:7a:39:5f:3f:2f:e4:2e:2f:c0:38:53:d5:
87:05:84:6c:d9:cb:f3:63:fb:c5:ef:1c:42:73:31:
b1:69:3c:8e:a1:02:a4:78:02:24:ce:e8:bd:41:7c:
1e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D2:0D:5D:B3:35:2F:23:C1:D2:8C:36:19:B4:74:FA:B8:62:F4:7F
X509v3 Authority Key Identifier:
keyid:44:D3:E0:20:A8:19:A8:CD:A6:09:D5:EA:48:44:1E:E9:39:E4:19:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPgIKgZqM2mCdXqSEQe6TnkGYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/RNPgIKgZqM2mCdXqSEQe6TnkGYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/RNPgIKgZqM2mCdXqSEQe6TnkGYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:98:88:3b:32:81:a8:80:14:9a:e4:3f:4c:f8:16:2e:07:43:
d8:35:e0:c4:62:68:4c:ca:9e:39:5a:32:82:f4:db:e8:c6:6f:
28:05:4e:44:53:00:53:be:7b:ac:07:4e:47:9a:d7:d7:b4:21:
f9:f3:59:11:42:0b:b3:cc:63:b0:87:64:cd:c7:ee:e6:31:e1:
86:ce:32:96:61:a5:98:65:03:0d:5f:b8:8a:27:77:0a:e1:da:
d1:de:cb:06:2e:84:9b:4d:8e:de:e8:c4:64:85:54:02:f9:90:
03:64:94:06:9d:52:91:40:09:20:1d:b3:f1:13:c7:9d:28:ab:
8d:3e:25:c7:de:12:d9:63:d7:75:1f:66:40:8c:7f:05:c6:7f:
cf:26:77:56:5e:14:6f:4e:8e:9d:34:4e:a2:e5:87:cf:46:a2:
aa:f0:bc:ba:34:89:3d:71:ad:3b:58:07:5a:32:fb:20:52:63:
b2:b6:90:ec:bf:fb:9b:c9:9a:2f:e5:66:cb:5f:92:97:c6:f2:
9b:86:c5:6a:22:55:76:8a:05:34:8e:6f:95:49:90:b6:e4:ad:
ff:61:60:c8:88:f4:3a:51:ad:37:3e:7c:fe:4e:75:71:cc:94:
8c:7e:ac:28:3f:10:88:4c:04:cf:e5:af:df:f6:e8:0f:4b:af:
df:b6:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org