Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/abe205-bf81-4945-9d42-0bcddf3e5e57/1/KxPz5KPHXPvAWcnZXFnd-OQc6oY.mft
File: KxPz5KPHXPvAWcnZXFnd-OQc6oY.mft (raw, json)
Hash identifier: WM86nSEmk41u+GdLRdrqg4npUg6QnzMdl/fW9VCS8O4=
Subject key identifier: 3B:F7:15:2B:DE:B2:F1:E7:5C:22:FE:19:80:6D:56:F8:38:4F:5D:B9
Authority key identifier: 2B:13:F3:E4:A3:C7:5C:FB:C0:59:C9:D9:5C:59:DD:F8:E4:1C:EA:86
Certificate issuer: /CN=2b13f3e4a3c75cfbc059c9d95c59ddf8e41cea86
Certificate serial: 01840D1BD917BEC22812A6C17D4F1CFD5C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxPz5KPHXPvAWcnZXFnd-OQc6oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/abe205-bf81-4945-9d42-0bcddf3e5e57/1/KxPz5KPHXPvAWcnZXFnd-OQc6oY.mft
Manifest number: D8
Signing time: Tue 25 Oct 2022 03:07:19 +0000
Manifest this update: Tue 25 Oct 2022 03:07:19 +0000
Manifest next update: Wed 26 Oct 2022 03:07:19 +0000
Files and hashes: 1: KxPz5KPHXPvAWcnZXFnd-OQc6oY.crl (hash: NiLoRCqqcVQvmTuvzpiM5YUEA1k4IEkKRV8n/wTfrxA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:1b:d9:17:be:c2:28:12:a6:c1:7d:4f:1c:fd:5c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b13f3e4a3c75cfbc059c9d95c59ddf8e41cea86
Validity
Not Before: Oct 25 03:07:19 2022 GMT
Not After : Oct 26 03:07:19 2022 GMT
Subject: CN=3bf7152bdeb2f1e75c22fe19806d56f8384f5db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:b1:37:c7:9e:a1:aa:af:a7:5a:b4:a4:5a:
16:06:98:e4:9b:d3:4e:89:d5:ab:a4:2d:7a:f1:d6:
7c:36:00:52:d5:01:15:1c:23:c0:d1:ff:58:85:a6:
6c:f5:83:88:7b:d2:d9:ec:71:f3:7b:92:78:73:af:
54:9f:d7:be:87:6b:05:ad:ea:97:35:cf:8d:af:5a:
c9:5c:4b:41:24:bb:3f:4e:f6:2c:c7:b7:d7:65:a3:
ff:cf:25:1b:f5:61:ec:85:04:07:c4:5c:88:00:3e:
9d:4f:53:4e:51:c5:b9:be:7c:97:52:ab:8a:a7:aa:
d8:33:2a:11:1d:52:49:72:a3:92:23:0a:71:36:b7:
d7:ab:bb:f0:da:2b:3e:fd:6c:33:f3:99:09:b6:42:
cb:2a:6c:5b:ba:3f:23:1b:73:c6:d3:8c:c3:40:6d:
67:52:e2:23:f9:63:c2:7f:b9:ec:1e:f4:82:c8:99:
3d:64:c9:5d:b2:c7:3f:72:65:98:b6:d1:0b:da:a9:
a1:1e:c7:ad:a0:51:fc:cd:02:05:3a:ca:d6:7c:ce:
e4:c8:00:40:af:91:1d:63:ba:84:97:fc:67:9f:74:
56:5c:96:fc:c2:9d:0d:c1:71:b2:dc:01:2b:42:8e:
c5:5e:0e:19:59:d1:66:2e:92:23:56:8c:d8:0e:e0:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F7:15:2B:DE:B2:F1:E7:5C:22:FE:19:80:6D:56:F8:38:4F:5D:B9
X509v3 Authority Key Identifier:
keyid:2B:13:F3:E4:A3:C7:5C:FB:C0:59:C9:D9:5C:59:DD:F8:E4:1C:EA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxPz5KPHXPvAWcnZXFnd-OQc6oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/abe205-bf81-4945-9d42-0bcddf3e5e57/1/KxPz5KPHXPvAWcnZXFnd-OQc6oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/abe205-bf81-4945-9d42-0bcddf3e5e57/1/KxPz5KPHXPvAWcnZXFnd-OQc6oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a2:f4:ad:1d:91:4f:e5:37:e1:bb:03:bf:b4:b1:71:b3:af:
00:f2:6d:4d:cb:e3:af:fa:ae:3d:2c:29:4d:6b:78:f3:62:21:
c8:78:bc:e8:63:ac:db:ec:30:ac:a6:31:c2:9c:39:cb:14:5e:
83:93:ff:de:6b:67:d0:bc:1d:72:ed:fe:78:e5:ad:3e:10:1a:
e7:84:58:3c:d3:95:e8:95:5a:89:12:bf:41:9e:43:68:9b:2c:
25:81:ab:f9:b9:f6:35:ef:5f:a2:b8:23:52:7c:d7:9a:c3:5f:
03:1c:33:37:c2:55:1e:ea:54:e1:71:85:a1:13:21:e6:75:f0:
96:49:30:0a:71:21:93:76:dd:e5:c1:c6:8f:93:13:76:b0:68:
9d:ce:46:c1:fc:00:05:e9:4a:c3:dc:c9:5b:66:61:b3:33:43:
66:5f:0f:e1:7a:b4:f4:c4:20:07:9f:be:17:9e:83:35:bc:5c:
ea:d7:35:2c:c8:69:7a:c5:0a:7c:61:90:95:04:fa:d5:86:19:
a1:c8:3a:65:58:77:85:48:9d:41:af:b0:06:8d:a4:e0:4a:be:
a5:50:33:84:29:45:42:30:1a:57:61:32:04:af:2e:d3:df:74:
5a:85:cc:91:66:62:3f:ee:c1:64:76:0a:6a:94:ae:27:b4:d6:
d6:28:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:13 2024 by rpki-client on console-fra.rpki-client.org