Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/pfYh7rK_3pk_tsDnis7R7Ab7VsI.mft
File: pfYh7rK_3pk_tsDnis7R7Ab7VsI.mft (raw, json)
Hash identifier: O7XlP2KC0YIANukLZ/pdSVn6r4myYk9sAonNw7L2orw=
Subject key identifier: CE:0B:26:F1:05:E0:18:8E:52:D4:2B:1C:64:F2:35:01:CA:68:E1:34
Authority key identifier: A5:F6:21:EE:B2:BF:DE:99:3F:B6:C0:E7:8A:CE:D1:EC:06:FB:56:C2
Certificate issuer: /CN=a5f621eeb2bfde993fb6c0e78aced1ec06fb56c2
Certificate serial: 018C336AA3D03295C853083390B16C11CA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfYh7rK_3pk_tsDnis7R7Ab7VsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/pfYh7rK_3pk_tsDnis7R7Ab7VsI.mft
Manifest number: 0544
Signing time: Mon 04 Dec 2023 06:01:15 +0000
Manifest this update: Mon 04 Dec 2023 06:01:15 +0000
Manifest next update: Tue 05 Dec 2023 06:01:15 +0000
Files and hashes: 1: PDutEaojZAAdT3RAB-v09RGSDEw.roa (hash: sFStH1pVV+nMb9JmpUJeS+s00hUaTvT2Ot8moEeBY8M=)
2: pfYh7rK_3pk_tsDnis7R7Ab7VsI.crl (hash: V3d7CS4p3V7Iwkksq2paCqhdAxJhme1ssqlPZwKEgEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:6a:a3:d0:32:95:c8:53:08:33:90:b1:6c:11:ca:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f621eeb2bfde993fb6c0e78aced1ec06fb56c2
Validity
Not Before: Dec 4 06:01:15 2023 GMT
Not After : Dec 5 06:01:15 2023 GMT
Subject: CN=ce0b26f105e0188e52d42b1c64f23501ca68e134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:56:f4:da:79:b2:48:16:c2:69:88:fe:7e:
d8:23:e0:e1:58:31:cd:95:59:3f:02:67:61:73:6e:
ed:7e:65:99:d2:51:dd:f3:91:2f:ea:8b:05:7d:c1:
66:33:65:20:37:97:27:28:64:69:0b:da:3d:af:fd:
c0:61:82:43:ad:b0:b0:4c:30:69:b8:32:b8:e4:06:
19:fd:ac:37:37:33:67:aa:09:d7:33:c0:1c:ff:92:
0b:45:dc:bf:60:ad:da:a5:86:c0:34:28:72:96:cd:
2c:21:54:ca:82:9d:d4:51:c0:68:a7:48:6d:1e:4a:
e6:06:b2:f5:d2:9a:db:61:cf:d8:d0:5a:dc:9a:63:
04:db:ca:90:0c:16:e4:5d:b9:00:0c:36:03:bc:c8:
37:15:36:f2:f8:a0:b5:7b:3c:bb:7b:8c:0a:9b:00:
eb:36:23:af:d3:29:cf:13:2d:c6:59:bf:34:7a:ea:
77:57:dc:9c:f6:7b:6d:f2:aa:71:11:c6:00:8f:66:
05:01:bb:06:79:e3:87:2f:ca:24:c7:d9:e6:d6:64:
d8:90:5f:6a:c4:60:9c:e1:75:8a:76:f3:d6:65:b7:
c1:60:b1:bc:da:86:8e:b6:3f:5f:96:2b:66:fa:b8:
8d:1f:37:92:dc:35:65:92:c0:30:62:78:cd:72:9a:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0B:26:F1:05:E0:18:8E:52:D4:2B:1C:64:F2:35:01:CA:68:E1:34
X509v3 Authority Key Identifier:
keyid:A5:F6:21:EE:B2:BF:DE:99:3F:B6:C0:E7:8A:CE:D1:EC:06:FB:56:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfYh7rK_3pk_tsDnis7R7Ab7VsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/pfYh7rK_3pk_tsDnis7R7Ab7VsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e3872c-5f98-4519-a243-ab9e69139ea7/1/pfYh7rK_3pk_tsDnis7R7Ab7VsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5f:28:81:0d:19:31:fa:cd:47:59:21:4f:96:30:e2:b6:d8:
e8:b5:4f:2c:1b:b0:7e:9d:f0:bb:7e:b1:f4:b4:15:54:e7:a7:
f5:95:a8:1f:72:41:ea:87:1f:04:b6:8c:7b:5c:3f:44:97:fe:
ed:6a:f1:28:1b:09:a0:8c:17:4d:45:37:a9:99:10:1f:b5:d2:
9f:4f:7a:3d:98:6c:69:32:da:21:fd:f4:86:fe:9b:5b:ef:2c:
53:b2:c0:4b:3b:79:0b:e9:e1:62:16:bc:dc:9b:25:83:3b:73:
1d:39:4f:22:b7:b0:7e:0b:c9:c9:ab:63:6e:70:b4:5b:fa:ae:
e1:17:1d:29:97:7f:9a:3e:f1:b6:6e:d4:7a:07:9c:d2:1b:ad:
d5:40:6b:fc:be:05:18:19:55:10:7c:f3:9f:d8:84:26:02:3d:
a5:02:1e:f4:db:ac:e6:40:06:66:36:77:5b:eb:32:7f:82:13:
55:56:9a:fb:09:14:19:54:d4:1d:9f:38:23:3b:f4:fa:8a:8d:
6e:93:b1:7b:5b:c2:bc:5b:6c:a9:43:b3:22:36:d5:e1:19:56:
28:c5:56:45:28:3d:35:7d:63:71:41:66:48:70:35:50:e5:95:
a7:62:df:b2:50:ff:41:c7:6d:2f:f1:8a:68:ae:4b:c3:70:06:
84:6a:c9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:25 2024 by rpki-client on console-ams.rpki-client.org