Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.mft
File: eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.mft (raw, json)
Hash identifier: eBZnFLfmrHtEkZQZAQ/mWOw6warM6S8f88nfHhXUk7k=
Subject key identifier: 51:E4:EB:0D:CA:C5:3E:C9:94:17:36:E5:C5:27:3C:58:2F:CE:68:C1
Authority key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Certificate issuer: /CN=787650d0951529b1a817232c12c42e49b889e1b8
Certificate serial: 0191B1BFEDE3957EA0653C09B01DEB6BDD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.mft
Manifest number: 0814
Signing time: Mon 02 Sep 2024 08:00:31 +0000
Manifest this update: Mon 02 Sep 2024 08:00:31 +0000
Manifest next update: Tue 03 Sep 2024 08:00:31 +0000
Files and hashes: 1: eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl (hash: GifQ0gvafKlT9IKfz+PFtH+25GqbTqszg5WJTV0SLHM=)
2: kfww1dGbJxM7SZR_q5E4l6ILXvI.roa (hash: 00rjQkYBujgcEinIIy4V9tMPi2mCFc8Bh3bBV9FpZJ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b1:bf:ed:e3:95:7e:a0:65:3c:09:b0:1d:eb:6b:dd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787650d0951529b1a817232c12c42e49b889e1b8
Validity
Not Before: Sep 2 08:00:31 2024 GMT
Not After : Sep 3 08:00:31 2024 GMT
Subject: CN=51e4eb0dcac53ec9941736e5c5273c582fce68c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:c0:b6:dc:f4:9a:b7:ba:15:a5:9b:08:07:
c6:93:2e:52:54:ef:ec:f9:b1:40:ca:a7:81:9e:79:
f4:b2:de:3f:df:39:92:ef:cc:f0:89:f0:20:b5:67:
c1:af:93:72:d4:8e:06:18:a5:b1:6a:af:8a:4a:b5:
2e:f1:97:8b:1b:6b:e1:77:11:26:3c:50:e5:c6:23:
88:0c:05:b9:14:18:be:7e:05:e0:de:68:60:f2:72:
8c:2d:ad:5d:ee:82:99:16:8b:71:20:fa:23:f7:11:
59:e0:cb:ff:bd:0e:f9:65:7e:0e:5c:e8:2f:9d:40:
a3:5d:f8:41:ac:ed:6b:95:1b:95:e3:8d:0d:51:c4:
2f:54:51:69:bb:9a:ed:60:1e:84:56:b9:72:68:9a:
cd:36:bc:25:d6:69:5a:47:62:1b:fc:b7:84:ef:0a:
19:cf:98:50:ec:3c:bc:7a:04:a9:34:99:99:02:a1:
7a:a9:e2:91:64:c2:b5:88:d5:f4:33:f2:1e:40:da:
92:bb:7d:31:13:24:1c:4c:35:6a:ec:c6:af:3e:d1:
7a:7b:dc:5b:90:fa:75:28:5f:e8:62:63:bd:6b:5a:
d6:27:6f:4f:b3:75:49:4f:ab:35:8d:ec:5e:1b:8d:
9e:d9:a3:7b:2b:f4:c1:a5:da:af:50:d9:6e:5a:c0:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E4:EB:0D:CA:C5:3E:C9:94:17:36:E5:C5:27:3C:58:2F:CE:68:C1
X509v3 Authority Key Identifier:
keyid:78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d5:c4:63:f6:ff:22:c5:78:44:e5:82:e5:d5:ee:06:6b:28:
47:81:cd:44:4d:dd:b8:0a:a4:12:0c:95:c8:62:a1:a7:bc:01:
72:92:5e:6a:77:41:7f:03:71:65:80:c5:e7:15:df:4b:91:d5:
ac:a1:02:5e:45:a3:be:9a:01:ca:16:9e:f4:09:62:0c:86:31:
33:3e:96:f1:4c:ac:54:5b:21:17:35:8f:69:66:cb:e3:17:22:
66:48:e1:5b:59:c3:89:c3:5e:ea:2f:c4:13:41:6d:6e:f2:3d:
cd:5b:ea:cb:2d:f2:1d:7b:4c:55:48:d7:b1:73:5a:c9:0f:bf:
f5:ec:00:9e:d0:9d:52:9c:8f:b4:90:93:88:93:fb:20:1b:aa:
b4:c0:c3:39:bc:d1:b7:fe:9a:71:33:ae:6d:a2:0d:b5:41:2c:
ae:df:38:5a:de:88:b6:f5:c6:20:46:05:e6:52:b3:a5:39:6f:
2e:94:a8:d1:96:46:16:97:3f:bd:2e:01:05:84:d8:58:de:06:
f5:9a:7f:05:05:f7:03:89:ce:c3:d3:96:16:d1:cb:ff:7b:d9:
79:47:8a:82:11:a3:da:1b:a6:97:33:36:7b:43:d2:07:0d:27:
5f:f7:1b:98:04:74:4e:d7:67:79:48:41:93:80:13:fb:33:b2:
bf:9c:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 18:31:11 2024 by rpki-client on console-ams.rpki-client.org