Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/hx2bGCHAqdFiK93fnsDJGOkqQ34.mft
File: hx2bGCHAqdFiK93fnsDJGOkqQ34.mft (raw, json)
Hash identifier: MNveGSPbZy24je235JmE8yxTgNeMesRzwcSMw695qz8=
Subject key identifier: 10:C7:BA:22:F8:04:F5:7D:21:65:70:CA:03:DB:C9:6E:5B:57:CE:21
Authority key identifier: 87:1D:9B:18:21:C0:A9:D1:62:2B:DD:DF:9E:C0:C9:18:E9:2A:43:7E
Certificate issuer: /CN=871d9b1821c0a9d1622bdddf9ec0c918e92a437e
Certificate serial: 018DEE8494EF24DE801817C6A34C28CE7A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hx2bGCHAqdFiK93fnsDJGOkqQ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/hx2bGCHAqdFiK93fnsDJGOkqQ34.mft
Manifest number: 0D80
Signing time: Wed 28 Feb 2024 07:01:22 +0000
Manifest this update: Wed 28 Feb 2024 07:01:22 +0000
Manifest next update: Thu 29 Feb 2024 07:01:22 +0000
Files and hashes: 1: hx2bGCHAqdFiK93fnsDJGOkqQ34.crl (hash: tuK1lXV0nBe+dKhcT46t9P85OQ5kpoHMc4kRUhy4V8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:84:94:ef:24:de:80:18:17:c6:a3:4c:28:ce:7a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871d9b1821c0a9d1622bdddf9ec0c918e92a437e
Validity
Not Before: Feb 28 07:01:22 2024 GMT
Not After : Feb 29 07:01:22 2024 GMT
Subject: CN=10c7ba22f804f57d216570ca03dbc96e5b57ce21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:8a:4e:86:02:ef:0d:0e:c7:f1:6b:1c:3e:
78:f7:2d:34:21:57:e2:51:5f:fe:44:11:46:ee:7b:
ca:98:08:d3:b3:b6:f2:31:1a:ae:8c:e3:c8:da:b9:
66:d3:ef:8c:6a:15:c3:c7:4e:c6:37:cc:d6:54:7d:
2f:58:b5:ab:99:5f:29:c4:6e:33:27:41:14:03:5e:
e9:b5:aa:8b:7c:a3:d6:e9:09:1e:a8:b4:3f:01:d7:
15:81:94:5f:c4:cd:d2:e5:c3:5b:85:7b:a7:1d:9d:
e9:b5:18:b5:9b:61:32:af:30:8d:c3:7e:4d:c3:ac:
51:8f:aa:70:68:75:27:58:a9:35:d0:ba:d4:36:ee:
5c:fb:25:e3:02:54:de:0c:09:7c:bb:d6:5b:b9:7b:
c3:bd:0a:a4:52:49:20:6c:b2:d6:00:1a:41:25:a0:
d7:27:25:fa:ab:e6:19:7b:b7:84:30:22:f3:04:b1:
46:dd:b2:af:d1:b3:f9:4a:39:2b:8a:28:76:d7:2e:
b0:6e:6d:c5:bb:d3:21:c0:2a:52:cf:4e:37:67:ef:
ac:41:aa:67:6e:78:b5:8c:1e:bc:4c:13:99:fb:36:
07:e0:80:97:8e:46:d8:51:11:61:99:8c:fc:ab:bb:
9c:f1:dc:8d:dc:cd:a9:06:92:fe:54:0d:25:5e:35:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:BA:22:F8:04:F5:7D:21:65:70:CA:03:DB:C9:6E:5B:57:CE:21
X509v3 Authority Key Identifier:
keyid:87:1D:9B:18:21:C0:A9:D1:62:2B:DD:DF:9E:C0:C9:18:E9:2A:43:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hx2bGCHAqdFiK93fnsDJGOkqQ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/hx2bGCHAqdFiK93fnsDJGOkqQ34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/hx2bGCHAqdFiK93fnsDJGOkqQ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:83:72:6c:ed:33:ab:f5:ee:b4:de:cf:a4:93:18:fc:17:9e:
b7:e6:b8:7f:6c:ca:91:a6:b4:5c:0c:b4:d9:83:ac:39:3e:05:
b0:b9:9c:89:17:29:49:ef:16:b1:53:82:6f:bc:6c:2f:57:aa:
ee:fb:f2:85:be:f2:ba:3b:d4:5c:dd:4b:e8:65:57:e9:22:7d:
1b:8b:28:9c:f4:0d:39:79:04:9d:ff:3b:52:8b:da:35:1d:0e:
48:9f:0e:cc:47:7b:71:92:b1:18:06:0f:97:8b:32:0a:a1:19:
fc:dc:19:22:37:54:ff:07:51:54:74:a7:02:11:47:e0:5e:79:
f6:82:04:22:30:51:7a:4b:de:68:9e:9d:9f:d2:77:bc:10:64:
7d:55:1d:77:f0:69:8f:e2:21:46:e4:2e:f2:81:9c:bb:87:b9:
06:40:63:68:34:44:86:d1:d2:d1:c7:9f:69:c9:91:61:c1:de:
61:86:c6:e1:d9:21:d7:85:1e:1a:a4:8a:59:66:91:20:48:c3:
a1:b5:37:89:ef:92:64:4d:a1:53:b5:0b:fd:fc:5d:f6:f1:b7:
25:ea:d5:2e:90:de:21:69:0d:ae:e7:90:fd:38:13:d8:88:95:
e8:4c:1c:cc:c6:20:b4:35:fb:b1:58:b5:51:07:34:e8:6d:27:
28:a4:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:05 2024 by rpki-client on console-ams.rpki-client.org