Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.mft
File: amOs49Gr9p9bAhSWjXfp_7zWCW8.mft (raw, json)
Hash identifier: xyw32ci/FtTFPaUJBSwp+QqIQH5f6yikD29QbyeRDyM=
Subject key identifier: 56:FF:FF:7D:7F:56:A1:D2:9F:BA:53:8F:98:32:95:D3:32:AE:5B:41
Authority key identifier: 6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
Certificate issuer: /CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Certificate serial: 018BEBF5A9F05B08B4FD1EE53019CCB5B16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.mft
Manifest number: 0858
Signing time: Mon 20 Nov 2023 09:00:27 +0000
Manifest this update: Mon 20 Nov 2023 09:00:27 +0000
Manifest next update: Tue 21 Nov 2023 09:00:27 +0000
Files and hashes: 1: CbbsF2z8-P9GhW3fvWqDwcF6SEg.roa (hash: z6u/W9dRz37g5+y7jyUMfeGWTlCqDJqHlvwuZzvUIrE=)
2: amOs49Gr9p9bAhSWjXfp_7zWCW8.crl (hash: ioAUAjbK6LAQKWqMRFMabrGLmPhf+Zi7SHCCh7LlOlQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:f5:a9:f0:5b:08:b4:fd:1e:e5:30:19:cc:b5:b1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a63ace3d1abf69f5b0214968d77e9ffbcd6096f
Validity
Not Before: Nov 20 09:00:27 2023 GMT
Not After : Nov 21 09:00:27 2023 GMT
Subject: CN=56ffff7d7f56a1d29fba538f983295d332ae5b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b5:f2:67:f9:b3:af:0d:d8:5b:92:a6:d9:ef:
c5:c3:e8:bf:05:cc:38:df:16:50:a3:46:47:3d:04:
b3:8e:bf:a5:a2:da:29:84:a2:35:79:4c:c8:88:c1:
ae:ad:81:7d:9f:7d:4d:7f:b7:d6:c8:c9:b0:b1:29:
88:db:8d:87:aa:a2:64:3c:02:bc:a8:d6:78:48:3d:
da:17:9d:0a:d7:0b:81:42:77:d9:61:59:ff:25:e1:
d8:c4:17:01:32:0e:6c:39:8b:9e:d6:87:0a:cb:6f:
e5:75:c2:77:5e:7b:dd:ac:ac:10:6c:34:b2:6c:1f:
27:f2:1f:f4:40:d8:dd:3e:73:d0:80:ba:af:11:c4:
86:16:ff:a1:aa:a4:53:dd:7d:2c:4e:06:38:1b:0a:
da:cf:a2:9c:7e:27:ba:1d:48:ab:d8:26:6f:42:38:
1f:8f:96:68:d9:fa:46:28:c4:fb:2b:35:72:65:5a:
48:5d:7c:d2:dc:87:19:97:b8:2d:9e:86:59:08:23:
c4:3b:5a:1d:35:9c:4d:22:16:3d:fa:a1:6c:95:4f:
22:7b:8a:07:b1:67:b5:c3:b8:6b:2a:c1:4a:dc:09:
0a:43:f0:b0:d9:a3:1c:52:3d:2c:56:37:62:37:d4:
0e:08:7b:61:86:28:c1:a0:53:3c:a0:d0:82:68:7c:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FF:FF:7D:7F:56:A1:D2:9F:BA:53:8F:98:32:95:D3:32:AE:5B:41
X509v3 Authority Key Identifier:
keyid:6A:63:AC:E3:D1:AB:F6:9F:5B:02:14:96:8D:77:E9:FF:BC:D6:09:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amOs49Gr9p9bAhSWjXfp_7zWCW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f0e1c4-c25d-4a8a-982b-5a87cfda3891/1/amOs49Gr9p9bAhSWjXfp_7zWCW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:0d:f8:8a:51:5c:d7:7c:70:c5:5b:fc:ac:12:f0:c5:d8:
34:25:41:18:ac:8d:71:3c:2c:a9:b0:f6:70:c0:70:18:be:81:
c0:ec:1a:ec:67:40:73:da:96:c8:fe:79:ab:52:d9:8d:5f:79:
9b:b1:9f:0e:22:ff:b1:84:09:7f:14:14:fb:8a:8f:31:87:61:
a1:88:25:7d:27:47:7a:9b:50:7a:fc:9e:d5:d1:bf:d1:f4:fb:
96:c1:2b:fd:4a:a7:0d:c3:1b:0f:eb:55:80:b6:30:d2:dd:85:
b4:f6:cc:81:7a:90:63:7f:1a:c4:77:c9:e9:2d:e6:a5:f1:8c:
12:86:98:10:70:71:ab:1a:20:fd:30:ce:ed:e4:f4:88:34:bf:
69:9e:3b:83:02:19:a0:4c:47:96:7c:9d:2b:48:22:45:40:17:
1c:d5:15:a3:e5:52:a7:a0:1a:5a:eb:79:4f:a8:b5:f7:3d:c1:
78:2a:40:37:f2:49:40:e0:3b:b8:0d:46:8b:09:05:0f:d1:0c:
b5:df:6b:2a:6b:d4:f6:21:6d:63:c0:0c:29:28:47:b7:91:ff:
4c:c7:4f:4f:2d:ba:e3:0d:de:67:a3:83:33:c8:50:04:a9:df:
af:5b:1d:6a:ec:46:f9:24:70:9a:2e:88:1b:42:b7:f1:20:48:
5f:69:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:16 2025 by rpki-client