Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/383b38-6786-4c11-aaea-7e70ff214871/1/r0xUNskUirOfO5CXDiwycrLgxsI.mft
File: r0xUNskUirOfO5CXDiwycrLgxsI.mft (raw, json)
Hash identifier: /FZwUhoHHsV2QsOfs5djf4rNp16qisbpJdHuCcruBFY=
Subject key identifier: 6F:29:5D:D3:E1:17:20:67:DD:9E:D5:C2:64:C0:9A:47:80:DE:8C:BA
Authority key identifier: AF:4C:54:36:C9:14:8A:B3:9F:3B:90:97:0E:2C:32:72:B2:E0:C6:C2
Certificate issuer: /CN=af4c5436c9148ab39f3b90970e2c3272b2e0c6c2
Certificate serial: 018C678E3E6B0AE03ED0047CAA3BB4D14CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0xUNskUirOfO5CXDiwycrLgxsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/383b38-6786-4c11-aaea-7e70ff214871/1/r0xUNskUirOfO5CXDiwycrLgxsI.mft
Manifest number: 084B
Signing time: Thu 14 Dec 2023 09:00:24 +0000
Manifest this update: Thu 14 Dec 2023 09:00:24 +0000
Manifest next update: Fri 15 Dec 2023 09:00:24 +0000
Files and hashes: 1: NEGIHLIxAEpQ6XNAADA1l4nq2uc.roa (hash: xeh+5IN+Iv4MXHqYmSx7fOcmzEAV688D6WxUsxLqh4g=)
2: r0xUNskUirOfO5CXDiwycrLgxsI.crl (hash: +Di0zIazfYwBPh27ObGKTD2KIYfxZdgnyu8SOGV+qMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:8e:3e:6b:0a:e0:3e:d0:04:7c:aa:3b:b4:d1:4c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4c5436c9148ab39f3b90970e2c3272b2e0c6c2
Validity
Not Before: Dec 14 09:00:24 2023 GMT
Not After : Dec 15 09:00:24 2023 GMT
Subject: CN=6f295dd3e1172067dd9ed5c264c09a4780de8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:de:ef:e8:55:7d:e4:12:39:57:e3:e0:57:
3c:2f:09:f7:23:3c:08:d6:d2:0a:56:fc:81:22:6c:
aa:24:87:6e:ac:9d:60:16:e9:07:12:93:d8:b1:78:
db:a3:3a:92:c7:0f:b9:74:95:3d:dd:33:35:bc:b7:
be:64:03:8d:b3:3f:21:2d:7b:06:fe:b7:59:37:3f:
09:61:db:c8:60:5f:93:8a:4f:d4:e5:80:cc:d0:1b:
b0:cb:11:9a:f9:e1:38:0e:97:ef:9e:db:eb:a2:66:
18:bc:ec:7d:c3:fd:f1:6d:a6:87:f6:97:2c:f7:e5:
f7:6c:7d:17:c5:9e:4e:64:de:e4:11:96:c8:76:9b:
df:1e:34:56:1b:7a:f1:43:ff:89:8d:6f:07:f7:59:
b1:da:83:43:88:3a:85:af:b6:7f:bf:e4:b1:39:3a:
78:9b:a5:c2:0c:42:60:1f:de:0d:28:96:78:54:14:
3e:71:1b:51:89:c6:bc:b7:8a:89:c0:4a:9d:26:f3:
c1:78:27:0d:dd:5d:0b:da:e9:51:60:59:ec:73:b0:
a0:ce:d6:03:d5:1a:2c:7e:bb:27:f1:6f:17:ee:c2:
80:d7:66:a1:0b:74:94:61:b3:65:90:42:a6:72:b5:
e5:61:56:88:a4:68:d5:51:03:ba:32:68:0e:74:4f:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:29:5D:D3:E1:17:20:67:DD:9E:D5:C2:64:C0:9A:47:80:DE:8C:BA
X509v3 Authority Key Identifier:
keyid:AF:4C:54:36:C9:14:8A:B3:9F:3B:90:97:0E:2C:32:72:B2:E0:C6:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0xUNskUirOfO5CXDiwycrLgxsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/383b38-6786-4c11-aaea-7e70ff214871/1/r0xUNskUirOfO5CXDiwycrLgxsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/383b38-6786-4c11-aaea-7e70ff214871/1/r0xUNskUirOfO5CXDiwycrLgxsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5e:6e:f1:96:01:db:71:df:f6:4c:ef:73:76:92:89:97:d5:
3a:78:3e:8e:ed:fd:67:29:7a:95:81:fe:e5:c9:fe:a6:50:c8:
76:e1:1c:04:c1:95:4b:a6:18:58:19:77:cd:a8:cb:f9:23:16:
74:72:45:ef:b7:c5:96:b8:70:58:14:5e:c2:e4:15:4b:5e:b3:
08:dd:3e:0f:90:65:6b:b1:b5:24:3b:5c:ac:ce:1e:cc:cb:77:
5d:c8:cb:66:85:34:63:41:56:42:00:47:10:ed:ab:e4:81:bf:
1a:59:3d:a1:f8:34:4c:d3:15:d9:1b:0c:08:f0:78:3e:97:17:
48:d1:5c:4f:86:77:c4:ee:4b:6a:67:92:04:83:44:5b:6e:a5:
48:59:01:6d:68:79:43:65:5c:48:85:22:fb:f6:7a:30:9f:c2:
dd:77:19:48:9e:09:2f:22:34:51:2c:3e:16:50:52:73:f2:5b:
98:06:83:6e:1a:ad:89:aa:d6:a2:55:82:84:9b:c5:6a:fa:a8:
c8:76:e6:7d:d2:bd:83:8b:99:22:28:0c:d6:58:28:66:25:d2:
3a:ad:d9:44:0a:bb:81:5a:7c:f7:8c:8d:a6:e3:12:37:97:73:
5d:59:7f:66:f8:68:ec:a0:b6:a4:fb:40:0d:ab:5a:f5:a8:73:
0c:2c:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:02 2024 by rpki-client on console-fra.rpki-client.org