Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/n_c2oYHpVKdwGqMoBW8sSMNmruc.mft
File: n_c2oYHpVKdwGqMoBW8sSMNmruc.mft (raw, json)
Hash identifier: OHa2B4D1E+iO9pRbNhPK3lRNDkwiSBilH1bl3Zz0vkY=
Subject key identifier: DD:68:D7:38:58:2B:16:72:51:0E:39:4D:B5:DC:FD:75:55:BC:3D:BA
Authority key identifier: 9F:F7:36:A1:81:E9:54:A7:70:1A:A3:28:05:6F:2C:48:C3:66:AE:E7
Certificate issuer: /CN=9ff736a181e954a7701aa328056f2c48c366aee7
Certificate serial: 018B897818ACE00C214E7ECD674F88742428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_c2oYHpVKdwGqMoBW8sSMNmruc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/n_c2oYHpVKdwGqMoBW8sSMNmruc.mft
Manifest number: 0867
Signing time: Wed 01 Nov 2023 06:00:31 +0000
Manifest this update: Wed 01 Nov 2023 06:00:31 +0000
Manifest next update: Thu 02 Nov 2023 06:00:31 +0000
Files and hashes: 1: gxFVhrx4nBeezrD_0CZcQDnmBU4.roa (hash: HTOBs/HSMcv7mB/KLG4ZxM3B3Sy4nDZSVPr1yspTNgk=)
2: n_c2oYHpVKdwGqMoBW8sSMNmruc.crl (hash: yI4mEODem/T5pVGhgoO06VsZ1BX0HENj0QR2jne2Jp8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:78:18:ac:e0:0c:21:4e:7e:cd:67:4f:88:74:24:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff736a181e954a7701aa328056f2c48c366aee7
Validity
Not Before: Nov 1 06:00:31 2023 GMT
Not After : Nov 2 06:00:31 2023 GMT
Subject: CN=dd68d738582b1672510e394db5dcfd7555bc3dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:70:84:1a:0d:66:ed:5a:ef:a9:ec:5d:53:
9b:be:17:5b:3a:b6:2a:40:07:80:67:f9:74:9b:f3:
e0:ca:63:c3:48:12:1e:dd:89:5f:d9:56:5c:82:a4:
72:68:c0:c3:d8:90:90:e3:3a:7e:1f:e8:8f:0f:6e:
55:33:03:87:3d:92:61:db:26:e8:bb:b4:87:54:58:
61:4d:ec:23:f5:6a:23:9b:e3:10:60:7f:6c:5e:36:
48:ea:ac:21:d7:39:11:6a:32:4c:8b:90:d8:ef:80:
5c:82:60:30:d5:40:78:91:ef:85:8f:d9:85:18:50:
9c:6c:6f:30:52:0e:aa:88:80:9b:c8:9a:27:b1:03:
cd:f1:8c:60:6e:8d:35:73:b5:55:a7:fa:22:f1:be:
3d:6e:4a:91:92:49:f6:eb:97:14:87:3a:c3:47:1c:
dc:43:72:96:f6:10:1f:45:bb:1e:1f:75:0f:70:38:
dd:3d:bc:d2:4b:c9:92:a6:81:6f:83:99:40:ec:3a:
6b:8b:b6:3f:37:78:74:0e:3b:04:9d:e9:e7:a0:37:
2f:e9:b6:03:cc:cd:59:02:d2:a4:3b:ad:75:c3:e7:
75:5b:2c:e6:93:38:b5:8a:e3:b9:5b:d3:d3:9e:e7:
77:54:ca:d7:39:26:23:ca:aa:e0:12:79:82:cb:e2:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:D7:38:58:2B:16:72:51:0E:39:4D:B5:DC:FD:75:55:BC:3D:BA
X509v3 Authority Key Identifier:
keyid:9F:F7:36:A1:81:E9:54:A7:70:1A:A3:28:05:6F:2C:48:C3:66:AE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_c2oYHpVKdwGqMoBW8sSMNmruc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/n_c2oYHpVKdwGqMoBW8sSMNmruc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e40697-7a48-42db-8b66-1bdb07875d12/1/n_c2oYHpVKdwGqMoBW8sSMNmruc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:13:39:9c:a6:35:64:1d:8b:6c:26:1e:d3:46:8e:04:fa:
ff:1a:69:44:d1:5f:23:45:67:e9:ce:9e:65:0e:b3:5d:8f:48:
09:43:cc:e2:b1:f6:bb:7a:08:2b:66:cd:d7:da:c4:80:a1:7b:
fd:0e:0f:73:7f:1c:c1:83:ab:16:c0:d3:48:20:02:a5:7c:7a:
28:1e:ef:38:30:77:c5:5c:19:15:ef:f4:0d:96:4e:93:16:90:
4d:55:05:e8:bd:8a:1f:7d:55:ba:25:e2:aa:aa:b9:60:3a:92:
59:7d:70:69:3c:5d:a0:ab:45:38:48:3b:b6:ab:58:53:2b:ed:
82:e4:6d:27:89:90:cf:af:a5:6c:2d:ac:35:8a:14:f2:6d:de:
df:0d:27:d6:7e:d8:5c:6c:a6:88:12:7f:80:9e:a1:a3:cc:dd:
cd:0e:eb:b0:6e:1b:73:c4:ff:1d:97:3e:06:36:61:dc:59:d8:
a4:86:57:89:2e:d7:6e:e7:50:e1:f6:5d:ac:15:63:c3:06:3e:
51:ce:52:9c:0c:93:92:a2:a3:35:37:4b:a0:de:01:d6:fd:ee:
45:23:36:59:8c:6e:40:71:2a:2e:b5:60:ab:ca:49:c2:69:4e:
06:8c:70:29:5e:90:41:d1:60:fa:f9:b4:39:80:8b:a8:c3:e9:
02:b9:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:39:05 2023 by rpki-client on console-ams.rpki-client.org