Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft
File: gtB-spT0BQdjLzcAik1HtpgxET4.mft (raw, json)
Hash identifier: 9hVihuiCCxMjtOgbT1UJ9rAHdCZdwsVUT6BPOfhUw0U=
Subject key identifier: 34:88:EF:3F:4E:CB:95:BB:4C:D8:70:F0:79:2F:A0:05:EF:5B:A0:42
Authority key identifier: 82:D0:7E:B2:94:F4:05:07:63:2F:37:00:8A:4D:47:B6:98:31:11:3E
Certificate issuer: /CN=82d07eb294f40507632f37008a4d47b69831113e
Certificate serial: 018AED0B628AB08DF8D83CA3A55CC4886249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtB-spT0BQdjLzcAik1HtpgxET4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft
Manifest number: 0856
Signing time: Sun 01 Oct 2023 21:01:00 +0000
Manifest this update: Sun 01 Oct 2023 21:01:00 +0000
Manifest next update: Mon 02 Oct 2023 21:01:00 +0000
Files and hashes: 1: VpWZhBhyeCu8eVYqRL1VKSpjKlg.roa (hash: vojTgDkjM/L9uS5O8cVw0AElshLQkkWUGAIZs2b8ceY=)
2: gtB-spT0BQdjLzcAik1HtpgxET4.crl (hash: bA0ATYUmteOQHYeC6atT2sfYQk+yZHrXfqgy5IrR/qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:0b:62:8a:b0:8d:f8:d8:3c:a3:a5:5c:c4:88:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d07eb294f40507632f37008a4d47b69831113e
Validity
Not Before: Oct 1 21:01:00 2023 GMT
Not After : Oct 2 21:01:00 2023 GMT
Subject: CN=3488ef3f4ecb95bb4cd870f0792fa005ef5ba042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:41:6d:96:48:e5:5c:0c:f2:2d:be:8e:e0:
a5:c2:ae:65:bb:1c:76:f2:fd:af:33:d4:c2:e6:29:
90:12:36:09:2e:cd:26:4b:5f:ad:cd:90:b7:08:56:
70:75:73:b8:50:be:bb:35:32:1f:bd:ab:01:b0:1f:
b3:9f:92:88:fe:e2:fe:58:9a:b0:1b:e2:d2:35:78:
65:04:cb:a2:3d:93:87:e2:aa:9f:31:6d:75:da:b5:
ed:0d:cd:36:8c:d5:bb:a1:63:0f:9d:b4:d7:b4:4e:
24:bd:b4:ba:a7:b6:a4:7b:d7:4a:56:61:45:62:1e:
8f:88:25:b8:cc:2e:4b:34:e5:b4:ae:3b:bd:2f:47:
2b:89:6e:44:9b:4f:6a:df:ca:7e:eb:03:28:c7:c6:
20:2f:f4:de:c5:f3:df:df:97:fa:5a:b0:c2:47:c1:
64:70:3e:2f:47:4a:da:ea:24:fe:71:65:2d:60:65:
b3:f5:31:08:7b:5a:49:d5:8c:38:09:bb:f3:63:6c:
72:9b:c8:f1:8c:a8:5d:81:3d:25:84:ce:41:63:c6:
aa:fb:3b:75:76:ec:6a:2e:ce:d8:8d:fd:3f:d3:82:
59:f7:7d:59:31:50:9d:d7:9e:9d:87:90:78:b8:01:
e4:d0:29:6c:87:db:0e:64:3b:46:ab:14:45:f2:2f:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:EF:3F:4E:CB:95:BB:4C:D8:70:F0:79:2F:A0:05:EF:5B:A0:42
X509v3 Authority Key Identifier:
keyid:82:D0:7E:B2:94:F4:05:07:63:2F:37:00:8A:4D:47:B6:98:31:11:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtB-spT0BQdjLzcAik1HtpgxET4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:86:c8:c1:a4:1e:71:7b:ca:fd:19:a0:a7:13:37:94:1f:28:
ba:ef:d5:6b:2a:be:0b:48:06:9b:8b:45:ea:33:9c:9f:8a:47:
7c:16:0c:79:f0:27:e4:de:53:69:20:f9:02:3e:29:a0:5f:5b:
fe:60:26:4f:fb:45:8f:6a:44:ce:3f:8e:97:d5:6d:30:6b:ea:
35:ae:de:3b:b3:62:f9:bf:3e:48:32:b5:c2:a5:59:b2:e6:6b:
fb:16:28:b1:a8:8d:89:bb:0b:72:26:e0:15:88:66:1d:d5:1a:
a4:3f:0f:fb:66:66:ec:58:42:53:a6:e9:02:e6:18:2e:27:38:
67:46:d8:17:a4:ae:10:b2:02:19:89:c1:51:74:b4:d1:d0:00:
17:b4:3d:38:a6:da:58:b0:12:35:cf:67:44:a8:d6:e8:f9:a4:
41:20:1d:75:74:94:e1:3b:d7:e4:6c:a6:fa:a5:8f:56:4a:a3:
55:27:a2:73:b5:4b:69:bf:22:57:18:45:7a:78:33:32:db:35:
6a:01:b7:72:62:6c:b2:e2:5d:81:5b:0f:3a:5b:1d:c7:22:a2:
ea:d3:d3:65:b3:29:31:82:e1:2c:4f:29:18:de:74:15:61:22:
40:03:49:29:0e:14:67:57:a1:ff:71:6e:55:05:87:4c:54:81:
b6:5b:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 06:55:05 2023 by rpki-client on console-ams.rpki-client.org