Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/_-FHlMZtXza5IvNZVCC3isG3hXg.mft
File: _-FHlMZtXza5IvNZVCC3isG3hXg.mft (raw, json)
Hash identifier: T5JNYwFNTKFxYt4qA19Qm6OPzXq6r5/WTWhKfXVNzBY=
Subject key identifier: 15:A9:10:C9:00:80:5D:00:A9:88:8A:D2:8E:38:FF:85:4C:0B:5F:52
Authority key identifier: FF:E1:47:94:C6:6D:5F:36:B9:22:F3:59:54:20:B7:8A:C1:B7:85:78
Certificate issuer: /CN=ffe14794c66d5f36b922f3595420b78ac1b78578
Certificate serial: 018C5740514FB4DBB175F00088FD09CB6DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-FHlMZtXza5IvNZVCC3isG3hXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/_-FHlMZtXza5IvNZVCC3isG3hXg.mft
Manifest number: 0FD2
Signing time: Mon 11 Dec 2023 05:01:21 +0000
Manifest this update: Mon 11 Dec 2023 05:01:21 +0000
Manifest next update: Tue 12 Dec 2023 05:01:21 +0000
Files and hashes: 1: 5tQBIguk56OfZaSvxuYLUkE2XUg.roa (hash: gZnQvXhWEqq5IN5BFInnEJ9FYOZexGpTRAc3rqNDjPQ=)
2: _-FHlMZtXza5IvNZVCC3isG3hXg.crl (hash: j0B4xL1i8rFksmYaMfiDGSR8oDec2RUzp8d5S2Icav0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:40:51:4f:b4:db:b1:75:f0:00:88:fd:09:cb:6d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe14794c66d5f36b922f3595420b78ac1b78578
Validity
Not Before: Dec 11 05:01:21 2023 GMT
Not After : Dec 12 05:01:21 2023 GMT
Subject: CN=15a910c900805d00a9888ad28e38ff854c0b5f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:15:dc:85:1c:e9:41:dd:69:16:7a:c4:57:9e:
ab:fc:32:63:46:f2:e9:29:49:8a:46:d4:bb:01:9f:
3d:37:75:3c:18:eb:94:89:7b:5b:88:d6:5e:c2:67:
4a:70:a3:3a:7b:91:e0:6e:cb:6f:85:f7:1e:68:73:
a8:19:d3:86:2c:d7:b6:6d:44:95:46:4d:13:35:98:
b3:aa:21:b2:c3:65:7e:46:72:ab:24:e4:db:c5:5b:
b5:9e:b6:69:cc:33:57:5a:17:38:a4:6c:18:10:35:
e7:e6:30:d4:27:80:dc:60:0b:93:25:86:50:38:b1:
be:47:09:ad:69:d8:bb:0f:e7:d0:2a:83:d0:7d:1d:
0d:a1:03:4a:32:05:8d:6f:ec:a7:6e:ab:20:86:7c:
53:af:e1:84:0d:8a:7d:d3:41:8f:41:ca:30:11:a5:
94:22:89:d4:30:3c:33:67:29:76:ef:90:68:1c:2c:
b0:24:ab:e0:95:26:33:37:1e:15:28:0b:98:0c:5e:
93:b8:5b:63:e7:f5:03:4b:22:da:bc:6e:72:71:19:
16:0a:ac:3e:55:ef:43:c9:db:26:a4:a3:38:4e:f5:
80:62:af:49:48:af:61:16:0d:41:cb:d8:74:0c:66:
d5:11:73:75:bb:af:b2:0f:52:5d:0f:09:a6:94:39:
f5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:10:C9:00:80:5D:00:A9:88:8A:D2:8E:38:FF:85:4C:0B:5F:52
X509v3 Authority Key Identifier:
keyid:FF:E1:47:94:C6:6D:5F:36:B9:22:F3:59:54:20:B7:8A:C1:B7:85:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-FHlMZtXza5IvNZVCC3isG3hXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/_-FHlMZtXza5IvNZVCC3isG3hXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/006918-6d30-461a-9c1d-4479e475975b/1/_-FHlMZtXza5IvNZVCC3isG3hXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f2:e0:69:cb:dc:0c:e4:e6:7e:6b:fc:b7:9e:af:86:8a:bd:
2a:f0:bd:7d:7f:2b:d9:15:02:d3:20:f5:41:d6:c9:4f:a1:bd:
34:b6:cd:f1:70:58:03:c8:43:25:76:e0:f1:ae:bb:e1:44:fc:
b6:7e:46:8d:4c:8a:18:1e:fc:e9:f1:be:ec:fb:2a:12:04:71:
12:63:09:24:a1:e1:0c:70:f3:e5:54:d0:5a:37:a5:ab:40:b0:
87:17:90:91:10:3e:3d:71:d7:5f:2e:6f:6e:06:f8:1f:73:c3:
41:b8:f4:72:8d:20:96:fb:03:15:db:b0:1e:d0:c1:b7:a1:74:
b3:dc:86:7b:e4:2a:41:3b:7c:96:ec:84:6a:2d:12:78:02:aa:
95:65:41:0a:5d:d1:97:a1:67:62:db:62:b2:5b:26:b8:f6:a2:
b8:91:af:d2:3f:1d:5f:4b:9a:15:0f:48:2f:91:f4:2e:9d:9e:
08:d8:5c:84:12:85:38:bb:87:a6:62:9e:87:ed:5d:93:de:63:
76:62:8f:4a:03:cd:96:ab:e0:9e:51:de:32:6b:a8:19:3d:0a:
04:71:38:4b:93:2e:61:30:6f:90:b7:eb:48:aa:ef:ed:2e:a6:
29:62:01:a2:20:e8:2a:39:56:e7:cb:43:b6:f7:88:40:57:67:
1d:ec:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:00 2024 by rpki-client on console-ams.rpki-client.org