Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.mft
File: _ZCSc4QbUKgevSH1ygEQ_O7h_z0.mft (raw, json)
Hash identifier: KJScOcN4rm1VOt3u4P6jfbjZTBsGfaEpaR4mTteMwoo=
Subject key identifier: 39:C3:25:18:64:D4:1C:17:46:28:03:CB:39:03:F1:04:53:ED:30:71
Authority key identifier: FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
Certificate issuer: /CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Certificate serial: 018E3252DFCC2DBC334BCC17E019CCA64319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.mft
Manifest number: 10C8
Signing time: Tue 12 Mar 2024 11:01:15 +0000
Manifest this update: Tue 12 Mar 2024 11:01:15 +0000
Manifest next update: Wed 13 Mar 2024 11:01:15 +0000
Files and hashes: 1: LSdRu0ACx0qmPHS1hspwEH6hwWs.roa (hash: d++ijdQKUNJzBEnJT7pxpUx5JaaAT31B4iYmspfMyTc=)
2: _ZCSc4QbUKgevSH1ygEQ_O7h_z0.crl (hash: unVz1vLSjYOrz2SbBLiTOvh+BRyApgRfscS+DfZK9g8=)
3: sSjF6s9LjxJgpBLBF5e2PM7TDbo.roa (hash: UVnowOKgt4ut1cGoEXzG65QpO4Ikq6Oipm5AkFJZSRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:52:df:cc:2d:bc:33:4b:cc:17:e0:19:cc:a6:43:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Validity
Not Before: Mar 12 11:01:15 2024 GMT
Not After : Mar 13 11:01:15 2024 GMT
Subject: CN=39c3251864d41c17462803cb3903f10453ed3071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:d5:8c:d3:a3:f0:ca:3d:b5:a1:7e:d8:5b:
8c:92:e7:6a:7b:61:e0:7f:7f:3b:1b:ee:97:3a:45:
82:29:6d:df:09:a7:1f:95:f8:03:a9:4a:f5:d2:ff:
37:89:35:30:84:49:26:ae:c1:07:9e:3a:27:d1:e4:
c2:73:53:51:a2:41:36:31:b4:04:4d:46:83:d6:da:
bc:da:7b:3c:fb:a7:a6:2d:17:56:72:9e:fd:2a:95:
02:82:f2:88:8c:5a:0f:98:ea:f4:35:fa:79:d9:7e:
a9:f9:5d:59:b0:43:14:10:c7:1a:75:94:e8:ba:b6:
1c:62:74:3d:44:bf:69:a3:17:90:77:bb:88:46:8c:
6f:97:78:c7:14:2e:3a:57:0e:98:9f:2e:ef:35:55:
3c:15:1d:ae:f9:76:e9:37:43:f9:79:50:30:47:33:
26:f5:01:30:87:8a:97:67:cf:02:91:44:30:bc:9a:
03:de:bd:be:a0:91:7d:da:07:0c:04:20:e7:03:9e:
c3:b5:90:54:45:38:59:5f:2b:fa:25:89:bd:a0:5d:
79:81:63:e4:26:9c:1d:91:78:e0:8a:33:80:f4:98:
34:68:1e:b0:26:36:c9:e5:7c:95:d3:a7:52:00:61:
db:d7:3a:0b:40:59:73:6d:1a:15:c1:7f:3f:a4:8b:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:25:18:64:D4:1C:17:46:28:03:CB:39:03:F1:04:53:ED:30:71
X509v3 Authority Key Identifier:
keyid:FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:78:47:20:cd:e8:2d:d3:00:e6:01:a2:a1:84:7e:65:a1:84:
02:a2:cc:cb:3a:2c:05:5a:01:02:20:a1:6e:66:97:9d:4d:9c:
42:ed:13:7a:98:e3:be:c1:e2:09:80:b7:28:71:cb:7a:51:06:
e8:15:b3:f0:8b:41:66:4c:33:46:46:11:89:0d:75:71:42:5d:
12:bb:2f:e9:4f:5e:46:6d:a6:3c:1a:bb:e5:90:fc:67:c2:bd:
30:53:2e:7e:2a:0f:a9:84:88:d6:d3:5a:fd:29:c8:90:55:aa:
69:f7:33:a7:5c:56:ad:0c:7e:c8:2a:25:dc:36:1d:27:fc:52:
84:87:cb:45:dd:7e:61:07:e6:9c:7f:c8:6e:49:1e:8b:e1:3f:
ff:72:35:10:24:26:d8:be:50:38:e0:f1:ca:6e:36:b6:1d:70:
2f:47:40:a8:28:3d:40:26:5a:aa:b0:57:ee:a2:c3:9d:3f:70:
0c:03:0d:e5:92:6c:bd:0c:ee:b2:87:6a:56:24:76:07:07:08:
5e:7f:e7:48:6c:67:f9:2a:eb:4a:ed:0c:9e:cf:78:0d:cb:f5:
d4:06:fb:8a:5f:73:4f:bc:3f:3a:b2:45:3a:a9:b1:b1:08:7a:
9c:b4:f2:23:40:5a:1c:f9:e8:53:fd:c6:0b:4f:0a:38:bc:02:
ba:71:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:02 2024 by rpki-client on console-ams.rpki-client.org