Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/NPLCp7jFIdrIwlpKSY5xZKky2iM.mft
File: NPLCp7jFIdrIwlpKSY5xZKky2iM.mft (raw, json)
Hash identifier: fcjtUyVQ1yhxhuQemDp/+b/VzUCi30FDPMDfRttFF+o=
Subject key identifier: DF:2D:46:3E:9D:DF:19:AA:49:36:4D:28:1E:17:FB:49:CC:E0:94:68
Authority key identifier: 34:F2:C2:A7:B8:C5:21:DA:C8:C2:5A:4A:49:8E:71:64:A9:32:DA:23
Certificate issuer: /CN=34f2c2a7b8c521dac8c25a4a498e7164a932da23
Certificate serial: 018C58527FAB2D89E08BAE0F70C6E9E08915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPLCp7jFIdrIwlpKSY5xZKky2iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/NPLCp7jFIdrIwlpKSY5xZKky2iM.mft
Manifest number: 0FD3
Signing time: Mon 11 Dec 2023 10:00:50 +0000
Manifest this update: Mon 11 Dec 2023 10:00:50 +0000
Manifest next update: Tue 12 Dec 2023 10:00:50 +0000
Files and hashes: 1: NPLCp7jFIdrIwlpKSY5xZKky2iM.crl (hash: y2nucvUnZUSlCYJbDvZdHgAWJdfqOyQwNfungRj5u0w=)
2: xKl_XVeet0--iVMckZkTYLrEg30.roa (hash: M9ajBwSt12zQk0ZAt4+4IFQreeYqRa9LDb0ZyFuGwfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:52:7f:ab:2d:89:e0:8b:ae:0f:70:c6:e9:e0:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f2c2a7b8c521dac8c25a4a498e7164a932da23
Validity
Not Before: Dec 11 10:00:50 2023 GMT
Not After : Dec 12 10:00:50 2023 GMT
Subject: CN=df2d463e9ddf19aa49364d281e17fb49cce09468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:24:82:02:d5:4b:a5:f4:63:ce:54:f8:eb:
7c:22:73:c7:fd:b7:09:10:27:15:fb:e3:46:23:75:
70:1a:5c:a1:a4:c9:51:a0:b5:18:f8:fd:17:5d:f6:
54:75:a3:54:0a:0d:d9:7e:e9:fc:03:3d:e1:fc:53:
dc:2a:f1:d4:c6:90:b7:a5:4f:38:0d:4d:e7:19:f2:
e1:eb:a8:ff:23:4d:9f:66:7a:01:a2:9c:66:e1:ab:
4d:fc:59:c3:21:7f:89:c5:95:01:fc:83:db:c0:33:
91:84:21:2b:57:19:41:9d:ee:96:ec:2b:a8:a7:37:
33:34:f0:56:0e:e8:5a:26:10:ad:6a:f9:57:5e:aa:
f4:6c:58:62:55:8e:32:6f:a9:cd:36:f7:5f:61:38:
4b:89:3f:fb:51:00:4d:d6:fa:d3:4d:bd:13:31:39:
a9:70:cc:b4:33:5f:90:29:e5:82:8e:74:05:45:31:
da:5e:4f:5b:fd:e6:25:e9:c0:bf:73:2f:43:c3:df:
c4:7d:1a:d1:9a:7e:85:ee:9b:96:25:e9:47:e8:20:
a3:82:68:6e:38:f9:2c:45:97:6e:6f:49:3f:3c:76:
31:21:bb:f3:ba:2a:18:bd:ea:d5:5a:45:99:d3:29:
19:fc:16:80:44:47:9b:58:dd:21:7e:5f:d9:be:b6:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:46:3E:9D:DF:19:AA:49:36:4D:28:1E:17:FB:49:CC:E0:94:68
X509v3 Authority Key Identifier:
keyid:34:F2:C2:A7:B8:C5:21:DA:C8:C2:5A:4A:49:8E:71:64:A9:32:DA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPLCp7jFIdrIwlpKSY5xZKky2iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/NPLCp7jFIdrIwlpKSY5xZKky2iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4f7deb-8831-4db4-b92e-c619877be219/1/NPLCp7jFIdrIwlpKSY5xZKky2iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7e:e9:c8:f3:0d:cf:f7:07:0a:59:c1:83:51:60:19:6b:5e:
61:d5:f3:37:4c:e0:82:91:d8:02:8e:54:2f:ef:9e:81:70:dd:
07:28:e1:8b:f6:f0:31:84:7b:19:82:2d:91:59:d2:be:00:3a:
7c:39:3e:a7:cb:8f:fe:9c:d2:74:47:4c:53:f5:a3:02:28:7e:
62:cf:6b:f6:42:63:84:01:ad:53:21:4c:47:34:97:ae:46:0a:
c1:e9:7d:20:88:91:bb:91:ea:ae:1e:53:89:75:fc:60:25:37:
0b:a7:74:d9:03:f1:9c:18:9c:ae:1e:af:7a:2d:6b:13:05:b9:
1d:eb:d5:a6:f5:9b:4c:1c:c1:a3:38:02:81:34:72:4d:68:28:
71:4f:84:d3:5d:64:b8:73:6e:b2:82:c0:2e:f4:d6:d6:16:f8:
32:20:ed:8f:12:62:a7:14:fb:3d:90:de:8a:f8:e3:86:3b:31:
87:56:57:78:34:de:54:c3:f5:52:70:7b:9c:1e:8b:ff:d7:79:
56:5a:66:e1:f8:bc:3f:bc:ee:80:5c:a8:bc:79:5d:4e:4a:f9:
9b:89:d3:e9:bd:56:5c:b2:47:36:4c:d7:71:38:d3:e8:c9:ca:
56:bf:e3:18:03:45:15:51:53:22:c4:b6:3f:ff:97:f7:9b:af:
8b:15:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:33 2024 by rpki-client on console-fra.rpki-client.org