Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/1-4VWosC7PR7Ng8dU97lo9xNANT8.mft
File: 1-4VWosC7PR7Ng8dU97lo9xNANT8.mft (raw, json)
Hash identifier: lVketcfBlCZd/GxuCP1wL1eJGjTHPOPB8cffXc8pAic=
Subject key identifier: 22:0E:93:21:2C:EC:58:65:D8:8E:23:16:75:59:49:5A:9E:7A:71:D9
Authority key identifier: FB:85:56:A2:C0:BB:3D:1E:CD:83:C7:54:F7:B9:68:F7:13:40:35:3F
Certificate issuer: /CN=fb8556a2c0bb3d1ecd83c754f7b968f71340353f
Certificate serial: 0189E224A316352EEC8D04EB028039411F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-4VWosC7PR7Ng8dU97lo9xNANT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/1-4VWosC7PR7Ng8dU97lo9xNANT8.mft
Manifest number: 0473
Signing time: Fri 11 Aug 2023 01:09:59 +0000
Manifest this update: Fri 11 Aug 2023 01:09:59 +0000
Manifest next update: Sat 12 Aug 2023 01:09:59 +0000
Files and hashes: 1: 1-4VWosC7PR7Ng8dU97lo9xNANT8.crl (hash: mV3pOyrppEyf202gL0eYjeFVzmqsDAkZQGVg+sD/6qo=)
2: NQTt_HtxBCzrK-bZblncxLPyets.roa (hash: +niNy0LWT+hAFQqbWmv1VtMVE3/lk5Q83ZgjqqBPrSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e2:24:a3:16:35:2e:ec:8d:04:eb:02:80:39:41:1f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8556a2c0bb3d1ecd83c754f7b968f71340353f
Validity
Not Before: Aug 11 01:09:59 2023 GMT
Not After : Aug 12 01:09:59 2023 GMT
Subject: CN=220e93212cec5865d88e23167559495a9e7a71d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:6a:c7:60:13:d9:58:a1:43:2c:f7:09:51:
17:31:7c:4f:c7:01:8e:13:bf:cd:e3:49:9d:f3:41:
52:ba:8f:e3:59:af:15:8f:7b:51:66:e2:93:e8:c6:
71:66:1c:80:ef:9a:cf:c0:8d:ea:10:ff:d8:f3:ab:
e9:96:0c:70:ae:e7:73:1d:05:81:a7:bc:ec:51:e6:
ae:36:87:09:04:a9:96:0c:35:a4:14:cb:67:ab:56:
2d:4f:22:92:9a:94:21:d5:da:d4:d2:62:70:04:41:
bc:45:15:42:d3:91:61:1c:12:10:83:fb:8c:40:2c:
ba:45:6c:7d:e3:54:fa:bb:1f:f0:72:c9:e7:cf:c2:
82:24:f1:ce:4b:2e:9e:e9:a2:1e:a5:1a:b9:d2:13:
6f:f5:75:52:f6:aa:d7:ab:d8:ae:7f:cb:52:45:a1:
e7:48:3c:dc:f2:9e:93:a8:23:d3:c0:7c:bd:25:0b:
de:6a:6a:ad:b4:a0:b4:f7:d4:c7:ca:d9:9b:d8:b3:
00:57:52:af:bc:ef:6f:92:c9:1c:24:8f:13:26:7a:
06:c2:47:0f:92:a2:49:79:b4:59:aa:f5:1c:18:1a:
bb:11:61:72:c9:1a:a9:46:23:94:b3:d9:79:6e:07:
08:f3:0d:a6:24:56:f5:ca:6b:c5:1b:1e:45:fa:c9:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0E:93:21:2C:EC:58:65:D8:8E:23:16:75:59:49:5A:9E:7A:71:D9
X509v3 Authority Key Identifier:
keyid:FB:85:56:A2:C0:BB:3D:1E:CD:83:C7:54:F7:B9:68:F7:13:40:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-4VWosC7PR7Ng8dU97lo9xNANT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/1-4VWosC7PR7Ng8dU97lo9xNANT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/1-4VWosC7PR7Ng8dU97lo9xNANT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ee:10:38:ae:18:61:e7:94:60:96:92:19:ab:30:fa:3d:f4:
50:2c:72:6f:0f:90:74:72:2a:6b:be:c8:58:12:ab:09:af:3c:
98:73:d6:77:55:a2:fc:09:b2:c0:54:cb:a5:eb:e1:a5:2f:c0:
1d:13:af:e1:ed:e1:ef:3d:91:5c:8c:cb:b0:2c:f4:43:e3:23:
b6:7b:a3:df:09:2b:b8:9c:fa:c5:33:c4:bb:bc:3c:89:30:92:
0e:26:9c:e9:97:69:cf:7d:64:89:8f:bc:f3:ee:d7:34:60:74:
25:e2:5c:1f:ca:0d:f9:f3:6b:db:d2:a8:ef:2a:59:83:fe:75:
bf:c1:b4:9d:d9:05:58:16:f9:80:47:b3:6a:db:cf:18:06:fd:
50:01:df:f3:a9:78:18:40:4c:d0:fe:65:83:05:ce:3f:8a:13:
b9:92:39:ce:14:84:91:0e:e8:2a:d9:35:5c:67:7a:1c:1e:29:
c7:ab:50:af:40:a4:4a:4c:20:9e:84:ac:7a:98:cf:98:ba:c7:
ba:d1:bd:4b:3f:ec:b0:a0:60:68:66:75:ee:5d:9d:56:01:85:
c5:f3:70:fe:c2:06:b2:b3:23:2f:87:c3:ef:f7:1b:f2:f1:80:
08:1a:1e:23:6a:36:ef:da:b2:bf:77:e1:84:3b:5e:d4:6a:b7:
68:cc:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:50 2025 by rpki-client