Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/caZqhFIfbyn29dp8Lk9Ebc80AVE.mft
File: caZqhFIfbyn29dp8Lk9Ebc80AVE.mft (raw, json)
Hash identifier: sHKBsl5XglrA2jaSsNE/dW2aDi3AsSnpkwoMW7zm/gs=
Subject key identifier: EF:13:94:80:F9:24:54:68:4C:F4:8E:0F:6C:02:00:E4:C5:2C:E2:E5
Authority key identifier: 71:A6:6A:84:52:1F:6F:29:F6:F5:DA:7C:2E:4F:44:6D:CF:34:01:51
Certificate issuer: /CN=71a66a84521f6f29f6f5da7c2e4f446dcf340151
Certificate serial: 018C5852647F0DB3CAFC4F48447F34E18735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caZqhFIfbyn29dp8Lk9Ebc80AVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/caZqhFIfbyn29dp8Lk9Ebc80AVE.mft
Manifest number: 08BB
Signing time: Mon 11 Dec 2023 10:00:43 +0000
Manifest this update: Mon 11 Dec 2023 10:00:43 +0000
Manifest next update: Tue 12 Dec 2023 10:00:43 +0000
Files and hashes: 1: caZqhFIfbyn29dp8Lk9Ebc80AVE.crl (hash: RZgsb/S9JAG+YqxvIwyL7xkN/5lPlgPDb4b8guxAjPc=)
2: zIEcgYh-wUpiMKbIhdQOgejUwog.roa (hash: Pf4sEHxLgNqZKJuuacQM83YFwhTieXaOo7PLtQhx2eo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:52:64:7f:0d:b3:ca:fc:4f:48:44:7f:34:e1:87:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a66a84521f6f29f6f5da7c2e4f446dcf340151
Validity
Not Before: Dec 11 10:00:43 2023 GMT
Not After : Dec 12 10:00:43 2023 GMT
Subject: CN=ef139480f92454684cf48e0f6c0200e4c52ce2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:93:0e:16:c8:5c:da:c0:f0:6f:9c:a5:62:
0b:f1:38:03:21:16:fd:27:4d:65:92:ea:6a:01:41:
e9:89:b7:f3:3f:39:1e:b5:c3:39:9c:3d:e8:eb:4c:
29:1c:21:ed:62:4e:78:4d:1b:0a:c2:6d:76:1c:1e:
66:98:2e:fd:b3:80:65:95:69:c3:54:2e:ba:85:4f:
35:ec:0a:76:8b:48:dd:58:34:29:12:18:99:57:7f:
63:2a:3e:42:53:80:6a:19:fc:2e:3b:62:3c:4d:8d:
0c:d6:b5:b3:9c:d1:58:2a:46:8d:2b:db:81:af:24:
6c:b7:15:da:f1:10:50:5e:30:09:b5:41:1e:f0:72:
01:52:07:d4:90:79:23:cd:9b:03:44:ae:b0:33:d6:
6c:04:40:a8:a1:83:89:a4:c0:52:ec:8d:5e:f5:35:
f3:30:a0:54:84:60:04:b6:30:c3:ba:d2:64:96:bd:
20:56:2a:0d:06:8a:54:7a:f9:e2:06:e7:61:3d:de:
07:dc:bc:19:dd:ce:60:ae:2c:b3:5f:f2:b4:fe:29:
d3:03:9a:0d:a5:03:bb:9e:3a:ff:0c:3d:d1:9c:fc:
c4:62:f1:e8:06:16:d3:7f:ed:69:cd:11:bf:bd:dd:
0f:62:0b:ea:2b:b4:15:25:6d:94:af:46:01:b9:94:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:13:94:80:F9:24:54:68:4C:F4:8E:0F:6C:02:00:E4:C5:2C:E2:E5
X509v3 Authority Key Identifier:
keyid:71:A6:6A:84:52:1F:6F:29:F6:F5:DA:7C:2E:4F:44:6D:CF:34:01:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caZqhFIfbyn29dp8Lk9Ebc80AVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/caZqhFIfbyn29dp8Lk9Ebc80AVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/afb241-f7c0-4fd1-891e-0d85b9a4bb3e/1/caZqhFIfbyn29dp8Lk9Ebc80AVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d1:ba:56:7a:5f:ac:f9:4f:d8:9f:83:84:8d:6f:28:fd:49:
89:ae:d7:fa:6c:2e:0f:d9:02:41:c0:3a:a6:55:32:d8:bd:d6:
cd:53:ae:03:17:2a:48:37:f9:3c:14:0d:05:f5:50:70:e1:09:
63:b2:2f:53:3d:77:f7:db:59:d4:db:c6:05:3c:f0:29:b9:27:
7f:55:2b:e8:4d:49:9c:32:eb:ec:1d:c3:9b:86:7c:e4:9f:3d:
6b:44:7a:ed:79:e0:7b:03:0a:f0:12:53:ec:2d:3c:8c:d0:f1:
1c:00:70:7c:c0:71:fe:21:09:38:39:00:ab:8e:0c:94:a6:c8:
ab:14:0b:14:c2:37:6d:a8:80:05:3e:cb:1b:74:a4:a0:09:42:
cb:25:1c:d9:e0:7c:82:5b:c5:60:bd:fa:3b:95:ed:bb:e6:2d:
35:d5:bc:21:a4:96:2d:89:45:35:5b:0e:8e:b7:af:8a:2c:45:
48:46:65:68:a0:a5:dd:40:18:fe:78:2d:64:2c:44:60:69:da:
43:4a:7d:1a:ce:f8:6a:11:25:c7:a8:bb:a8:36:29:4c:f1:40:
7b:b8:0d:7e:ef:b0:3e:1f:61:11:33:e3:88:0e:b0:5f:15:70:
a2:12:b1:c7:00:22:f2:eb:f5:25:a4:f2:16:2c:48:82:c2:1c:
78:83:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org