Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.mft
File: y7LcaAU7KR5yk7tGNDspJc2CO10.mft (raw, json)
Hash identifier: a2SBQkD95QHFo/HYVakPAZZ953+IgXaSLmTWUUDQOc0=
Subject key identifier: C8:B4:FA:22:71:20:0E:EB:B5:87:CD:DB:70:B2:A4:DC:9E:83:EC:41
Authority key identifier: CB:B2:DC:68:05:3B:29:1E:72:93:BB:46:34:3B:29:25:CD:82:3B:5D
Certificate issuer: /CN=cbb2dc68053b291e7293bb46343b2925cd823b5d
Certificate serial: 018B37131BC4FF6D8FA0E69B3D281D972FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7LcaAU7KR5yk7tGNDspJc2CO10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.mft
Manifest number: 087E
Signing time: Mon 16 Oct 2023 06:01:20 +0000
Manifest this update: Mon 16 Oct 2023 06:01:20 +0000
Manifest next update: Tue 17 Oct 2023 06:01:20 +0000
Files and hashes: 1: y7LcaAU7KR5yk7tGNDspJc2CO10.crl (hash: b7VIhM5BBVYNqpBIZghFWb6t6n43OnYrv5k9z7bjih4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:13:1b:c4:ff:6d:8f:a0:e6:9b:3d:28:1d:97:2f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb2dc68053b291e7293bb46343b2925cd823b5d
Validity
Not Before: Oct 16 06:01:20 2023 GMT
Not After : Oct 17 06:01:20 2023 GMT
Subject: CN=c8b4fa2271200eebb587cddb70b2a4dc9e83ec41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:d1:a4:33:7a:31:38:f4:96:0b:52:40:c9:
1a:f9:d9:21:11:4a:d5:5c:64:f1:2f:8d:e9:4f:43:
ed:2d:47:80:a4:c8:30:90:f6:35:b3:f7:1f:d3:08:
33:70:45:78:03:26:91:a7:0a:32:4c:36:cf:90:93:
fb:1a:a0:2b:bd:f4:61:48:5c:e0:7e:25:d8:08:68:
86:ea:52:7b:4b:5b:b3:34:be:6f:f7:a7:b4:1d:05:
c5:57:5c:e9:40:ee:6b:7e:00:c9:ff:31:61:d0:f2:
8e:14:39:fe:09:ce:8e:93:d9:ef:de:48:bc:3c:d7:
6c:6c:f4:fc:16:0c:65:26:d3:dc:12:d6:8c:93:eb:
a0:04:9a:cd:92:5b:da:6d:97:84:da:40:f3:37:45:
e8:94:41:6c:7b:b6:da:00:3e:cd:1f:0a:a1:4a:2b:
bb:de:0e:0f:e1:73:c6:c3:9d:5e:dd:e5:2f:49:e2:
b7:f9:75:6e:3b:67:5c:55:f4:b2:38:86:f9:ee:32:
f6:f3:11:eb:6d:f2:0c:77:fd:63:6c:0f:b2:ca:dd:
3b:b9:11:eb:72:78:87:ce:ac:bf:96:3a:b4:ff:2f:
b2:b1:8f:7c:ef:33:9d:57:ed:6b:8b:27:f5:e0:f4:
1c:fa:0c:db:8c:87:da:bc:f2:00:32:37:f8:1d:10:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B4:FA:22:71:20:0E:EB:B5:87:CD:DB:70:B2:A4:DC:9E:83:EC:41
X509v3 Authority Key Identifier:
keyid:CB:B2:DC:68:05:3B:29:1E:72:93:BB:46:34:3B:29:25:CD:82:3B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7LcaAU7KR5yk7tGNDspJc2CO10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:70:48:29:b0:e5:4b:44:19:c9:5d:25:5b:98:d5:54:c9:fa:
14:99:60:ea:21:f7:a3:ee:4e:a0:18:4e:fa:36:d7:7a:64:3b:
2b:a8:3e:4a:30:2e:01:aa:ac:f1:c7:24:7e:2e:cd:9e:e4:60:
83:55:c6:57:51:ec:63:fb:e5:0b:79:f0:57:83:c3:8f:3a:6f:
2e:8d:b2:ba:a4:9e:74:c2:ee:2b:92:28:7a:7d:2a:9c:7b:ac:
67:cb:ec:91:00:f6:69:7a:91:ec:52:8e:e6:8a:76:ee:1b:96:
5b:67:04:62:e6:d8:87:e2:ea:d2:50:23:e4:9f:d2:cd:3d:d6:
1c:ab:b1:39:cd:47:d8:d0:06:f2:0f:e3:63:6d:2b:4a:43:cb:
86:33:bb:af:2d:e9:71:b5:7c:1b:ed:cd:cd:5a:00:06:29:01:
49:4a:15:26:46:df:e4:74:a0:e2:cc:6a:04:c4:ee:36:62:1e:
0e:ef:b1:4d:00:d0:2e:72:6b:82:c1:a4:f6:30:1c:e0:a4:29:
db:dc:d4:22:a0:44:f9:4f:bc:e6:4c:5e:cf:02:85:a9:65:0e:
5a:d7:69:2a:ab:5d:be:b9:a2:69:6f:2f:dd:52:b3:86:b0:61:
c7:85:df:92:21:f3:cb:4d:0a:64:53:80:fe:17:e4:fb:ef:c7:
19:10:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:11 2024 by rpki-client on console-fra.rpki-client.org