Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/JHpROsmn75yDUacntaxryDHNy-0.mft
File: JHpROsmn75yDUacntaxryDHNy-0.mft (raw, json)
Hash identifier: aTLnjfSUQlcEtBmxuEW+aJrl+K2+4MtryL5eZ5w7nB4=
Subject key identifier: 40:6C:FD:52:A0:97:F2:CA:FB:9D:BD:4C:19:7A:6B:FA:12:57:A8:AD
Authority key identifier: 24:7A:51:3A:C9:A7:EF:9C:83:51:A7:27:B5:AC:6B:C8:31:CD:CB:ED
Certificate issuer: /CN=247a513ac9a7ef9c8351a727b5ac6bc831cdcbed
Certificate serial: 018842619295B911ACB4392ACC409D75617E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHpROsmn75yDUacntaxryDHNy-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/JHpROsmn75yDUacntaxryDHNy-0.mft
Manifest number: 0D98
Signing time: Mon 22 May 2023 07:34:30 +0000
Manifest this update: Mon 22 May 2023 07:34:30 +0000
Manifest next update: Tue 23 May 2023 07:34:30 +0000
Files and hashes: 1: JHpROsmn75yDUacntaxryDHNy-0.crl (hash: xqU9TmAKJLDvjolpIQAiImErJ0h8hrgLZZ+oALlvSRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:61:92:95:b9:11:ac:b4:39:2a:cc:40:9d:75:61:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247a513ac9a7ef9c8351a727b5ac6bc831cdcbed
Validity
Not Before: May 22 07:34:30 2023 GMT
Not After : May 23 07:34:30 2023 GMT
Subject: CN=406cfd52a097f2cafb9dbd4c197a6bfa1257a8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:b2:34:22:f2:7a:45:c5:65:bd:a2:f7:8d:
2f:9b:1a:24:3e:b2:49:77:00:9a:36:3e:f7:20:3f:
0b:30:73:ab:bc:60:62:a9:ea:97:1f:ee:3e:39:14:
a5:c1:3a:6e:be:e3:3d:54:f7:76:87:7e:d4:e9:3c:
95:73:50:e6:a2:d0:48:70:38:42:47:01:08:54:21:
f9:40:5b:95:99:68:7f:46:ce:08:ec:68:84:01:c0:
9c:24:8e:09:85:9d:d2:70:42:96:db:b3:c5:2b:1b:
24:2e:48:75:98:97:b0:a4:bd:b5:80:c7:7c:72:62:
4e:c2:2d:ef:09:75:22:6e:67:4d:10:29:85:ce:45:
90:4f:ca:94:23:32:ec:ed:64:cd:36:d3:9f:20:2a:
ec:c9:e9:95:2d:9f:5f:b3:4f:66:79:78:de:2d:12:
b1:3b:09:57:aa:93:76:e1:c3:2e:05:f9:8d:64:ee:
ca:2c:db:6a:71:d2:fb:c8:30:6c:fc:a4:82:09:7c:
e9:b4:3c:ae:df:a2:17:83:19:ec:65:18:21:7f:84:
52:33:a7:b5:e8:36:8e:da:85:15:48:b0:86:62:45:
71:67:ba:dd:e6:a6:9a:74:6a:1f:1f:8e:34:cf:48:
84:09:d2:46:5f:9b:ca:8a:de:39:d5:2a:7a:a1:bf:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6C:FD:52:A0:97:F2:CA:FB:9D:BD:4C:19:7A:6B:FA:12:57:A8:AD
X509v3 Authority Key Identifier:
keyid:24:7A:51:3A:C9:A7:EF:9C:83:51:A7:27:B5:AC:6B:C8:31:CD:CB:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHpROsmn75yDUacntaxryDHNy-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/JHpROsmn75yDUacntaxryDHNy-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/22d26c-3e77-4fc2-83d7-276216d48dcf/1/JHpROsmn75yDUacntaxryDHNy-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:53:4b:90:11:46:f7:0a:9f:c7:ab:66:77:e7:db:92:26:bb:
38:93:f6:23:02:af:b7:e5:63:09:ad:68:ee:3a:c2:cb:cd:e9:
d9:a8:4b:d4:58:51:56:01:8a:7d:5b:eb:15:9a:20:78:22:ec:
a1:53:fc:8c:b4:90:1d:ce:97:e2:7d:42:2f:b2:ad:de:cb:60:
13:3e:f9:35:3f:c0:76:e0:e2:b9:59:a6:1e:08:89:5b:1e:35:
fd:bb:fa:50:47:0b:b3:26:61:40:1b:23:a6:06:d9:bc:79:05:
82:f5:7e:2d:1f:81:04:8f:9a:31:c3:9c:52:1b:f1:ff:a9:2d:
58:a8:24:f8:dc:7e:d2:6e:3e:c1:e0:b3:09:04:0e:81:ad:d2:
7a:61:a7:90:11:c4:d7:d8:26:5d:b5:8a:0e:a6:7c:b7:c2:9a:
f3:eb:a1:ac:92:60:c5:1e:7d:e2:bd:3c:f9:db:16:19:c8:53:
75:7d:3e:d1:9b:4e:45:18:5a:1c:07:c6:2c:1b:80:aa:f5:7c:
ca:95:3b:bc:20:f7:b7:84:83:68:61:fd:16:53:83:e3:8f:44:
42:48:1d:b5:fb:03:68:f5:87:8d:ad:a1:cb:c9:a4:c9:72:4a:
d8:5e:f8:cc:81:59:b4:45:46:af:15:c2:14:25:6f:f7:43:05:
76:08:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:42 2024 by rpki-client on console-ams.rpki-client.org