Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/SPRCLqm0GTEROAExolUPFmbcd2w.mft
File: SPRCLqm0GTEROAExolUPFmbcd2w.mft (raw, json)
Hash identifier: BQjDHlmnTKTPUxKcjMet4w3zhRxv5qtBzDeZXZ6+HTE=
Subject key identifier: CA:6D:2A:37:B3:22:BC:D9:16:A1:F3:94:C9:B5:3D:15:CE:AE:C0:DB
Authority key identifier: 48:F4:42:2E:A9:B4:19:31:11:38:01:31:A2:55:0F:16:66:DC:77:6C
Certificate issuer: /CN=48f4422ea9b4193111380131a2550f1666dc776c
Certificate serial: 01853401F2B86C9D3BB1FB2705EE597EE40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPRCLqm0GTEROAExolUPFmbcd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/SPRCLqm0GTEROAExolUPFmbcd2w.mft
Manifest number: 02A5
Signing time: Wed 21 Dec 2022 09:27:00 +0000
Manifest this update: Wed 21 Dec 2022 09:27:00 +0000
Manifest next update: Thu 22 Dec 2022 09:27:00 +0000
Files and hashes: 1: 1gme0gQXY8p6gLiHnEPnAePDTtI.roa (hash: gO+DvApeeP1+9QELIwvfylMRy7DpithlQNVIctqoLs8=)
2: SPRCLqm0GTEROAExolUPFmbcd2w.crl (hash: OtKF5zNazmrWnh9oZGmVTvIMHujWsQUEdSlvZRviodI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:01:f2:b8:6c:9d:3b:b1:fb:27:05:ee:59:7e:e4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f4422ea9b4193111380131a2550f1666dc776c
Validity
Not Before: Dec 21 09:27:00 2022 GMT
Not After : Dec 22 09:27:00 2022 GMT
Subject: CN=ca6d2a37b322bcd916a1f394c9b53d15ceaec0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:6e:2f:97:29:71:05:17:8f:c9:63:4f:7d:
94:8f:92:c5:7b:70:2e:7e:e1:f7:a4:ef:78:7c:a9:
29:ce:80:54:f3:a2:de:cb:c1:16:cf:b6:a4:94:c1:
3f:fb:50:55:d9:c6:01:93:c9:3a:9c:b7:42:b9:6c:
84:d9:a2:b5:24:47:f1:81:5c:b7:d0:2a:41:fa:ec:
82:a3:e8:b6:d2:78:f9:11:36:b2:97:2a:ae:5b:30:
a7:88:01:83:8f:6f:ef:74:f1:b3:70:c1:12:99:f9:
b6:5f:98:7a:33:23:09:3a:64:fb:07:31:28:ef:66:
39:48:c1:94:86:cd:b2:38:bf:95:c9:db:25:9d:6b:
ba:03:51:11:cc:bc:03:42:aa:bd:bb:4c:1b:44:92:
b0:ff:bb:ea:9b:9b:b5:45:68:ad:76:8c:c9:d5:f4:
2a:a6:a8:60:d2:b7:f8:17:ad:e0:b2:18:97:e2:f1:
5a:e9:c7:91:f4:69:3a:8a:a6:a5:cb:fe:33:4c:ba:
a8:25:ab:d2:92:06:51:d3:86:27:69:1c:f3:f6:86:
c9:5e:8b:4a:d6:de:73:61:98:ea:5c:12:c7:a8:bd:
12:ef:ac:b6:77:4a:88:2c:44:b2:5d:c4:1c:ce:e4:
67:f9:6f:2b:e7:d4:f0:0c:c7:71:cf:00:46:bb:08:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:2A:37:B3:22:BC:D9:16:A1:F3:94:C9:B5:3D:15:CE:AE:C0:DB
X509v3 Authority Key Identifier:
keyid:48:F4:42:2E:A9:B4:19:31:11:38:01:31:A2:55:0F:16:66:DC:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPRCLqm0GTEROAExolUPFmbcd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/SPRCLqm0GTEROAExolUPFmbcd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/40618a-772b-4981-9b2d-a9c285d6ec60/1/SPRCLqm0GTEROAExolUPFmbcd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4b:13:43:c7:3f:2a:49:73:d9:32:b6:7e:f2:f2:d5:35:dd:
5c:fa:00:e8:5b:81:ec:5c:7f:8a:0e:00:c4:e6:03:58:f6:bc:
6f:92:88:1d:9a:28:22:fb:9b:86:17:a5:da:63:cd:60:7e:34:
01:83:ce:94:67:3b:39:ec:ab:8e:a6:dc:5a:37:1c:ea:cd:f5:
b1:4d:0a:51:91:e1:02:eb:05:1d:a3:e8:48:06:98:c5:52:9d:
3c:b0:92:27:7d:a3:48:37:1c:d5:42:b7:c4:f5:6a:cf:2c:89:
0b:7a:1b:3f:09:a8:fb:6f:8f:ec:7c:e5:c7:d1:e2:57:43:2e:
6b:32:cb:b1:6e:2c:3f:f8:a2:d5:fd:7c:73:df:48:7f:b3:5a:
29:21:23:ca:46:ee:ff:5a:6a:e8:64:9d:38:e6:a0:5f:b8:cb:
e3:b2:e7:6f:81:75:0e:28:01:5b:d0:60:f0:e4:04:b7:55:5c:
99:48:dd:92:09:ee:49:c9:8e:8f:42:d1:f5:24:66:b2:5f:38:
3c:86:9c:20:92:d0:2f:c9:92:7f:b7:04:f9:36:72:53:5f:cf:
d2:d4:5e:cf:b7:d5:e8:dd:74:40:76:e8:11:dd:f3:2a:39:62:
ae:d2:1f:24:af:a2:ff:9d:0c:70:a3:c5:87:60:83:23:95:ad:
60:ef:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:32 2024 by rpki-client on console-fra.rpki-client.org