Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/1-n__DCBnMMSVzkTAHNd8lJoOPmc.mft
File: 1-n__DCBnMMSVzkTAHNd8lJoOPmc.mft (raw, json)
Hash identifier: 9LQFznNiUKkzQOvNMGzz7yPupfyoAeL0DZM+OpECU/g=
Subject key identifier: 43:63:F4:DB:E8:B0:40:7C:46:DF:80:67:43:CC:B1:A2:1E:9C:B3:67
Authority key identifier: FA:7F:FF:0C:20:67:30:C4:95:CE:44:C0:1C:D7:7C:94:9A:0E:3E:67
Certificate issuer: /CN=fa7fff0c206730c495ce44c01cd77c949a0e3e67
Certificate serial: 018504BBABCF03E64EF5F32EE414643B5F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n__DCBnMMSVzkTAHNd8lJoOPmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/1-n__DCBnMMSVzkTAHNd8lJoOPmc.mft
Manifest number: 0BBE
Signing time: Mon 12 Dec 2022 05:08:05 +0000
Manifest this update: Mon 12 Dec 2022 05:08:05 +0000
Manifest next update: Tue 13 Dec 2022 05:08:05 +0000
Files and hashes: 1: 1-n__DCBnMMSVzkTAHNd8lJoOPmc.crl (hash: f/R+dc7SKbNrhXmvvaUxdJ02ksX+uqp/MfrbDQFrkX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:04:bb:ab:cf:03:e6:4e:f5:f3:2e:e4:14:64:3b:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7fff0c206730c495ce44c01cd77c949a0e3e67
Validity
Not Before: Dec 12 05:08:05 2022 GMT
Not After : Dec 13 05:08:05 2022 GMT
Subject: CN=4363f4dbe8b0407c46df806743ccb1a21e9cb367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:bb:fe:3a:33:76:84:71:2e:46:10:e1:85:
6c:08:05:3e:b8:a1:60:d4:fd:95:f4:8e:0d:bf:08:
7a:3b:a7:fe:4a:e2:34:68:ee:3b:80:f7:08:23:3a:
85:28:ce:f7:37:81:95:8f:ff:8b:d4:94:3d:1a:5f:
c3:61:aa:27:32:91:c0:7c:80:a6:c7:03:93:6c:9b:
12:77:ce:d6:18:d6:7d:aa:e4:eb:96:3c:c1:51:c3:
5f:bb:ba:11:2c:ce:81:53:c7:f1:e5:ec:da:1c:d4:
f8:6c:77:89:ee:93:12:49:29:b9:2b:c4:45:83:7e:
79:a3:22:7e:da:f9:9f:eb:29:78:b7:1e:26:7a:f6:
05:7e:44:ea:1f:23:06:b9:f5:6b:05:fb:23:be:71:
ec:18:a7:6e:26:7a:55:19:01:29:fa:76:9f:8a:82:
f5:42:11:b9:7f:f6:fd:7f:c6:f9:18:f9:95:49:a4:
87:9c:e9:54:d9:68:44:0d:da:0d:90:64:f6:b2:2b:
cf:3a:56:70:51:f6:d4:dc:6c:fb:55:6a:bf:88:cc:
71:c1:8f:92:bf:7b:9a:c0:f8:43:c1:a9:6e:93:8f:
7e:54:02:46:26:8d:17:b5:d7:20:57:38:e0:00:0b:
65:1c:2b:bc:5c:45:fd:90:32:84:ca:f0:33:bb:bc:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:63:F4:DB:E8:B0:40:7C:46:DF:80:67:43:CC:B1:A2:1E:9C:B3:67
X509v3 Authority Key Identifier:
keyid:FA:7F:FF:0C:20:67:30:C4:95:CE:44:C0:1C:D7:7C:94:9A:0E:3E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n__DCBnMMSVzkTAHNd8lJoOPmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/1-n__DCBnMMSVzkTAHNd8lJoOPmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/1e9e81-e97c-4a5d-a54c-0fba1420c4c9/1/1-n__DCBnMMSVzkTAHNd8lJoOPmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:00:3c:75:fc:66:7b:3f:7e:2c:dd:1c:e6:5d:2a:5a:d1:65:
c6:a3:ce:e1:1a:cc:20:6e:48:5b:da:10:2b:a0:d4:a1:e6:36:
38:4c:94:ac:b5:1d:a9:4b:66:c0:f3:ec:49:a5:a4:1d:93:d2:
fc:5c:e1:85:38:fa:90:10:60:f0:56:c2:75:ef:f6:d8:1c:0b:
79:36:df:db:dc:69:f6:73:1c:03:d6:d1:ae:0e:b1:eb:93:27:
d1:b7:de:95:ee:c0:81:74:d8:d9:24:ce:3f:29:9e:12:52:d3:
19:c6:22:83:04:cf:d0:2a:31:e7:00:a1:b2:50:9d:a3:11:77:
23:4e:fb:76:96:ed:c7:c1:c0:1e:61:09:49:f2:20:b6:a5:53:
49:05:76:fb:d9:05:5f:e4:e0:3c:e0:7d:61:c7:0d:58:37:10:
60:f1:45:d0:38:ef:96:74:57:7c:3f:85:9c:e6:c4:a9:3a:dc:
9d:af:8d:61:00:77:d1:69:7f:db:7e:11:f7:4c:50:c0:f6:db:
ab:68:2d:22:ba:fe:2f:81:b7:c9:81:94:aa:86:ed:b9:50:88:
2c:c1:7e:6e:d0:87:3d:6a:44:2a:2b:a5:6b:91:d5:04:b6:3c:
fd:52:9f:4c:56:48:90:93:26:d1:8b:f8:b5:56:d8:05:f7:76:
44:2b:4d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:54 2024 by rpki-client on console-fra.rpki-client.org