Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.mft
File: ka_MBd8C8nRw34OBFAuVquwfNb0.mft (raw, json)
Hash identifier: wvLtL8H0ow+bWS+5ka5ZN1nq6kS2O4Vbopo9bUQh0YU=
Subject key identifier: C3:80:DF:95:EB:8C:B5:EF:4F:84:28:C0:49:5A:16:41:B8:36:6F:7A
Authority key identifier: 91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
Certificate issuer: /CN=91afcc05df02f27470df8381140b95aaec1f35bd
Certificate serial: 018BEAE33BFB024FA7455F4FB532E07A1B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.mft
Manifest number: 0859
Signing time: Mon 20 Nov 2023 04:00:42 +0000
Manifest this update: Mon 20 Nov 2023 04:00:42 +0000
Manifest next update: Tue 21 Nov 2023 04:00:42 +0000
Files and hashes: 1: UlaEk2bVc3RiY1D3EFvWOk4Dgy0.roa (hash: f2PS+9hcc0wBbU7KlLNCGLSjXmeCotm55o588n5gsnY=)
2: ka_MBd8C8nRw34OBFAuVquwfNb0.crl (hash: +ke48fVyjcDH1P2PZPFLP8LTAvx2DqT8T6Q8pqH3I+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:e3:3b:fb:02:4f:a7:45:5f:4f:b5:32:e0:7a:1b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91afcc05df02f27470df8381140b95aaec1f35bd
Validity
Not Before: Nov 20 04:00:42 2023 GMT
Not After : Nov 21 04:00:42 2023 GMT
Subject: CN=c380df95eb8cb5ef4f8428c0495a1641b8366f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:d4:f5:2b:7e:d1:df:10:78:9f:16:c7:96:
11:e1:6a:7d:df:98:41:77:e2:6a:11:6c:62:03:59:
cd:84:3c:37:c2:5b:6d:50:fe:e6:22:cc:17:f2:40:
14:d4:d3:0e:63:82:7a:84:b0:58:e9:16:5a:4c:4d:
10:2f:7e:50:84:c5:8f:59:b8:ce:32:48:e1:04:c0:
6f:66:92:a4:53:52:a5:c6:31:26:f0:cb:54:e8:a4:
92:6e:43:ce:f8:c8:04:e0:51:fa:12:5d:bb:67:a0:
d5:c0:30:d0:9e:d3:58:1a:97:1e:65:d6:c4:2c:eb:
7c:4c:e3:c1:d3:73:fd:dc:c3:6f:91:04:6f:d7:da:
a2:51:0a:ee:b9:a0:91:cd:59:c5:b7:20:c4:fa:8e:
36:d6:3e:01:34:00:4f:3d:d9:e7:c4:d8:34:42:0a:
b5:fe:08:5e:05:9f:b2:89:a5:f0:33:ff:f4:ce:a2:
b9:46:4f:c9:e4:f3:6c:71:b1:18:37:8a:fc:b7:e9:
a7:3f:4a:be:57:ff:26:e1:19:63:5d:41:4a:5b:3b:
da:ba:a9:16:b3:e4:b1:fa:a3:79:2e:24:a0:32:a8:
ba:c2:4a:77:80:b2:55:4e:2d:be:63:c6:9a:31:c0:
e2:c7:29:1b:37:d5:f3:e4:37:ce:be:29:67:92:7f:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:DF:95:EB:8C:B5:EF:4F:84:28:C0:49:5A:16:41:B8:36:6F:7A
X509v3 Authority Key Identifier:
keyid:91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:db:e9:66:29:b0:5a:e8:1e:6b:a9:27:fb:67:b6:c2:8a:61:
ce:c1:de:0c:e9:65:b9:a7:0d:79:0a:dd:69:14:89:50:da:31:
f3:3b:ed:da:a6:b9:e6:eb:e7:29:4a:42:a2:e9:ff:e0:24:8f:
2e:d2:57:36:c2:36:1e:c3:36:b9:af:e0:6b:a4:6b:b8:4d:0a:
a2:b2:a6:b5:b0:6f:01:ca:10:24:34:fd:42:5b:5f:e0:da:97:
a0:10:b0:bb:d1:80:93:09:7d:05:99:d2:d4:36:1a:f3:b1:28:
76:2d:06:c2:3d:07:84:aa:6a:94:22:d5:0b:96:08:7f:d7:00:
1c:64:03:3c:be:37:ed:2d:d0:c7:71:62:31:36:0f:84:44:b4:
bc:f5:f6:0d:e9:31:82:c7:a8:ea:9d:e9:de:0e:bf:d1:a1:4c:
94:57:94:cb:42:9f:01:85:6a:dc:80:00:ed:80:de:45:07:cc:
8a:86:f9:35:70:b4:3e:29:72:ba:7e:9e:f8:d4:04:d9:f8:ac:
74:de:6b:25:c5:2b:61:95:9a:c1:44:28:ee:eb:2a:01:c9:8a:
b3:a2:62:cb:4b:c5:8d:ad:75:94:02:d5:1f:29:01:28:1d:53:
e7:47:89:e1:1a:bf:a0:5e:dc:37:6f:f9:9f:d4:2e:cb:6c:38:
fb:ec:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:31 2024 by rpki-client on console-ams.rpki-client.org