Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.mft
File: 3lSZvocvYvLQTcS8Y4MJ13uJo4c.mft (raw, json)
Hash identifier: MTQQLk/DLmWlStYw3YSmZ5hs8CwoGwCwoZFUBEyHPx0=
Subject key identifier: 39:95:77:23:D1:67:34:CB:AB:21:A3:A3:03:19:44:21:CD:B9:3D:2F
Authority key identifier: DE:54:99:BE:87:2F:62:F2:D0:4D:C4:BC:63:83:09:D7:7B:89:A3:87
Certificate issuer: /CN=de5499be872f62f2d04dc4bc638309d77b89a387
Certificate serial: 0191BFE995224CA0B4BF5572277657DC5724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lSZvocvYvLQTcS8Y4MJ13uJo4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.mft
Manifest number: 123B
Signing time: Thu 05 Sep 2024 02:00:41 +0000
Manifest this update: Thu 05 Sep 2024 02:00:41 +0000
Manifest next update: Fri 06 Sep 2024 02:00:41 +0000
Files and hashes: 1: 3lSZvocvYvLQTcS8Y4MJ13uJo4c.crl (hash: WuJTWJebMI7YNttUO7qOMVepLkf50ekl//pnbNTfcO4=)
2: GBRb6fPs9zt623UuQ4fgOMDm7R4.roa (hash: yqymEa1Pm+wJzSp5qhbmUWv3H6WcofDKzM2DuRzAjoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bf:e9:95:22:4c:a0:b4:bf:55:72:27:76:57:dc:57:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5499be872f62f2d04dc4bc638309d77b89a387
Validity
Not Before: Sep 5 02:00:41 2024 GMT
Not After : Sep 6 02:00:41 2024 GMT
Subject: CN=39957723d16734cbab21a3a303194421cdb93d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:b3:53:9f:17:bf:7a:82:d4:1b:b0:66:b4:
71:00:57:92:5e:c3:70:db:b0:79:8e:c7:82:47:a0:
fa:bc:5e:6d:34:aa:54:6e:08:08:bc:52:f5:43:cc:
d2:cd:91:b5:5d:c4:06:9e:cc:fb:80:1b:33:18:d2:
71:60:7d:db:57:8f:5e:84:55:39:0b:a4:d9:73:e5:
d1:af:3f:6f:fa:26:06:22:bf:1f:21:05:b0:f8:84:
1b:64:86:88:91:64:28:48:c5:fd:a5:b9:90:12:15:
32:ad:4c:13:aa:13:22:5e:78:05:f6:be:fc:ed:11:
63:35:8f:50:18:6a:bf:48:de:4a:bf:20:2c:ce:6d:
f5:9d:47:23:c6:a8:2f:6d:c1:0b:cc:4a:0e:84:c5:
e5:fe:54:d1:4f:c2:0d:17:45:8b:32:5c:0b:90:69:
d4:4c:21:1b:15:4a:e0:c0:03:df:12:23:e5:52:5a:
b8:2b:af:d7:b9:d3:2c:19:c5:cc:5d:c7:66:b5:3f:
f2:4e:5d:cd:c7:a1:c6:3c:ad:f8:0b:10:84:c9:d3:
f5:c9:7d:a5:98:d4:44:70:24:92:d8:7f:1b:c6:49:
7a:39:ab:97:ff:44:d4:2e:e4:96:c2:1a:90:db:f1:
94:05:1d:a0:f4:cd:52:10:5e:59:7f:a4:7a:ce:58:
55:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:77:23:D1:67:34:CB:AB:21:A3:A3:03:19:44:21:CD:B9:3D:2F
X509v3 Authority Key Identifier:
keyid:DE:54:99:BE:87:2F:62:F2:D0:4D:C4:BC:63:83:09:D7:7B:89:A3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lSZvocvYvLQTcS8Y4MJ13uJo4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/48bc75-96b6-4fa7-8ada-a6eca43f0e05/1/3lSZvocvYvLQTcS8Y4MJ13uJo4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f6:3e:cb:60:e3:45:c1:cd:7b:65:e5:5f:27:e0:53:4b:66:
e9:49:e8:9e:cc:e5:76:96:34:9e:b3:50:e4:dd:5c:ab:66:52:
1d:47:dd:6f:a6:a5:df:c5:78:cb:d2:8e:9f:62:38:a5:60:6b:
eb:72:2b:b1:8a:b7:3e:c6:94:01:94:4a:50:c5:bc:ad:46:fc:
61:3a:64:24:65:b1:cd:15:21:ad:59:87:3e:2e:92:ef:66:3e:
45:c7:3d:ce:75:27:26:17:ae:97:93:5a:0c:20:77:fc:20:4d:
d1:7d:21:ca:e2:27:67:28:44:3b:54:90:e0:88:0f:ab:fc:84:
84:7b:49:8e:f2:0b:0f:f5:57:f4:88:23:a4:4a:af:23:8c:ba:
c9:e9:29:21:df:89:8e:90:31:4e:ff:11:bf:cc:8d:c1:78:38:
b0:3f:71:ad:89:c5:11:57:30:29:01:5a:fd:0c:c9:d1:47:62:
ea:2d:61:38:3b:a3:4e:17:15:fc:ae:40:f8:c4:13:19:27:cd:
87:28:16:70:01:9b:ba:aa:3f:36:66:a5:e9:a7:4f:99:16:19:
cf:da:cd:c8:9b:f3:70:f1:c1:d4:34:e8:94:7b:95:54:99:a8:
07:45:0e:54:31:3f:5b:43:90:c6:db:28:8a:f4:54:02:8a:d3:
e6:ed:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 09:30:18 2024 by rpki-client on console-fra.rpki-client.org