Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/B59bfv7VHdZQu-c-0rBAorNAlX8.mft
File: B59bfv7VHdZQu-c-0rBAorNAlX8.mft (raw, json)
Hash identifier: YkQ+sZvy7KUgtFNnE+yXXG7YYmpoueL1kabPWfvNbLQ=
Subject key identifier: AE:34:90:25:4F:3A:D7:07:0B:5A:A2:E3:DD:11:1D:B3:5D:F8:52:DB
Authority key identifier: 07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
Certificate issuer: /CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Certificate serial: 018B89E684EBE6D754E47E340ED28BFEED32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/B59bfv7VHdZQu-c-0rBAorNAlX8.mft
Manifest number: 08B8
Signing time: Wed 01 Nov 2023 08:01:07 +0000
Manifest this update: Wed 01 Nov 2023 08:01:07 +0000
Manifest next update: Thu 02 Nov 2023 08:01:07 +0000
Files and hashes: 1: B59bfv7VHdZQu-c-0rBAorNAlX8.crl (hash: cUqRUFfnkqoeyfpaRpKiItTU4DC9FD44+eEE0HhP2GQ=)
2: jp3V5CQ6BgjGrJCUGfJVzbjaAUo.roa (hash: 8A0UjWr9GiwK1rsoGowJr18CrbyLkcml0PTO9sAb2ac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:e6:84:eb:e6:d7:54:e4:7e:34:0e:d2:8b:fe:ed:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079f5b7efed51dd650bbe73ed2b040a2b340957f
Validity
Not Before: Nov 1 08:01:07 2023 GMT
Not After : Nov 2 08:01:07 2023 GMT
Subject: CN=ae3490254f3ad7070b5aa2e3dd111db35df852db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:50:e2:51:6c:be:cb:83:42:42:8c:f2:78:
0b:1f:aa:f2:d8:18:53:31:47:53:db:1d:80:19:39:
3c:75:7e:f2:a8:d1:13:f0:8f:b3:72:36:40:25:6a:
a5:76:20:19:7f:99:19:bb:75:c8:6e:d6:26:2b:14:
5b:7b:34:0f:4a:b4:ed:f8:d8:f4:18:1b:59:ab:fc:
5e:94:f4:cf:70:16:5c:73:88:b0:7f:a1:e9:64:f2:
d8:64:f0:b3:5d:80:84:71:d3:31:fb:81:92:48:41:
6f:76:35:c7:e6:da:c2:f8:31:67:dd:da:c3:46:fb:
6d:64:4e:e5:bc:e5:06:1c:9f:90:7f:ac:b5:09:55:
d3:13:34:68:d4:14:19:82:0a:a6:d3:55:90:b3:85:
ff:eb:25:12:ef:79:69:53:c7:74:45:0e:19:ed:53:
83:88:bf:a6:2c:1c:7f:59:32:46:3d:45:51:df:55:
56:33:c1:2e:a1:4e:36:dd:b5:ce:d2:9d:b5:61:0d:
43:bd:b3:b9:16:07:71:18:c9:47:de:71:23:94:5b:
3d:bc:5c:f5:a1:d2:66:b5:46:e9:61:dc:eb:76:bc:
6d:55:7b:be:ce:14:15:2f:3e:ce:70:84:70:7f:fc:
4b:37:eb:ca:31:12:63:bb:83:a9:db:7d:07:8f:11:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:34:90:25:4F:3A:D7:07:0B:5A:A2:E3:DD:11:1D:B3:5D:F8:52:DB
X509v3 Authority Key Identifier:
keyid:07:9F:5B:7E:FE:D5:1D:D6:50:BB:E7:3E:D2:B0:40:A2:B3:40:95:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B59bfv7VHdZQu-c-0rBAorNAlX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/B59bfv7VHdZQu-c-0rBAorNAlX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3a5f97-e23d-4667-aa3a-4cca92aa9569/1/B59bfv7VHdZQu-c-0rBAorNAlX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cc:f1:2f:ab:78:f0:df:b5:58:30:99:8b:1e:12:a7:50:84:
dd:0c:20:27:b9:69:b5:26:40:dc:fa:d0:74:9d:92:d0:64:3d:
0f:ba:34:1c:4d:b3:1a:ff:5c:11:a2:88:53:00:71:42:44:6d:
1d:f2:54:1b:ce:74:77:d9:e1:78:34:c8:49:2b:87:e0:fe:b2:
12:ff:bc:8d:2c:28:f9:06:c6:39:3e:4e:94:19:9d:84:16:16:
3b:ce:80:d5:bc:cb:c8:e8:50:a9:16:09:13:b2:c9:87:f4:a4:
fa:c1:c4:aa:f2:4f:02:47:f2:4a:ee:be:1f:11:59:cc:0e:c7:
64:f3:5c:68:f2:2e:68:f5:9e:a6:2f:fb:3f:99:e5:df:ff:bd:
bf:56:35:79:31:62:ff:99:66:42:e7:ec:8e:4d:92:a5:0c:53:
2f:3c:32:a3:74:f8:65:28:14:de:16:1e:a2:28:e9:05:f0:9d:
2c:aa:22:92:d9:d7:5e:d9:ef:52:e3:d8:1d:97:4b:50:ce:aa:
4c:76:fa:8c:ec:28:85:57:f2:38:16:66:93:86:6e:12:84:3a:
95:80:d5:9c:3b:5e:c5:ec:25:0f:55:7d:09:c5:82:0d:a9:2e:
41:b7:cd:93:f1:89:e1:cc:81:b8:a9:30:4d:8b:87:5c:1f:f1:
cd:23:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:03 2024 by rpki-client on console-ams.rpki-client.org