Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c304cf-4604-4818-a9ea-7aee5c1522d9/1/0Z8SS9jocMbqvlJHFFI49BekQNs.mft
File: 0Z8SS9jocMbqvlJHFFI49BekQNs.mft (raw, json)
Hash identifier: sA14KMBKsafrMO5XgJph1zhVcf//jmnwKjpSPfV8Vyk=
Subject key identifier: D6:6D:7D:15:0A:42:12:CD:EC:1E:9C:F2:54:9E:04:C2:A1:7B:4B:F1
Authority key identifier: D1:9F:12:4B:D8:E8:70:C6:EA:BE:52:47:14:52:38:F4:17:A4:40:DB
Certificate issuer: /CN=d19f124bd8e870c6eabe5247145238f417a440db
Certificate serial: 01874521135D79A76BE2E967F8B0875F6FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Z8SS9jocMbqvlJHFFI49BekQNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c304cf-4604-4818-a9ea-7aee5c1522d9/1/0Z8SS9jocMbqvlJHFFI49BekQNs.mft
Manifest number: 0D07
Signing time: Mon 03 Apr 2023 03:20:07 +0000
Manifest this update: Mon 03 Apr 2023 03:20:07 +0000
Manifest next update: Tue 04 Apr 2023 03:20:07 +0000
Files and hashes: 1: 0Z8SS9jocMbqvlJHFFI49BekQNs.crl (hash: HGP0GpCNszejeYtpnNJKs1AUEkqUW5M+baqSaOPu8U8=)
2: emzZnL_CY-mLqbNmxpMF5dgLw_o.roa (hash: /sbzK1qJq/cgvOH318Stt/FNccht9CX2irpLzmtkV8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:21:13:5d:79:a7:6b:e2:e9:67:f8:b0:87:5f:6f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19f124bd8e870c6eabe5247145238f417a440db
Validity
Not Before: Apr 3 03:20:07 2023 GMT
Not After : Apr 4 03:20:07 2023 GMT
Subject: CN=d66d7d150a4212cdec1e9cf2549e04c2a17b4bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:6c:34:91:70:e5:de:d4:b1:5b:f2:55:c3:
81:70:e1:f1:de:8c:f5:b4:d2:6a:a1:25:9e:27:4d:
34:76:9e:f5:1b:8e:2b:91:85:f2:00:64:a3:a3:c9:
a1:98:a1:78:9e:8c:a1:e2:50:a4:8d:cb:12:91:1e:
f1:10:0e:12:8b:9a:fd:d1:94:9a:e2:93:20:89:9a:
a7:98:17:0f:70:c1:52:16:dd:6b:dc:81:b0:47:2c:
3d:23:dd:b1:7a:6f:fa:fd:dc:8d:83:39:3e:5e:a3:
c5:bc:58:dd:7d:6b:66:ea:0e:a2:4a:ae:0e:f1:09:
72:4f:96:5a:ef:f3:02:cb:6c:68:ba:66:04:2a:2c:
43:ae:21:e9:4e:81:e3:58:72:aa:87:04:6e:fd:38:
4f:23:94:b0:be:1e:0c:16:e5:64:5f:b0:41:a4:d1:
0d:52:a5:3d:57:a0:bb:d6:96:a8:f5:f9:3c:22:d7:
1b:be:cd:8e:4e:57:2c:9e:25:b2:e2:f5:34:27:d8:
3f:0d:18:93:70:e2:f4:36:c8:b5:4e:e5:5c:79:20:
f8:28:86:59:87:5b:a6:03:c1:a1:63:2a:dd:1f:9a:
ed:50:5f:ad:19:f6:50:53:5a:2f:f2:ba:a9:d6:9f:
a1:80:48:59:de:63:1d:42:27:23:0e:87:68:78:a8:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:7D:15:0A:42:12:CD:EC:1E:9C:F2:54:9E:04:C2:A1:7B:4B:F1
X509v3 Authority Key Identifier:
keyid:D1:9F:12:4B:D8:E8:70:C6:EA:BE:52:47:14:52:38:F4:17:A4:40:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Z8SS9jocMbqvlJHFFI49BekQNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c304cf-4604-4818-a9ea-7aee5c1522d9/1/0Z8SS9jocMbqvlJHFFI49BekQNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c304cf-4604-4818-a9ea-7aee5c1522d9/1/0Z8SS9jocMbqvlJHFFI49BekQNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ff:13:8d:be:52:0d:b8:df:11:56:5a:9a:f6:b3:c1:f1:ee:
99:d9:28:7d:59:ee:f0:c7:b5:c0:f1:2d:0c:d6:35:ab:af:da:
6c:58:f3:98:92:e0:97:99:7f:59:d1:60:cc:d5:41:a8:cf:3f:
f0:7f:52:a1:8b:37:4b:c2:3e:d7:af:69:1e:62:ff:8e:ad:73:
84:64:8d:04:06:02:ab:23:c3:a8:f5:55:00:12:df:62:55:7f:
9f:9a:4b:10:06:e9:93:22:cc:d2:a5:38:f1:f8:c6:a1:c9:73:
3d:da:97:42:96:f7:42:41:7f:d8:f4:d1:64:98:94:28:76:71:
ac:7c:23:eb:f3:0b:e6:78:87:00:61:ca:ca:12:e0:a3:f7:da:
6f:00:55:c1:8b:fa:db:97:24:5d:c0:9a:d1:0f:3c:89:b4:f6:
fc:50:1e:a3:d4:4b:a2:a0:5f:79:a3:bb:aa:56:68:bc:dd:f8:
46:69:c8:93:3d:4e:ee:5f:1f:2f:fa:5c:64:0f:d9:9b:b4:61:
c8:87:2a:b2:52:49:84:e2:c4:51:fe:98:16:89:60:ef:d0:6b:
6b:de:f5:1e:94:92:22:46:57:b7:0e:91:ff:8a:21:41:02:42:
68:90:c9:b3:e7:93:57:8d:dd:f0:0e:db:45:2c:1a:86:4a:21:
b7:68:22:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:28 2023 by rpki-client on console-fra.rpki-client.org