Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.mft
File: kjX6qImIoOVJ0vmepc0A2KPOhiw.mft (raw, json)
Hash identifier: 0MRlEFjLQRULWIUevrl99cTOs3bi0C17mO4OM1fVPhc=
Subject key identifier: FD:4A:C8:EA:00:1E:0F:79:A8:C5:B8:1B:71:D2:28:44:44:BB:DC:D3
Authority key identifier: 92:35:FA:A8:89:88:A0:E5:49:D2:F9:9E:A5:CD:00:D8:A3:CE:86:2C
Certificate issuer: /CN=9235faa88988a0e549d2f99ea5cd00d8a3ce862c
Certificate serial: 018919F0E1039801AC8EC0208832247D67A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjX6qImIoOVJ0vmepc0A2KPOhiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.mft
Manifest number: 0CB4
Signing time: Mon 03 Jul 2023 04:09:23 +0000
Manifest this update: Mon 03 Jul 2023 04:09:23 +0000
Manifest next update: Tue 04 Jul 2023 04:09:23 +0000
Files and hashes: 1: kjX6qImIoOVJ0vmepc0A2KPOhiw.crl (hash: zcsuHcgxr47MhrgVYNDmEQ6VqRD9R55fRgpj07ydnw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:19:f0:e1:03:98:01:ac:8e:c0:20:88:32:24:7d:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9235faa88988a0e549d2f99ea5cd00d8a3ce862c
Validity
Not Before: Jul 3 04:09:23 2023 GMT
Not After : Jul 4 04:09:23 2023 GMT
Subject: CN=fd4ac8ea001e0f79a8c5b81b71d2284444bbdcd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:eb:f6:23:b3:af:f4:15:18:34:d1:bd:bd:
db:7f:a2:fb:0a:9b:0f:95:3b:ef:be:62:1d:b7:ea:
29:7c:bc:85:3f:33:95:ce:63:b0:de:af:f2:4e:83:
c3:c1:23:61:b4:6d:7f:40:7b:6c:b5:c9:87:f9:f9:
2e:5b:ad:06:84:39:25:a8:fc:0e:6e:66:46:09:5b:
13:e4:c9:3b:4c:db:d5:f5:81:47:d1:aa:04:be:7f:
80:de:1e:77:3d:39:9c:d6:8e:7c:ce:64:d1:69:7d:
67:f0:78:f3:4e:45:e7:1b:91:2d:31:0c:1e:30:12:
34:ca:ce:fe:58:8b:ac:4c:11:91:f7:fe:4e:58:86:
d1:81:f5:3a:8a:1f:87:91:4c:94:c2:de:0f:31:9b:
41:a2:69:0d:32:53:bf:ec:d8:31:8e:e9:37:85:7b:
55:f7:30:75:d0:b2:d3:07:ce:be:ff:2f:b9:35:d8:
b4:cb:66:3f:b2:0a:dc:86:38:10:73:61:57:50:14:
06:e9:43:10:ea:21:88:a4:a8:4f:a4:73:c1:0a:ff:
b3:bd:6c:ff:29:d5:66:aa:cd:92:ff:50:b9:a0:ca:
5f:d4:04:6c:69:69:1a:33:27:e5:ee:e8:8a:df:8e:
74:f8:2e:20:24:2f:45:45:5e:fb:fe:66:51:f9:46:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4A:C8:EA:00:1E:0F:79:A8:C5:B8:1B:71:D2:28:44:44:BB:DC:D3
X509v3 Authority Key Identifier:
keyid:92:35:FA:A8:89:88:A0:E5:49:D2:F9:9E:A5:CD:00:D8:A3:CE:86:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjX6qImIoOVJ0vmepc0A2KPOhiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/deb0da-5609-4577-acf9-50f57507e2c6/1/kjX6qImIoOVJ0vmepc0A2KPOhiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5b:31:66:aa:90:22:12:dc:bb:1f:67:c2:da:ad:43:48:04:
a1:85:bb:6d:ff:8c:e9:bd:bd:47:c9:29:48:8c:8f:3e:b7:72:
80:cc:8b:5f:dd:b4:78:bc:1a:c0:4d:d8:75:e1:c5:63:46:d4:
f4:76:70:5c:1f:d6:e2:59:4a:04:dd:60:17:57:fe:40:72:95:
48:69:e2:67:87:42:ef:1d:11:35:45:35:7d:e3:eb:68:80:34:
38:fa:58:42:e4:35:c3:87:74:10:54:22:c2:bc:f4:d7:b4:b9:
4d:9e:71:9d:e8:3c:1c:05:8a:83:88:e7:82:6e:bb:e1:aa:b3:
99:77:d5:67:45:23:e4:19:fe:34:40:31:5c:0c:10:20:da:f6:
50:01:6c:bf:39:1e:a3:61:40:58:43:5c:76:6d:3f:da:37:9b:
dd:2a:37:56:90:e7:38:0c:7f:73:d2:af:b3:cd:f6:7b:0a:29:
9e:6e:c2:95:66:ab:8c:e9:68:47:61:95:47:6d:ef:e5:b0:d1:
47:18:2d:93:8a:14:53:b4:f6:80:8e:3f:44:42:8c:02:0d:53:
17:07:67:7f:f1:38:e2:3a:ee:c8:c9:e1:5b:41:e6:39:e6:a4:
80:d0:42:47:96:bc:79:fd:2f:c5:ea:5a:00:9f:70:b4:e0:a2:
4c:f8:c9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:23 2024 by rpki-client on console-ams.rpki-client.org