Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/XDZhhHPIJss9LLXqS9vSWNGgtaE.mft
File: XDZhhHPIJss9LLXqS9vSWNGgtaE.mft (raw, json)
Hash identifier: Gle6/1zI7LOSeBKrRbCneuP6WMLZlO/pBXwquOjicq0=
Subject key identifier: C6:18:EC:16:D7:1E:5B:2F:FF:FF:D9:57:F7:AF:78:9C:F5:A1:6F:A4
Authority key identifier: 5C:36:61:84:73:C8:26:CB:3D:2C:B5:EA:4B:DB:D2:58:D1:A0:B5:A1
Certificate issuer: /CN=5c36618473c826cb3d2cb5ea4bdbd258d1a0b5a1
Certificate serial: 018E418EC81FA1C8D768AF8E5A4B4C8810D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDZhhHPIJss9LLXqS9vSWNGgtaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/XDZhhHPIJss9LLXqS9vSWNGgtaE.mft
Manifest number: 041E
Signing time: Fri 15 Mar 2024 10:01:00 +0000
Manifest this update: Fri 15 Mar 2024 10:01:00 +0000
Manifest next update: Sat 16 Mar 2024 10:01:00 +0000
Files and hashes: 1: XDZhhHPIJss9LLXqS9vSWNGgtaE.crl (hash: hUucmyu4Na9nUWIRJGLcClWY65ZEt4auYs1EImeISqs=)
2: xuYoq0rl4K18lKFD9TBBQqSNtYo.roa (hash: 49LnGG16eY9QHC3KGpHDhBj7CkGCx3Gc52aYjgPZFFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:8e:c8:1f:a1:c8:d7:68:af:8e:5a:4b:4c:88:10:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c36618473c826cb3d2cb5ea4bdbd258d1a0b5a1
Validity
Not Before: Mar 15 10:01:00 2024 GMT
Not After : Mar 16 10:01:00 2024 GMT
Subject: CN=c618ec16d71e5b2fffffd957f7af789cf5a16fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:f8:9a:cb:14:a4:dd:7e:15:62:98:b8:1a:
1b:13:e8:73:e3:41:16:f3:15:63:34:a5:66:71:28:
60:66:50:2d:8b:e3:38:c1:98:63:91:7f:f1:83:7a:
1e:26:79:e2:46:06:2f:95:16:a5:01:46:ec:a0:b9:
a5:6e:2f:a2:71:8f:e1:2d:57:c2:38:02:e7:05:d5:
1f:42:8d:7f:c8:c7:6b:8b:0a:6f:b4:8c:a0:24:37:
05:82:75:ee:fe:e8:df:eb:c6:29:14:42:8a:a5:77:
c7:c3:6b:58:c7:89:ab:f7:a3:0c:86:18:bb:2f:48:
e4:48:cf:b6:15:5e:34:b9:ac:ec:af:b4:7d:c6:52:
c1:22:ec:91:8a:34:91:92:d4:e6:91:8a:98:a2:3a:
68:bb:5d:ad:46:16:fa:57:72:d2:98:ba:6d:c2:c2:
13:07:b9:99:a5:b2:6a:ff:9b:45:e9:e5:8d:3e:77:
37:52:a7:d0:3c:ee:37:a9:1c:11:9c:41:75:82:e2:
60:8f:9c:a1:d4:4f:d1:ae:d0:97:c7:35:a9:0d:4a:
32:97:d7:b3:b8:78:12:ec:66:5f:a5:61:1a:ab:b3:
f0:d2:7f:f4:e3:8d:ab:b1:ea:82:60:28:50:1e:fa:
79:9e:69:21:1e:2e:7b:a1:5f:a2:a9:85:0c:73:15:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:EC:16:D7:1E:5B:2F:FF:FF:D9:57:F7:AF:78:9C:F5:A1:6F:A4
X509v3 Authority Key Identifier:
keyid:5C:36:61:84:73:C8:26:CB:3D:2C:B5:EA:4B:DB:D2:58:D1:A0:B5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDZhhHPIJss9LLXqS9vSWNGgtaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/XDZhhHPIJss9LLXqS9vSWNGgtaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/XDZhhHPIJss9LLXqS9vSWNGgtaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:60:d3:74:84:24:29:5d:48:d1:6c:c0:24:b8:25:95:d1:9e:
e7:28:6b:dd:f2:7e:74:f3:46:6a:2d:b1:fa:be:bc:46:34:4c:
f1:39:b8:2f:a1:4b:f5:cf:ac:aa:3f:49:14:be:2e:e9:df:27:
5a:4f:5b:eb:3c:c3:85:5f:16:60:57:e7:0a:11:65:dc:d4:c5:
ee:e7:d6:b4:4a:76:3d:31:22:70:3e:11:42:a0:40:05:e3:da:
4f:b2:2e:36:d5:36:63:62:bb:d6:00:e8:0d:a0:ed:d3:e7:2a:
76:5a:79:e7:df:53:f9:d4:92:3f:2d:3f:dd:8c:58:b2:a0:0e:
0e:ae:1b:8d:93:56:2d:09:7a:f9:09:73:d6:c6:24:88:21:cd:
9d:f5:1e:10:e1:2c:2e:63:e0:62:45:37:72:ba:e7:f2:97:8d:
0b:f5:47:34:31:cf:02:13:57:72:0c:6d:58:fb:8f:45:f6:87:
17:8b:93:dd:22:1b:8c:a5:92:88:5d:3e:26:fa:85:b6:7a:b4:
6f:9c:55:6e:c3:a1:8a:df:a7:f5:83:cd:39:ff:db:33:78:3f:
8e:ec:25:fd:ad:cf:d1:5c:b1:65:a8:f8:c9:d9:c7:05:cf:64:
41:67:49:a1:63:01:eb:c4:84:c8:54:76:25:af:82:19:f0:1a:
6a:68:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:04 2024 by rpki-client on console-ams.rpki-client.org