Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.mft
File: 1-fHQ4bRFow_CP1SBKRjuvVe50EI.mft (raw, json)
Hash identifier: BGZyK6ZKg/Urx+E7RShf3E6yMFqV5Sq9cv7UgvZ+Sos=
Subject key identifier: 7F:BD:1E:13:2B:12:98:FF:B9:32:7C:7C:90:9B:7B:BC:D0:00:A2:F9
Authority key identifier: F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
Certificate issuer: /CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Certificate serial: 018AFE6CEF0DD7970B28FF065510CD17F39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.mft
Manifest number: 0893
Signing time: Thu 05 Oct 2023 06:01:06 +0000
Manifest this update: Thu 05 Oct 2023 06:01:06 +0000
Manifest next update: Fri 06 Oct 2023 06:01:06 +0000
Files and hashes: 1: 1-fHQ4bRFow_CP1SBKRjuvVe50EI.crl (hash: whdI6pDt4wb7GPThz3G/ka22Z6iCEzVEOJAHufDaHvY=)
2: EaC4w7SjRT-3au0_QnGLqlCKszo.roa (hash: fPjOMus2XAE3qnK7CnlFfIRQBwXhNtp4aLqajIylcjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:6c:ef:0d:d7:97:0b:28:ff:06:55:10:cd:17:f3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f1d0e1b445a30fc23f54812918eebd57b9d042
Validity
Not Before: Oct 5 06:01:06 2023 GMT
Not After : Oct 6 06:01:06 2023 GMT
Subject: CN=7fbd1e132b1298ffb9327c7c909b7bbcd000a2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:37:90:bf:ae:87:86:cc:de:35:1a:a7:3b:38:
e5:e8:a8:ac:d3:82:73:7a:73:46:07:b9:d7:73:e6:
67:ad:cc:48:45:af:18:7f:cd:ab:b3:a4:ac:49:f9:
1e:71:aa:d6:86:48:6a:31:fe:c9:62:65:0c:bb:c0:
28:81:80:be:84:7c:79:6b:72:cd:fd:d1:9f:6b:fe:
62:c9:ad:44:4e:1f:25:d4:76:96:37:48:cc:83:09:
13:3e:ab:31:9a:31:1a:12:f9:e2:79:19:95:75:48:
ce:c3:0c:80:85:d0:6f:90:3d:f3:ac:79:10:f8:aa:
bc:f1:93:0b:74:15:02:e8:6c:93:3f:2b:8d:a4:1d:
53:39:4f:83:2f:38:7c:00:4a:f5:66:04:d7:75:f3:
f9:91:24:96:ff:cd:85:66:36:1b:2a:af:2b:66:d8:
76:eb:3d:9c:9f:ad:50:72:63:d6:32:db:52:2d:4c:
65:12:99:3e:b4:8a:e7:e9:d1:1f:18:de:db:fe:b3:
0c:7a:d6:ea:e8:12:7a:54:b3:f8:33:18:ed:0c:f6:
99:c1:fd:f7:1b:98:8c:4e:90:72:0d:11:1a:5f:a8:
a9:a8:b0:9e:4e:11:eb:55:56:d0:d2:ab:f7:72:40:
e4:a7:0f:6c:65:71:cf:bc:7f:16:db:1a:26:2a:90:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BD:1E:13:2B:12:98:FF:B9:32:7C:7C:90:9B:7B:BC:D0:00:A2:F9
X509v3 Authority Key Identifier:
keyid:F9:F1:D0:E1:B4:45:A3:0F:C2:3F:54:81:29:18:EE:BD:57:B9:D0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-fHQ4bRFow_CP1SBKRjuvVe50EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/0972fe-b6bf-4c00-8351-ec3144044c01/1/1-fHQ4bRFow_CP1SBKRjuvVe50EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:96:31:7e:b8:06:a7:dd:0d:89:97:13:60:15:60:35:9f:db:
1e:7b:5f:8c:3a:ea:39:ca:fc:37:50:9e:7d:53:60:33:41:b8:
57:5d:10:40:1a:21:6a:60:9b:48:a3:00:64:15:19:52:2c:55:
c3:6b:53:ce:78:73:fe:d1:9e:0e:82:d1:01:00:1c:46:ef:3a:
1f:01:d5:d6:33:cf:f3:6b:aa:25:25:f5:de:d5:4a:a2:2e:fb:
e2:0a:9a:3d:64:50:f2:22:f4:4d:4b:aa:e2:cd:c7:11:c4:f6:
0a:55:f0:81:27:e7:14:de:4c:ef:df:78:45:1f:dc:25:55:27:
b2:8c:43:15:22:c4:9d:da:84:13:dd:ba:01:5c:7c:2c:bf:6a:
e8:37:55:19:03:40:8b:0d:39:7b:6e:c8:66:9d:03:4d:56:8b:
8a:ae:4c:36:98:54:f4:da:1b:9e:f3:c6:02:25:f7:36:1f:14:
f6:1c:40:6d:26:7e:5f:c3:e1:87:bd:84:45:c3:15:c5:06:51:
45:65:15:a1:58:64:8a:4f:e8:c5:03:62:6c:82:f8:54:fc:fd:
e8:4b:d9:95:63:fa:95:f8:63:8a:ad:15:8f:30:a3:e7:70:01:
ba:23:52:ac:27:1b:ba:7f:4b:75:bf:66:59:2c:af:03:2e:f0:
5e:94:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:30 2024 by rpki-client on console-ams.rpki-client.org