Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.mft
File: g8vlbRTyw6LGVlm204pMBYON7X0.mft (raw, json)
Hash identifier: Bjetgmz+YQn3n1WpIZt2R8A1PAzNzefV5tfm0JjYOvo=
Subject key identifier: A2:38:52:E7:DA:B2:8E:C4:CC:E7:CA:E4:CC:79:99:C3:26:5C:AA:63
Authority key identifier: 83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
Certificate issuer: /CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Certificate serial: 0184BDAE56EA1EDD98FF8CF796F4692E62F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.mft
Manifest number: 0403
Signing time: Mon 28 Nov 2022 10:00:29 +0000
Manifest this update: Mon 28 Nov 2022 10:00:29 +0000
Manifest next update: Tue 29 Nov 2022 10:00:29 +0000
Files and hashes: 1: GKUIrfInLO7A0kjxtFXLajzfjN4.roa (hash: xzg36mlHfESrd10ciKbeDURgEWXlzWC7lHurtxYeUqw=)
2: g8vlbRTyw6LGVlm204pMBYON7X0.crl (hash: eWamUBegKqM7g79yoIM958YkNZgany7bnV/h/VvLLpE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:ae:56:ea:1e:dd:98:ff:8c:f7:96:f4:69:2e:62:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Validity
Not Before: Nov 28 10:00:29 2022 GMT
Not After : Nov 29 10:00:29 2022 GMT
Subject: CN=a23852e7dab28ec4cce7cae4cc7999c3265caa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1d:39:49:40:94:ac:63:b8:2b:ef:5f:57:9e:
b1:7c:93:ea:b6:e2:79:77:bd:f1:47:1a:ed:a6:93:
8e:e9:5b:70:14:c2:b3:c2:ca:5a:68:58:5a:79:20:
fd:09:9c:16:8f:57:c8:1d:4e:9f:ee:07:15:33:8c:
ea:4b:44:64:39:c5:47:c9:fc:2a:8d:96:0d:ed:94:
b5:e5:6c:97:be:64:3e:b5:9d:c1:a5:87:57:79:e1:
de:ad:88:7c:42:87:cc:24:47:1d:5d:38:b2:17:13:
d4:ff:a0:70:60:98:ca:41:0f:6c:01:0d:75:4d:ae:
24:91:2f:da:56:60:b6:42:fc:0f:d9:90:8c:25:4c:
0f:14:b7:c2:26:91:8a:92:ea:30:ce:f3:ea:92:95:
8a:d8:56:ee:1a:55:78:4e:90:34:bb:73:64:ee:08:
fe:e4:af:4a:9b:d0:4e:6e:af:c9:54:3c:93:33:b8:
6b:3e:b0:d2:4c:b8:bc:24:a0:0f:67:4d:0f:9a:42:
c3:06:57:bc:fe:ce:1e:17:9b:ed:b5:e3:a7:f5:59:
39:80:9c:b7:ff:e4:52:d1:02:45:75:a3:49:24:56:
f0:46:e7:af:bc:7a:91:45:44:d8:49:3e:c6:62:07:
d4:c9:2e:85:d5:9f:2d:1a:3f:18:13:fc:40:51:77:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:38:52:E7:DA:B2:8E:C4:CC:E7:CA:E4:CC:79:99:C3:26:5C:AA:63
X509v3 Authority Key Identifier:
keyid:83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f7:cf:09:67:fe:f3:32:f0:65:fd:ff:59:d9:2e:b4:6c:b0:
f9:20:0c:68:d9:be:c8:f5:81:78:41:b2:56:a6:2a:26:6e:da:
2e:7b:aa:7a:a2:db:29:23:78:1d:6c:9b:1f:16:c7:93:55:b3:
ba:20:e7:65:9e:cc:e3:ad:90:c2:dc:a4:74:27:cf:50:68:2a:
64:03:4b:72:82:bf:f2:32:25:2f:17:b4:00:95:c6:89:12:a9:
07:f0:7b:66:fc:5a:64:94:73:29:56:dc:f1:6f:be:33:92:9a:
57:df:a5:1b:0f:c3:f2:aa:8f:9b:b4:12:4b:68:ee:e1:97:b6:
8e:2e:82:24:6c:1d:74:ed:81:a5:06:29:3f:96:ed:d7:1e:ec:
ec:d2:05:ca:c3:9a:c6:75:91:f0:ee:07:0b:5c:1b:a3:8b:db:
ac:c6:a6:af:30:d2:f1:8b:9b:8f:58:ba:83:58:8f:7a:64:bb:
93:1e:3c:62:69:30:6d:56:61:2b:52:02:b9:e6:ce:bf:bb:1b:
5b:d8:84:82:48:f7:08:a2:62:7b:15:be:97:e0:8c:0d:5c:0e:
24:08:e9:42:1f:92:20:64:ff:64:cc:fd:53:95:d4:1a:ab:27:
9b:44:15:e7:10:e8:f6:a7:cb:94:a4:54:e3:55:e3:41:30:0d:
d2:5a:1a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:32 2024 by rpki-client on console-ams.rpki-client.org