Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.mft
File: jrcoKeb3Dr5r2wfOyNC4VeV3T5c.mft (raw, json)
Hash identifier: wjSCG5FKMZrK0id7vI4e165PhykkxOw9tkKWUPAvzVA=
Subject key identifier: 9D:48:38:DF:F1:DD:F7:6C:59:F9:21:21:98:E0:9E:00:45:72:0C:34
Authority key identifier: 8E:B7:28:29:E6:F7:0E:BE:6B:DB:07:CE:C8:D0:B8:55:E5:77:4F:97
Certificate issuer: /CN=8eb72829e6f70ebe6bdb07cec8d0b855e5774f97
Certificate serial: 018BEBBF56511513618A8F50489D4C56F430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.mft
Manifest number: 0857
Signing time: Mon 20 Nov 2023 08:01:07 +0000
Manifest this update: Mon 20 Nov 2023 08:01:07 +0000
Manifest next update: Tue 21 Nov 2023 08:01:07 +0000
Files and hashes: 1: 82vzer1BnM5eo_BHedG_898GP6s.roa (hash: Mj3gWPNbnB2gLH56iUoCem7GjP97EeXHPumF0JWWVLE=)
2: jrcoKeb3Dr5r2wfOyNC4VeV3T5c.crl (hash: OBPnJiBu+1BVRci1DW1+QB/FKxSTa0vq+Xfj9vBX5nY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:bf:56:51:15:13:61:8a:8f:50:48:9d:4c:56:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb72829e6f70ebe6bdb07cec8d0b855e5774f97
Validity
Not Before: Nov 20 08:01:07 2023 GMT
Not After : Nov 21 08:01:07 2023 GMT
Subject: CN=9d4838dff1ddf76c59f9212198e09e0045720c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:49:74:59:a4:92:fe:d9:1e:63:43:b8:e7:
45:b5:c4:26:73:13:99:90:8c:b6:bc:af:52:d1:76:
df:cf:23:ea:a4:de:58:84:56:52:61:9f:13:f7:46:
86:48:bb:8b:94:6e:4b:8b:fb:3b:08:14:d4:0d:43:
19:b4:fa:d2:d9:da:94:bf:2e:51:4f:ef:a9:29:31:
3e:d0:62:e0:b4:53:3e:60:c5:0c:35:ae:ca:37:8b:
5f:54:59:29:35:f4:f2:39:13:71:e3:10:c9:2f:7c:
32:5f:a2:11:81:73:87:14:02:32:2b:4d:52:9b:77:
3e:e4:ad:fd:b1:1a:d0:97:5f:1b:98:cb:1a:d8:5c:
2f:b9:75:7e:66:d1:32:4f:c3:e6:5e:14:85:7d:96:
9b:37:44:73:61:89:5a:3b:05:52:0d:f6:68:80:9a:
0f:e8:61:d3:c6:19:cd:25:f6:23:d7:bb:73:fe:80:
7e:8b:8a:a4:66:c4:db:fb:2e:e4:29:a9:db:4c:10:
60:0f:26:74:e5:7d:45:3f:f6:35:ce:41:17:c7:cc:
87:7b:d6:49:e9:40:38:e1:4e:22:ce:50:f6:27:ac:
bc:a7:14:a8:0a:ed:d5:12:dd:6d:ae:9c:fb:a5:99:
c9:41:57:14:2b:02:ab:4a:ee:35:c1:36:89:dd:c8:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:38:DF:F1:DD:F7:6C:59:F9:21:21:98:E0:9E:00:45:72:0C:34
X509v3 Authority Key Identifier:
keyid:8E:B7:28:29:E6:F7:0E:BE:6B:DB:07:CE:C8:D0:B8:55:E5:77:4F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:25:b1:b5:a2:ae:23:1b:10:0c:94:9e:d2:ce:39:1c:03:41:
fd:84:6c:81:f8:a2:56:9e:f4:2e:53:c7:54:30:0f:c2:94:a9:
f4:55:79:6d:6f:57:5e:a9:98:54:25:b1:8f:44:8d:e7:82:bb:
62:ce:30:6c:8f:da:5c:50:93:fd:41:40:61:28:79:50:a4:79:
ea:7b:5b:5a:65:85:65:56:b2:c8:75:8d:e8:ce:68:2d:0d:25:
4e:f8:56:09:33:b8:4e:c2:91:a9:88:a4:b6:02:c6:9b:21:39:
95:fe:a1:37:07:a4:a6:ed:dd:8b:40:c1:c3:0a:62:e1:68:21:
4e:a2:75:a4:da:fc:e8:5b:28:24:d4:0d:e2:bd:5b:df:a9:4e:
18:02:d4:d3:0a:58:06:f4:6a:8a:6a:f9:4d:84:5c:6e:ec:8b:
c7:fd:86:01:e1:a7:1a:60:ef:c7:2f:2d:81:39:19:51:be:55:
1b:18:07:d1:91:cd:0e:84:5a:f2:38:70:d8:70:9f:a7:86:da:
33:93:d1:7c:68:16:33:d8:04:3f:27:27:cf:1a:10:87:bf:eb:
92:ef:4c:db:8f:08:89:82:a0:fb:f5:a1:a7:c8:69:77:07:37:
e6:4f:92:57:5d:1c:e3:11:44:ea:94:fb:a6:46:af:1d:7d:fa:
db:60:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:13 2024 by rpki-client on console-fra.rpki-client.org