Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbbe76-6b6f-43dc-a71a-591b7281d01a/1/2D4r5qmSducNNAxlgNdfYTzZuas.mft
File: 2D4r5qmSducNNAxlgNdfYTzZuas.mft (raw, json)
Hash identifier: MULMSjzadJTywNlkTurF68w4KyvYMs95oAZ74r7y1ik=
Subject key identifier: 56:E4:10:00:9F:AD:8F:92:AC:EC:68:0D:DA:D2:57:DA:BB:20:53:59
Authority key identifier: D8:3E:2B:E6:A9:92:76:E7:0D:34:0C:65:80:D7:5F:61:3C:D9:B9:AB
Certificate issuer: /CN=d83e2be6a99276e70d340c6580d75f613cd9b9ab
Certificate serial: 018B8F7A911DE806B4C087B9247DE3BC4285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2D4r5qmSducNNAxlgNdfYTzZuas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbbe76-6b6f-43dc-a71a-591b7281d01a/1/2D4r5qmSducNNAxlgNdfYTzZuas.mft
Manifest number: 087D
Signing time: Thu 02 Nov 2023 10:00:56 +0000
Manifest this update: Thu 02 Nov 2023 10:00:56 +0000
Manifest next update: Fri 03 Nov 2023 10:00:56 +0000
Files and hashes: 1: 2D4r5qmSducNNAxlgNdfYTzZuas.crl (hash: lsbAPxln3mfEIFQV7MZtnzuZub4AHMbR0Il4PMXJ1OU=)
2: IMjWOdSy7Aml9mlhKv4xPtXsQl4.roa (hash: otP1UEfvh/og0oFJV7zVP/7XO21TDEdMph2I0MXDODg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:7a:91:1d:e8:06:b4:c0:87:b9:24:7d:e3:bc:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83e2be6a99276e70d340c6580d75f613cd9b9ab
Validity
Not Before: Nov 2 10:00:56 2023 GMT
Not After : Nov 3 10:00:56 2023 GMT
Subject: CN=56e410009fad8f92acec680ddad257dabb205359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:10:4d:e0:1b:67:cd:81:59:1f:78:53:49:
0b:1f:b0:2d:92:b4:f4:d0:6a:4b:84:3e:a1:d7:1d:
d7:4b:e6:47:72:3b:d9:59:bf:99:7f:0b:3c:6c:24:
4a:07:7e:65:fd:ee:b8:0b:0d:56:bb:69:a7:0c:1c:
17:c8:1a:8c:ea:bb:47:d4:34:e5:53:6e:29:61:17:
78:fc:7f:da:d6:a9:c3:6d:ea:9d:54:df:70:1f:ed:
74:be:ee:98:6f:e0:c3:6f:eb:0d:56:b1:7e:c7:68:
76:3e:f6:68:34:44:d3:60:98:46:35:a8:48:45:58:
39:a9:2b:45:25:bb:68:2c:95:14:bf:12:1f:db:6d:
44:4a:23:c6:ae:df:b0:66:1f:f8:53:aa:8d:0f:7d:
60:04:42:f9:ca:37:2d:13:95:42:b3:01:dd:52:04:
aa:26:24:7a:70:06:34:5a:03:b7:90:bc:44:21:4e:
3f:30:41:ed:b8:e4:24:72:38:9d:86:db:1f:18:0d:
a7:d2:3c:06:70:b0:f9:40:d0:e8:a0:36:7d:e2:9b:
90:dc:88:94:40:ba:33:ce:13:e3:ae:ef:19:f2:16:
56:91:cf:c6:ff:f2:75:f3:d7:a5:44:79:1f:06:4c:
29:42:27:62:97:f9:ba:6b:fa:74:21:bf:63:0a:55:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:10:00:9F:AD:8F:92:AC:EC:68:0D:DA:D2:57:DA:BB:20:53:59
X509v3 Authority Key Identifier:
keyid:D8:3E:2B:E6:A9:92:76:E7:0D:34:0C:65:80:D7:5F:61:3C:D9:B9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2D4r5qmSducNNAxlgNdfYTzZuas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbbe76-6b6f-43dc-a71a-591b7281d01a/1/2D4r5qmSducNNAxlgNdfYTzZuas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbbe76-6b6f-43dc-a71a-591b7281d01a/1/2D4r5qmSducNNAxlgNdfYTzZuas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ce:18:98:d8:ff:b7:f2:40:9f:f8:ce:f3:ca:ca:5c:68:51:
e3:ba:7e:4e:56:16:d9:4e:68:16:22:39:97:dd:fb:9b:de:35:
98:da:f5:8a:81:3b:db:2d:e0:87:47:8a:8d:80:57:ec:4a:01:
d7:7f:8d:9e:75:16:b8:5c:99:68:9b:4c:1b:82:5a:69:cf:25:
99:51:20:62:02:d8:cb:10:76:a5:9d:ba:33:b8:fe:bb:70:d9:
5e:3d:78:ab:cf:f7:93:eb:72:c1:ee:a5:cf:e8:e1:49:70:b6:
18:d4:fd:0c:55:32:00:b3:2b:a2:a9:73:f6:59:7d:27:92:be:
37:0b:9c:d2:e2:cb:00:e2:7b:62:78:ac:52:a3:c6:c6:ca:3a:
6e:c0:a6:af:5b:16:ad:d3:7b:2a:77:27:20:12:10:7b:99:28:
80:66:c4:f4:66:9a:3f:22:5a:43:33:f7:59:72:fa:3a:d6:35:
53:66:eb:ce:c9:8b:dc:a5:ba:29:70:21:f3:70:01:31:fe:97:
e3:2b:b8:16:30:9a:d3:52:ab:3e:bb:1a:72:c3:05:19:86:0a:
ea:0a:92:e3:2a:48:68:60:35:6a:bf:20:8b:84:d2:61:91:a5:
24:3f:17:c8:16:9b:67:b1:1e:34:dd:71:61:55:a7:e0:a5:ae:
be:c8:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 16:39:51 2023 by rpki-client on console-fra.rpki-client.org