Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/kLn6PSU9OanALFNFlGncuHZeFds.mft
File: kLn6PSU9OanALFNFlGncuHZeFds.mft (raw, json)
Hash identifier: 608/OdFJ03HjCNY5ciuvd+R/hspEMkoM1MXa6vV58a0=
Subject key identifier: B0:85:54:77:D8:E0:F4:7C:DD:68:15:6B:39:03:61:6F:69:E5:BD:3A
Authority key identifier: 90:B9:FA:3D:25:3D:39:A9:C0:2C:53:45:94:69:DC:B8:76:5E:15:DB
Certificate issuer: /CN=90b9fa3d253d39a9c02c53459469dcb8765e15db
Certificate serial: 01855D72F32EFBD11E9D65FA04AB8E2089F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLn6PSU9OanALFNFlGncuHZeFds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/kLn6PSU9OanALFNFlGncuHZeFds.mft
Manifest number: 0BF1
Signing time: Thu 29 Dec 2022 10:34:52 +0000
Manifest this update: Thu 29 Dec 2022 10:34:52 +0000
Manifest next update: Fri 30 Dec 2022 10:34:52 +0000
Files and hashes: 1: kLn6PSU9OanALFNFlGncuHZeFds.crl (hash: szPKqc7KwWsSlT6ZqLs0r51/EdNbD2R8568/uHbckWE=)
2: tCjBK7H277hEuFBnaIbfiAY8nr0.roa (hash: KWWam3nC7qaxpsgFy83Tu1LucFB74GufBmWVlu5PyeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:72:f3:2e:fb:d1:1e:9d:65:fa:04:ab:8e:20:89:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b9fa3d253d39a9c02c53459469dcb8765e15db
Validity
Not Before: Dec 29 10:34:52 2022 GMT
Not After : Dec 30 10:34:52 2022 GMT
Subject: CN=b0855477d8e0f47cdd68156b3903616f69e5bd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:f4:b3:80:8c:d8:a0:ad:64:93:3d:b5:af:
86:f8:59:4b:e3:71:b6:47:1b:7e:14:9f:af:e3:40:
22:d5:ab:30:c6:4e:f4:08:33:77:42:d8:8d:f5:18:
97:4d:1b:ac:6c:c9:f5:cb:56:27:3b:53:e1:74:68:
ed:62:d3:7f:4c:04:d1:29:a2:50:2f:e1:7c:0d:b2:
69:f0:b7:ac:50:1c:67:f7:f2:00:d4:1c:9b:87:e5:
27:dc:6a:95:1e:41:1a:09:e1:f9:6f:06:6a:f5:03:
7c:61:2b:f2:c5:8e:f9:de:65:4d:77:74:8b:d4:5c:
a2:1c:15:1a:a9:86:74:ae:74:4e:3d:2a:ce:fa:ac:
87:63:ee:8a:c2:c0:b9:cd:52:37:99:93:29:7f:60:
73:5f:d4:00:24:c3:26:93:9d:69:85:ae:36:4e:3b:
ae:6a:f2:75:38:26:39:69:e1:7c:0f:41:6b:88:7b:
9d:79:66:11:97:f3:a3:33:61:a8:93:6c:9c:50:71:
de:15:71:76:bb:c9:b4:42:07:3a:b6:1a:80:47:2e:
fe:7c:04:a6:c9:73:f3:a0:b7:8f:22:c7:c9:38:58:
32:dd:c5:14:7d:30:7b:c1:25:b7:6b:ab:61:15:82:
d4:1e:a9:a9:7b:07:f1:60:8d:4c:94:b8:fb:bf:e1:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:85:54:77:D8:E0:F4:7C:DD:68:15:6B:39:03:61:6F:69:E5:BD:3A
X509v3 Authority Key Identifier:
keyid:90:B9:FA:3D:25:3D:39:A9:C0:2C:53:45:94:69:DC:B8:76:5E:15:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLn6PSU9OanALFNFlGncuHZeFds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/kLn6PSU9OanALFNFlGncuHZeFds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a09319-c7b9-4b1a-a385-17a5078f4aa5/1/kLn6PSU9OanALFNFlGncuHZeFds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ce:51:fb:a1:b4:c6:66:62:b4:63:87:87:0e:ed:55:15:a4:
bb:f7:ed:30:99:d5:36:8b:86:b6:04:df:c0:e2:2c:5d:4b:89:
bd:ff:7b:ca:63:87:a9:9d:76:fc:7d:4d:8d:b8:c0:14:3c:5a:
41:e8:d1:7f:91:ee:c3:8f:57:9b:78:4b:4e:b2:8e:1e:f1:50:
2d:82:1f:bf:57:cf:c0:05:9a:3b:98:e0:46:57:64:15:ee:46:
da:d0:67:aa:73:84:0d:5c:39:e2:2c:c5:53:85:e1:13:c5:bf:
c6:82:98:30:08:fd:fc:bb:ed:3a:47:ba:57:0f:ea:83:cd:88:
26:94:e4:f8:b3:8d:60:a4:de:e3:2d:c7:9b:8a:50:61:ad:ed:
d0:6e:9c:9c:c2:4e:9d:65:84:8c:d8:ea:db:76:a6:d8:90:d8:
fe:aa:cb:e2:ef:8c:4c:90:24:97:85:b6:e7:e7:42:15:9d:4c:
39:41:61:0e:4d:f9:b6:4d:95:d5:5b:d5:ee:2f:73:8e:9a:b3:
45:2f:77:04:24:81:f7:36:af:bb:d0:a2:94:0f:fd:04:d5:ed:
15:0f:79:06:73:07:a6:ba:05:3b:17:f1:f6:f4:5a:a1:6a:e1:
f7:14:c2:8d:b6:29:41:1a:e3:c1:ae:be:18:62:19:7b:f2:1d:
8b:ff:61:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:42 2024 by rpki-client on console-fra.rpki-client.org