Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/nH1O8Ae-W5AxcnfxwWhACmhhJNg.mft
File: nH1O8Ae-W5AxcnfxwWhACmhhJNg.mft (raw, json)
Hash identifier: FTXIC+YYHe1rOkhT1mnDszanRhWeULpiwoMit3jbqNY=
Subject key identifier: 47:E4:CD:F3:40:A9:7F:0F:96:CE:03:30:6A:3C:50:92:7A:F1:58:4D
Authority key identifier: 9C:7D:4E:F0:07:BE:5B:90:31:72:77:F1:C1:68:40:0A:68:61:24:D8
Certificate issuer: /CN=9c7d4ef007be5b90317277f1c168400a686124d8
Certificate serial: 018BA85E0D87FBFF1D608B16B061E149F10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nH1O8Ae-W5AxcnfxwWhACmhhJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/nH1O8Ae-W5AxcnfxwWhACmhhJNg.mft
Manifest number: 028C
Signing time: Tue 07 Nov 2023 06:00:17 +0000
Manifest this update: Tue 07 Nov 2023 06:00:17 +0000
Manifest next update: Wed 08 Nov 2023 06:00:17 +0000
Files and hashes: 1: lsNczk4rDmRBSwVAP5GubZc31Vo.roa (hash: vxEJxcCY1ywoGsnbwgr213iy3/bfmuH75MEw2EYtTbU=)
2: nH1O8Ae-W5AxcnfxwWhACmhhJNg.crl (hash: SjMJII+X84yQPi2EazskakRGRUMafxaAaheRilmnk0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:5e:0d:87:fb:ff:1d:60:8b:16:b0:61:e1:49:f1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7d4ef007be5b90317277f1c168400a686124d8
Validity
Not Before: Nov 7 06:00:17 2023 GMT
Not After : Nov 8 06:00:17 2023 GMT
Subject: CN=47e4cdf340a97f0f96ce03306a3c50927af1584d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:31:41:9f:52:9e:68:84:42:2c:a1:5b:63:
29:b1:1a:32:38:e8:7c:5b:6a:80:17:65:66:20:47:
72:3e:aa:29:ee:a2:c9:c2:31:3d:57:3e:6e:8c:78:
d8:94:73:dc:e8:17:6c:62:d0:f0:a7:56:18:c1:c3:
54:70:b8:e8:b1:e7:79:35:a9:6d:bc:e7:9c:b3:f9:
d9:1d:58:40:40:57:10:cf:b9:90:56:2d:53:53:54:
f8:b9:a3:a8:86:d4:c9:38:35:eb:97:21:ca:64:76:
e7:b2:e9:9b:25:f9:30:70:e4:9e:48:dc:ed:8d:bc:
76:7c:43:c1:b7:a0:16:01:fd:97:94:34:05:08:83:
f6:6f:be:3f:5b:5d:3e:ac:ec:5e:0d:10:d1:9b:7d:
3d:0b:55:29:d0:62:8b:7e:ae:cc:54:79:44:37:f0:
91:62:c2:45:39:27:ed:bb:1b:66:ed:b3:be:be:f6:
4b:53:db:a9:3f:f6:5f:34:b0:e3:f9:18:18:df:b0:
5e:5d:23:da:f3:c6:06:c6:9c:68:6a:a5:89:bb:c8:
26:ee:c2:64:6a:4c:9b:aa:d4:13:95:f9:f3:66:5d:
07:0a:45:9c:54:83:1e:4c:3a:20:f9:0d:c1:bd:c7:
32:8b:23:5e:98:1a:16:d4:1d:1e:2e:f1:28:6e:e0:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E4:CD:F3:40:A9:7F:0F:96:CE:03:30:6A:3C:50:92:7A:F1:58:4D
X509v3 Authority Key Identifier:
keyid:9C:7D:4E:F0:07:BE:5B:90:31:72:77:F1:C1:68:40:0A:68:61:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH1O8Ae-W5AxcnfxwWhACmhhJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/nH1O8Ae-W5AxcnfxwWhACmhhJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/nH1O8Ae-W5AxcnfxwWhACmhhJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:24:3f:15:5e:9d:01:e5:21:d1:11:5d:26:9c:04:31:20:8b:
39:af:94:28:5c:06:d4:12:e0:73:05:09:dc:3b:18:86:42:db:
1a:16:2e:44:83:72:d7:4a:84:c1:23:71:5e:58:b1:06:14:be:
80:cc:38:cb:d8:47:a4:11:63:41:75:26:a0:f6:67:41:ba:c6:
b7:d8:45:4c:46:0f:86:63:a0:87:30:7f:50:fa:06:ac:1d:f4:
5c:9f:55:78:42:10:e7:97:a6:a4:c7:00:ed:b1:9d:0e:9c:e5:
a3:15:65:71:80:2e:a4:15:fe:58:12:d2:1b:82:ff:ae:9f:83:
e3:f2:ac:95:79:6e:d8:b0:91:50:87:f8:af:b1:3d:e3:81:ca:
d4:e7:05:8e:1d:69:76:2c:d8:20:80:f0:5d:f4:40:90:81:21:
38:e4:16:8b:a6:eb:41:77:9b:5d:a5:0d:4a:be:91:0b:63:bb:
67:1c:7e:a8:d6:7f:eb:f9:22:ce:86:b7:22:f6:b8:ae:04:c1:
f7:03:f0:de:04:7a:f7:af:07:26:45:0e:25:e4:6c:2a:63:3f:
d7:da:d5:97:31:36:07:53:9f:4d:e8:30:34:a1:bc:68:73:20:
ab:d8:15:9a:13:ae:38:03:23:c0:b7:b4:59:7a:c8:15:98:cd:
da:2f:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:59 2024 by rpki-client on console-ams.rpki-client.org