Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/a8a734-d52b-4b70-b827-dc4e27d775ac/1/PNdIzkO6T6WjA7RMdaeo42KEFYA.mft
File: PNdIzkO6T6WjA7RMdaeo42KEFYA.mft (raw, json)
Hash identifier: /JBjBl0hvgNz+X091D5azK8kmrHs6rqPjDnmJHxUTsk=
Subject key identifier: 6F:52:6F:C0:C3:71:CD:55:5C:5F:22:D7:45:A3:0D:65:58:17:E7:D4
Authority key identifier: 3C:D7:48:CE:43:BA:4F:A5:A3:03:B4:4C:75:A7:A8:E3:62:84:15:80
Certificate issuer: /CN=3cd748ce43ba4fa5a303b44c75a7a8e362841580
Certificate serial: 01826DAB0E1665E31E76777FEA44E022A20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNdIzkO6T6WjA7RMdaeo42KEFYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/a8a734-d52b-4b70-b827-dc4e27d775ac/1/PNdIzkO6T6WjA7RMdaeo42KEFYA.mft
Manifest number: 0A42
Signing time: Fri 05 Aug 2022 11:01:42 +0000
Manifest this update: Fri 05 Aug 2022 11:01:42 +0000
Manifest next update: Sat 06 Aug 2022 11:01:42 +0000
Files and hashes: 1: PNdIzkO6T6WjA7RMdaeo42KEFYA.crl (hash: uB9GEzsf6b6ZpHdk0ckfKRAcn46S03aJQWq7YkxUSDU=)
2: p2oHTA4d4UBF3JvQGS4yp79pK1g.roa (hash: ycCaQI5RDSvutsNnmZFTwVc5pr+w94d44+X4WgUXJPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:ab:0e:16:65:e3:1e:76:77:7f:ea:44:e0:22:a2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd748ce43ba4fa5a303b44c75a7a8e362841580
Validity
Not Before: Aug 5 11:01:42 2022 GMT
Not After : Aug 6 11:01:42 2022 GMT
Subject: CN=6f526fc0c371cd555c5f22d745a30d655817e7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:64:b5:0a:98:49:f5:37:53:6b:9b:18:70:8b:
2b:85:50:cd:fd:f6:72:c6:e8:66:e8:83:55:24:90:
bc:6a:83:65:66:a0:bf:61:bf:1a:6b:f0:d7:dc:99:
f2:82:78:a4:50:1e:ac:e6:b0:5c:f1:ee:6d:1e:27:
4d:8c:af:93:30:03:67:7a:31:55:4d:95:65:ab:cf:
d4:39:4d:2e:05:f5:52:95:f0:23:b3:98:6f:db:05:
5d:7c:96:a3:d4:6a:9f:69:b9:8f:37:7a:18:49:f8:
b5:5e:93:3a:4e:83:b0:7c:9f:69:7c:fe:04:d5:3a:
cb:d7:09:28:51:ba:05:ca:35:64:28:ee:20:2f:ec:
bd:ff:15:5d:bc:64:68:0e:c6:72:b1:0d:85:02:85:
48:4e:0b:70:cb:08:c7:af:50:c2:1a:d3:4b:9e:49:
df:74:fe:a1:b2:f2:34:fa:ad:b4:d0:24:e4:f7:c5:
7d:a0:3a:70:7b:8e:d6:69:23:c6:df:2d:58:3c:bf:
10:ed:a5:4d:5e:8a:50:17:a8:3e:20:44:21:a0:11:
a0:a8:53:c3:2a:f1:f4:58:8e:d0:bf:47:b5:1d:85:
57:08:52:ad:30:22:a8:35:ca:8b:f9:b9:f1:39:49:
30:d6:ce:fc:55:12:e7:f0:1e:78:b8:77:0a:42:5f:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:6F:C0:C3:71:CD:55:5C:5F:22:D7:45:A3:0D:65:58:17:E7:D4
X509v3 Authority Key Identifier:
keyid:3C:D7:48:CE:43:BA:4F:A5:A3:03:B4:4C:75:A7:A8:E3:62:84:15:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNdIzkO6T6WjA7RMdaeo42KEFYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/a8a734-d52b-4b70-b827-dc4e27d775ac/1/PNdIzkO6T6WjA7RMdaeo42KEFYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/a8a734-d52b-4b70-b827-dc4e27d775ac/1/PNdIzkO6T6WjA7RMdaeo42KEFYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:8e:94:ad:e3:44:56:0f:5a:8e:4b:8d:33:90:1a:96:19:a0:
6d:da:31:27:60:ff:fd:da:22:23:e1:fe:f3:c0:a8:cc:77:9c:
b8:75:6d:81:ad:11:5d:c0:96:87:4b:95:71:73:80:1f:04:3d:
69:d8:67:12:b7:22:e5:ef:80:51:16:77:a3:6d:0f:3d:79:02:
d0:10:2e:66:02:64:c5:b4:e1:ea:1e:9e:4c:61:02:5c:8f:5d:
0f:62:e3:8f:a3:ad:56:08:51:54:5d:0c:27:6c:72:fd:13:cf:
f2:df:fe:ef:f5:ec:2b:1c:e4:ae:aa:c4:3b:97:9d:5b:dc:65:
50:47:44:5a:36:e4:0b:d0:eb:76:f0:14:1a:c2:cd:a7:df:e7:
af:85:5b:36:33:37:a2:fc:b9:48:43:58:d7:0c:0e:b7:67:2d:
4a:c7:00:de:be:96:e5:53:3c:cf:ed:0f:5e:79:83:5c:dd:55:
b8:a0:10:40:92:08:82:56:d3:5e:14:5c:3c:0d:5e:0c:31:a4:
e4:51:00:62:62:b3:fe:7d:0d:70:e0:28:82:9c:cb:ee:a9:57:
2c:28:1e:c8:b6:38:42:2e:8a:14:db:8e:0c:d9:e9:70:47:27:
31:fc:be:24:b9:8f:1b:a6:cb:82:f5:96:f4:b8:c7:ba:ce:27:
ca:e1:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:16 2024 by rpki-client on console-ams.rpki-client.org