Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.mft
File: 9RUKI6rEIP7sq_ybW6-fAkBWMzo.mft (raw, json)
Hash identifier: 2ufiMXH+IRw4HLW98XyPCXaNq+mDSYOy6pfRELO0PoQ=
Subject key identifier: 04:2A:F7:4C:54:0F:77:46:69:B3:FF:EC:50:34:CB:DA:50:2A:34:03
Authority key identifier: F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
Certificate issuer: /CN=f5150a23aac420feecabfc9b5baf9f024056333a
Certificate serial: 018DF82C14A9E2CE23618E910EBCAA9302FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.mft
Manifest number: 10AA
Signing time: Fri 01 Mar 2024 04:00:54 +0000
Manifest this update: Fri 01 Mar 2024 04:00:54 +0000
Manifest next update: Sat 02 Mar 2024 04:00:54 +0000
Files and hashes: 1: 9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl (hash: AgVXbXBq5MpVuPGsHGR0x0D8xhPHlEYkDKFAP8snkr4=)
2: jqQUF3b860-rLpHN0mmdsv04Ebo.roa (hash: JZmB4Ndxh0sopDSbg685T4SIzKBbjYWB/9OJMZUzxO4=)
3: ztQ-qc-8hcY9LJNYCxzdKLYYSeU.roa (hash: 6BeKr+1k3Srut8xR9/qCSETqkV3SEYq/Si3rSgoQinA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f8:2c:14:a9:e2:ce:23:61:8e:91:0e:bc:aa:93:02:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5150a23aac420feecabfc9b5baf9f024056333a
Validity
Not Before: Mar 1 04:00:54 2024 GMT
Not After : Mar 2 04:00:54 2024 GMT
Subject: CN=042af74c540f774669b3ffec5034cbda502a3403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:5b:e5:ed:33:d5:b8:3f:26:0c:04:c1:d1:
f6:64:7d:8b:41:1b:27:9c:54:38:23:d8:95:62:91:
45:c3:f2:b1:96:87:c6:02:73:b8:14:00:31:93:31:
9d:aa:75:e2:68:af:e9:22:12:d5:70:df:e0:0d:75:
27:b8:c1:31:11:ff:0a:bd:66:01:87:9d:5c:e8:14:
d7:22:ea:3d:b4:74:3f:df:d0:6d:b4:81:bd:b0:3c:
29:0e:10:9c:a2:35:2a:47:3e:ea:01:f7:06:ba:4d:
ae:89:04:df:ae:a6:01:f4:21:bb:d6:d9:74:2e:37:
3d:8e:d2:c0:bb:fe:2f:be:85:0a:6c:8f:ab:77:94:
e4:9a:84:f8:5f:fb:35:84:10:3d:b0:ef:96:59:63:
b3:31:31:7d:27:52:23:28:ff:36:f3:41:3c:e1:fb:
af:6d:13:42:20:ba:0e:bf:dc:81:80:f4:46:8f:2d:
30:26:47:41:a6:7b:3c:0b:34:2a:3a:7a:b8:e3:0f:
f6:ac:ab:56:7e:15:87:f8:53:60:89:64:b6:c9:ea:
16:b2:3b:3c:84:60:63:ed:01:c3:4a:d4:b1:de:66:
64:12:f6:e6:c7:02:27:f6:b4:f7:eb:60:25:5c:b9:
61:b0:71:37:78:bf:6b:54:e5:3b:04:a5:ba:48:f3:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2A:F7:4C:54:0F:77:46:69:B3:FF:EC:50:34:CB:DA:50:2A:34:03
X509v3 Authority Key Identifier:
keyid:F5:15:0A:23:AA:C4:20:FE:EC:AB:FC:9B:5B:AF:9F:02:40:56:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RUKI6rEIP7sq_ybW6-fAkBWMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/824e00-8a9f-44de-bb49-189907d5ec36/1/9RUKI6rEIP7sq_ybW6-fAkBWMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:64:9f:29:60:45:f6:a7:b6:d4:e6:4d:01:77:69:9e:20:
3d:76:3f:23:9b:45:14:8b:45:e8:cb:2d:87:13:df:6e:ba:f2:
6a:a0:6f:f0:c2:b6:52:61:ea:2a:b5:18:3e:f8:a5:1b:d5:23:
62:37:c1:42:62:5e:18:f4:51:d0:a8:f4:a7:83:fd:9e:b7:c2:
2f:94:05:70:06:e1:e0:d0:5a:f1:c0:2d:80:d9:e5:ba:29:94:
ed:43:56:8c:a4:53:8c:63:a3:f9:a2:d7:1d:07:b4:29:cb:d8:
e1:86:dd:f6:53:0d:2a:c5:02:2a:44:b3:65:af:48:21:f8:ca:
aa:d8:fe:ef:2f:43:d8:ef:21:72:e9:21:8f:96:c7:ec:70:cb:
d1:0d:6c:57:4c:c9:b6:70:5a:d1:a6:c7:5e:de:e7:50:84:66:
7f:8c:5c:88:2f:27:b5:28:d0:87:2d:98:54:7b:23:76:29:21:
7b:14:5a:75:58:97:d8:45:09:8c:f5:96:a3:22:99:de:9b:a5:
81:18:15:3d:ec:a4:1d:cc:43:be:5d:55:50:8f:39:ad:8d:9d:
ab:9b:88:03:9c:1a:3a:5c:0b:d0:97:c4:db:0e:f0:fa:b3:89:
3c:ab:4a:a6:ca:e8:e6:9a:dc:58:70:cf:7c:5b:33:b8:88:ad:
e9:87:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:55 2024 by rpki-client on console-ams.rpki-client.org