Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/JbgUCSOA9Y3Gum4HQy-b21e0x_c.mft
File: JbgUCSOA9Y3Gum4HQy-b21e0x_c.mft (raw, json)
Hash identifier: qlhshqdTNCuvVkk5n/mfRdiGTPGG8EBTi8Gwx0qesO0=
Subject key identifier: 12:E1:AE:9B:34:6A:02:EF:85:BC:13:31:BC:51:F2:BD:FA:CA:6A:FC
Authority key identifier: 25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
Certificate issuer: /CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Certificate serial: 018BDACB6390C105A8A5BD6E4480A2D071B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/JbgUCSOA9Y3Gum4HQy-b21e0x_c.mft
Manifest number: 04C4
Signing time: Fri 17 Nov 2023 01:00:44 +0000
Manifest this update: Fri 17 Nov 2023 01:00:44 +0000
Manifest next update: Sat 18 Nov 2023 01:00:44 +0000
Files and hashes: 1: 0H08NaC-DU8NomFCKic7oEPeHYQ.roa (hash: MyyCl3zuXGPa8/WEl2hcEY6mc3MbDSVlShj+NdstgEQ=)
2: JbgUCSOA9Y3Gum4HQy-b21e0x_c.crl (hash: A+RRRfh2/J68jzVBuW14gnvh2hVc6HLn3MHOLIVZOmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:da:cb:63:90:c1:05:a8:a5:bd:6e:44:80:a2:d0:71:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b814092380f58dc6ba6e07432f9bdb57b4c7f7
Validity
Not Before: Nov 17 01:00:44 2023 GMT
Not After : Nov 18 01:00:44 2023 GMT
Subject: CN=12e1ae9b346a02ef85bc1331bc51f2bdfaca6afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:96:8f:b7:b0:b4:29:49:58:c8:a9:ea:71:fd:
6e:0c:1f:4b:c9:1d:92:d6:0e:9b:f8:35:08:9a:ec:
a3:6c:92:70:79:d8:8b:47:c7:34:9a:ea:55:9a:69:
cf:be:e3:51:13:76:8b:55:a8:c3:44:73:82:ab:f9:
fe:52:a0:95:1b:e8:98:c2:68:71:0c:f0:89:95:3a:
73:7c:55:77:9a:a2:a5:89:a9:29:d0:72:61:38:98:
ee:3e:1d:af:b6:04:b8:d6:bd:84:46:e8:78:65:b7:
78:e8:60:29:32:5d:b1:1b:b4:51:f3:4d:91:e0:70:
7c:14:ac:98:9c:fe:91:82:bc:8a:ff:8b:f5:20:4e:
e7:75:36:2f:dc:62:9d:f3:15:7c:f0:87:10:e7:b3:
d7:2a:aa:99:e3:fc:83:20:dd:17:e9:ee:af:e9:63:
0a:1d:66:b9:55:96:e6:b3:e5:1b:c4:79:c4:85:35:
c9:b1:1c:15:15:4c:68:ae:76:f1:14:d9:c1:78:f3:
60:84:d5:c3:97:19:54:87:87:2b:e1:7e:73:cd:4e:
fb:6d:4a:c7:42:53:65:b0:46:6f:7d:63:dd:2c:20:
a4:2f:01:51:81:a2:70:89:78:aa:12:1c:ec:1f:2d:
46:3c:25:3f:bd:27:89:e2:e7:65:60:fd:47:8f:aa:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E1:AE:9B:34:6A:02:EF:85:BC:13:31:BC:51:F2:BD:FA:CA:6A:FC
X509v3 Authority Key Identifier:
keyid:25:B8:14:09:23:80:F5:8D:C6:BA:6E:07:43:2F:9B:DB:57:B4:C7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbgUCSOA9Y3Gum4HQy-b21e0x_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/JbgUCSOA9Y3Gum4HQy-b21e0x_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e30e29-dc2c-4f0a-883f-1138a5ceedff/1/JbgUCSOA9Y3Gum4HQy-b21e0x_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8f:c9:df:83:c8:0d:71:18:e7:41:b4:b4:e1:7b:2b:0b:4e:
ae:f0:1a:e7:83:eb:a2:9e:81:61:ad:ce:f5:7d:37:21:c0:b3:
ba:d4:40:43:00:79:12:76:18:32:66:d7:e5:e9:de:cf:7e:c9:
1b:9c:09:fe:46:d4:e5:48:5d:57:84:b4:3b:73:27:03:6f:f2:
64:48:d1:e5:72:e8:f1:38:29:08:e9:31:ee:3e:74:73:2f:00:
9e:14:95:a5:7f:cd:03:56:c9:7b:86:99:78:e2:57:c2:6f:a2:
17:01:38:96:44:d5:11:b2:a5:18:9a:07:4f:0c:e8:99:d4:bd:
f2:a3:be:df:b1:a5:b9:e5:23:38:6a:f3:c2:ac:43:f0:a3:ca:
a3:09:5a:f6:95:a8:2d:68:19:9f:59:c5:65:00:d0:1f:86:7f:
46:97:6e:01:44:dc:55:df:33:5a:be:cf:3e:f0:98:48:a5:08:
65:75:48:7a:17:04:52:3f:4a:48:b6:73:4f:f5:d8:89:c2:c2:
13:db:c1:ea:e1:f4:50:49:5f:15:0b:d9:81:79:90:c7:1f:25:
fe:a6:06:27:cb:f1:1d:fc:19:56:48:c1:f5:57:4d:ce:82:bd:
a7:d9:65:2c:d7:06:7f:08:9d:b9:aa:65:68:84:92:45:a2:0e:
6d:4b:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:11 2024 by rpki-client on console-ams.rpki-client.org