Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.mft
File: G01cezPWZpowrCuaTeL_z2THEas.mft (raw, json)
Hash identifier: 6K7OehjOiEhIOu75ost/hKpFX1wZAYiwJGAN+i0WPU8=
Subject key identifier: B4:CF:A2:E4:E8:A9:50:EC:43:89:34:A3:BF:5F:AA:48:E9:0A:D8:26
Authority key identifier: 1B:4D:5C:7B:33:D6:66:9A:30:AC:2B:9A:4D:E2:FF:CF:64:C7:11:AB
Certificate issuer: /CN=1b4d5c7b33d6669a30ac2b9a4de2ffcf64c711ab
Certificate serial: 018B423AC7E4C45762484633C99EC397F807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G01cezPWZpowrCuaTeL_z2THEas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.mft
Manifest number: 0877
Signing time: Wed 18 Oct 2023 10:00:30 +0000
Manifest this update: Wed 18 Oct 2023 10:00:30 +0000
Manifest next update: Thu 19 Oct 2023 10:00:30 +0000
Files and hashes: 1: G01cezPWZpowrCuaTeL_z2THEas.crl (hash: sbWmpkdohcFY7fXtamk7psz7L0+HpEgg2DJqGaI1zLw=)
2: a9A7_rnixRU9dk3H-CXsqX4_-gI.roa (hash: AWsY571Pm4N1lcinGvn4JjzqN0F2uoo6lfah55BtwS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:3a:c7:e4:c4:57:62:48:46:33:c9:9e:c3:97:f8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4d5c7b33d6669a30ac2b9a4de2ffcf64c711ab
Validity
Not Before: Oct 18 10:00:30 2023 GMT
Not After : Oct 19 10:00:30 2023 GMT
Subject: CN=b4cfa2e4e8a950ec438934a3bf5faa48e90ad826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fd:61:09:64:63:9d:ef:e3:7b:9a:7d:fa:77:
15:2e:af:c3:15:30:9b:d0:a0:24:ca:4e:39:c8:79:
71:cf:d5:69:73:b1:d3:1e:61:a0:7c:1a:b7:12:03:
d2:c1:4f:fa:16:3a:c9:f4:eb:b5:bf:f7:c4:bf:ff:
b1:f2:09:bc:4d:a9:53:1d:23:8f:59:c5:d0:ec:74:
6d:ce:d0:be:37:57:54:97:e8:59:13:74:e9:27:7b:
2e:85:43:3b:52:e8:9f:8c:b9:43:f4:2b:e7:79:6e:
76:64:d6:45:50:d2:37:95:78:a4:da:ad:a9:d5:71:
1c:72:7a:97:96:e0:f9:15:17:70:f4:b6:b6:66:eb:
da:20:ab:bd:e6:4a:d9:72:43:5f:a6:99:de:f3:01:
70:16:5c:e9:b5:20:08:94:58:b5:59:ce:91:c5:c7:
b5:41:95:a6:cf:c5:5b:ac:28:c0:04:63:c3:85:6e:
e1:7b:fd:5b:fd:05:61:f6:b5:19:40:44:ca:02:37:
2d:76:d3:54:d2:57:21:c2:93:a5:e4:b6:c5:e3:72:
a0:ba:51:9a:ca:b5:62:a1:37:d3:39:4f:ee:e7:0a:
f0:1c:55:a2:97:43:6f:50:ef:45:98:98:18:62:ec:
b6:d6:2c:8d:b6:df:5f:38:ec:22:8c:4a:1d:af:c1:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CF:A2:E4:E8:A9:50:EC:43:89:34:A3:BF:5F:AA:48:E9:0A:D8:26
X509v3 Authority Key Identifier:
keyid:1B:4D:5C:7B:33:D6:66:9A:30:AC:2B:9A:4D:E2:FF:CF:64:C7:11:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G01cezPWZpowrCuaTeL_z2THEas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:c9:9a:bf:e1:3f:c5:d4:50:9c:d1:31:b5:2c:16:ca:27:
ae:10:2f:d8:49:e4:82:cd:53:f3:53:b2:7e:ab:7a:f8:67:0c:
7e:96:b1:85:60:02:0e:f0:54:7b:89:24:78:8a:cc:84:2a:70:
db:13:b9:15:38:4e:07:14:d3:3f:01:97:24:dc:62:b0:e0:83:
dd:6e:05:0b:d3:ae:42:f8:59:87:52:41:49:85:f8:e4:dc:77:
09:fd:77:e4:1d:c0:04:57:d0:db:85:5f:a8:f5:5f:83:9a:6e:
40:10:91:79:56:8b:38:e3:73:85:79:9d:b1:75:34:fe:dd:c8:
4f:3d:6d:1e:5c:69:24:1f:4d:48:02:0b:de:58:34:68:9d:2c:
2c:b7:8a:4a:56:64:60:47:b0:33:85:f6:79:25:d6:55:1c:13:
57:16:d4:d6:b6:a3:6d:fa:2d:45:64:cb:1e:3e:8e:11:7d:13:
d6:a3:d5:10:72:85:2d:78:c3:ed:58:4a:61:f2:2a:0e:20:ca:
30:fa:a5:e3:24:fb:3c:f6:f4:3e:fc:81:4e:cf:b9:5f:a9:f9:
ee:81:52:97:af:09:67:f9:32:5e:31:83:22:33:76:97:f5:e2:
f3:3e:2c:04:ad:80:6f:c7:b8:10:14:d3:c7:38:91:80:d3:69:
78:ff:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:52 2025 by rpki-client