Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f1d818-5cb7-4683-96b3-5f212e685277/1/45nY98poosI3O0XrdkQtBEr6zdk.mft
File: 45nY98poosI3O0XrdkQtBEr6zdk.mft (raw, json)
Hash identifier: flrumq0Fh/VFMJuyPi+vRwAf5cLUAZQVvQyFl2Suv2A=
Subject key identifier: 29:BA:4F:F2:A7:D3:83:0B:E6:BF:65:F5:58:21:27:47:62:10:46:0C
Authority key identifier: E3:99:D8:F7:CA:68:A2:C2:37:3B:45:EB:76:44:2D:04:4A:FA:CD:D9
Certificate issuer: /CN=e399d8f7ca68a2c2373b45eb76442d044afacdd9
Certificate serial: 018C3ECA2802C22DE2B7A935EB819A80A92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45nY98poosI3O0XrdkQtBEr6zdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f1d818-5cb7-4683-96b3-5f212e685277/1/45nY98poosI3O0XrdkQtBEr6zdk.mft
Manifest number: 0A3B
Signing time: Wed 06 Dec 2023 11:01:25 +0000
Manifest this update: Wed 06 Dec 2023 11:01:25 +0000
Manifest next update: Thu 07 Dec 2023 11:01:25 +0000
Files and hashes: 1: 45nY98poosI3O0XrdkQtBEr6zdk.crl (hash: izMYArLOQxwJipLXR7794XTpLek2+5aQ5d14UyfxxSk=)
2: DPyfA4BxuJiT3OdCNcwt6Bmbafo.roa (hash: +1jHcWrh0iJTBhOgMJhpwC4MH+2oheIc8rQuFwtx070=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:ca:28:02:c2:2d:e2:b7:a9:35:eb:81:9a:80:a9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e399d8f7ca68a2c2373b45eb76442d044afacdd9
Validity
Not Before: Dec 6 11:01:25 2023 GMT
Not After : Dec 7 11:01:25 2023 GMT
Subject: CN=29ba4ff2a7d3830be6bf65f5582127476210460c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:21:b9:12:12:22:bf:3d:3f:cc:61:3b:3b:
da:82:0e:79:29:a6:3d:06:29:24:fc:8b:47:86:5c:
d3:c4:77:64:af:53:11:ae:c7:7a:f3:e4:cd:9f:68:
c4:9e:bb:e7:4c:3d:3b:54:be:54:57:e1:ea:59:c2:
f2:53:94:f8:d2:bc:d5:13:84:9a:9c:0f:38:d0:4a:
99:47:42:9e:ea:63:79:2a:36:97:fd:b1:6c:2a:6a:
df:c3:42:7a:71:0d:fd:69:f3:e1:5f:29:d4:11:bf:
32:11:b6:10:19:82:e6:56:61:05:94:ef:85:a1:20:
dd:2b:3a:03:37:bb:69:f5:b2:93:e6:47:ad:85:f6:
48:4e:dc:1c:31:39:55:7b:84:81:46:6c:62:e9:f1:
e3:b4:cf:61:2d:d8:4d:cf:d5:88:36:08:d3:96:e4:
9a:4d:3c:00:38:74:ae:1b:49:a2:5f:21:90:d9:e4:
8f:01:c6:91:53:93:ee:50:23:7c:df:fb:0d:ea:d1:
2c:9b:06:e6:c3:1e:29:09:7a:1a:bc:76:ec:28:01:
8a:2d:7d:01:b0:8d:4d:8e:db:fb:6e:80:70:69:bd:
6f:2f:b8:76:b6:42:78:04:e4:77:f5:76:eb:b4:99:
08:8d:70:9d:20:41:44:51:6a:d2:6a:74:17:6a:ed:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:4F:F2:A7:D3:83:0B:E6:BF:65:F5:58:21:27:47:62:10:46:0C
X509v3 Authority Key Identifier:
keyid:E3:99:D8:F7:CA:68:A2:C2:37:3B:45:EB:76:44:2D:04:4A:FA:CD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45nY98poosI3O0XrdkQtBEr6zdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f1d818-5cb7-4683-96b3-5f212e685277/1/45nY98poosI3O0XrdkQtBEr6zdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f1d818-5cb7-4683-96b3-5f212e685277/1/45nY98poosI3O0XrdkQtBEr6zdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5a:96:0f:64:b4:1c:37:8f:d0:cc:d6:b3:55:8f:ca:4e:4e:
db:73:35:1d:95:44:8e:b1:36:a4:ef:ba:1f:b0:a9:b3:96:c5:
f4:a2:71:a7:06:1f:24:13:5e:df:d2:2c:76:e5:ad:28:80:65:
ff:d4:68:69:4f:b8:1f:15:80:8c:d3:c7:04:c5:5c:c5:a8:5b:
26:8f:69:b7:c5:e0:59:fe:37:25:8e:38:94:01:45:26:c1:e8:
af:e8:6d:bb:c4:c5:5a:6b:f1:7b:b7:01:06:08:9f:d8:0a:4a:
e8:88:1a:bb:16:9e:ac:08:1f:17:b0:13:52:9d:6a:cb:90:17:
ef:e9:11:29:a8:04:72:1e:6e:48:05:b0:2a:30:b0:08:db:2c:
9e:13:0b:96:95:35:00:3a:87:bd:dd:e1:74:b0:4c:bd:54:4f:
74:24:3f:85:ed:ff:00:00:ea:26:27:fc:99:a2:7f:c3:de:a3:
87:c0:c1:60:79:8a:02:83:bb:79:6e:ac:53:66:a8:39:e5:13:
24:37:d6:d9:9d:cc:23:1b:9e:e3:0a:3f:e7:1c:df:e2:5a:33:
05:c7:db:c7:c4:56:8e:37:51:e1:16:aa:a4:84:7c:90:21:22:
c5:43:8a:df:b1:76:b7:06:d1:58:a6:d5:47:80:fd:6d:57:0c:
bb:ab:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:19 2024 by rpki-client on console-fra.rpki-client.org