Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.mft
File: a4Y2sh4XPumiH4EIjYXqSiZNYXI.mft (raw, json)
Hash identifier: P+F/Z/RIMtm4y8Xdb2PDRheLdBDu779O2z+1Eu3bNkM=
Subject key identifier: 1F:3D:D8:BA:D3:FA:68:B0:71:56:AC:73:FC:33:E3:50:F1:A5:81:AC
Authority key identifier: 6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
Certificate issuer: /CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Certificate serial: 018BB808B0A9528C23532C4EC36FCFDBC185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.mft
Manifest number: 08A7
Signing time: Fri 10 Nov 2023 07:00:59 +0000
Manifest this update: Fri 10 Nov 2023 07:00:59 +0000
Manifest next update: Sat 11 Nov 2023 07:00:59 +0000
Files and hashes: 1: a4Y2sh4XPumiH4EIjYXqSiZNYXI.crl (hash: fLEDVOmRxgtbz2qfRUJAqZ8gISsNViym9F4lhM2Ue6M=)
2: x-emvaBG0yODHcq9WdDdgLV2XAo.roa (hash: b96Etx1aMheoFV1bF2c8092VJFG+jbpLUU8MH7daheE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:08:b0:a9:52:8c:23:53:2c:4e:c3:6f:cf:db:c1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8636b21e173ee9a21f81088d85ea4a264d6172
Validity
Not Before: Nov 10 07:00:59 2023 GMT
Not After : Nov 11 07:00:59 2023 GMT
Subject: CN=1f3dd8bad3fa68b07156ac73fc33e350f1a581ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a3:23:43:70:d7:9a:78:17:01:cd:34:6c:0f:
57:4b:13:8d:61:b0:dc:8a:1e:0b:6d:ff:37:58:1f:
4a:62:ad:a2:db:11:bb:ca:78:55:89:b2:ec:7d:d2:
54:11:0b:fe:b6:e5:3c:b2:c1:40:e2:e6:10:b8:b0:
04:14:c0:3d:b6:2e:eb:51:54:7b:5b:1a:27:50:c5:
80:2e:98:00:74:ff:5f:f3:df:80:ce:d8:d5:95:cb:
76:b8:19:ce:22:e2:f9:5b:55:24:b0:ce:f3:a0:ca:
19:37:f8:51:c3:63:f4:95:b9:eb:ea:23:80:ee:27:
49:dd:49:15:35:50:f2:73:12:8f:e9:a1:74:74:b8:
48:ba:ca:71:2a:54:58:99:9b:2d:95:a3:d6:d5:d0:
0b:38:2f:45:50:84:49:b7:0a:24:30:9f:77:8a:0c:
99:96:36:c4:f9:9c:16:5d:6e:34:f9:a2:97:d2:04:
fd:c0:98:31:9d:ab:72:47:84:f4:04:e6:a2:23:f0:
38:9f:0c:df:5f:84:ad:09:a3:59:ea:a1:25:c8:9f:
93:a2:9e:de:4f:6a:5d:ac:34:58:67:bb:19:75:c3:
d6:9e:63:1d:2d:c0:6c:9e:88:5e:76:70:d1:09:90:
bc:da:8b:d9:8f:92:b9:86:7e:a1:b1:a9:2c:b0:97:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:D8:BA:D3:FA:68:B0:71:56:AC:73:FC:33:E3:50:F1:A5:81:AC
X509v3 Authority Key Identifier:
keyid:6B:86:36:B2:1E:17:3E:E9:A2:1F:81:08:8D:85:EA:4A:26:4D:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4Y2sh4XPumiH4EIjYXqSiZNYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9a30a3-86b2-46c9-afb6-0a6978b05da5/1/a4Y2sh4XPumiH4EIjYXqSiZNYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2b:ef:b3:25:ec:51:5d:93:52:b5:63:18:a6:dd:88:23:22:
88:91:36:ab:e0:5e:92:75:2c:7b:a6:24:c9:a9:db:0c:08:c9:
d0:50:f1:19:27:b8:97:60:89:8e:cb:ea:75:d3:d3:b3:9f:9f:
b5:13:5b:43:04:95:22:f5:6e:38:8c:2b:04:6f:7a:7f:65:1c:
a5:26:ac:e7:bc:15:77:21:be:9d:7c:7d:1c:66:0c:4a:13:3b:
2b:24:80:38:be:33:e3:b5:77:dd:22:06:65:f6:82:22:8d:ef:
b2:01:29:75:1c:79:a3:62:e2:8e:49:15:04:70:2c:c5:5c:49:
c2:e7:f4:db:9a:e4:d2:d0:ee:78:dc:a3:55:3e:5e:b2:11:5d:
bf:c7:67:90:1e:be:6c:60:c7:ee:d0:1c:f9:b2:e0:bf:ee:54:
a2:4f:19:08:34:05:06:3f:7b:00:eb:13:86:c0:45:98:09:7d:
11:ac:10:26:ee:58:7d:78:9a:eb:4f:59:f1:b9:5f:d7:a3:4b:
10:c3:25:c9:ea:00:50:2b:b5:21:86:45:89:ba:c8:0a:83:76:
2c:3f:a6:fd:50:72:a8:69:ae:f5:14:d1:35:80:56:a0:70:38:
3f:21:ba:f6:e5:fd:dd:12:e5:b2:8d:32:f8:b0:50:f1:c4:12:
ea:7e:49:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:25 2024 by rpki-client on console-fra.rpki-client.org