Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft
File: h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft (raw, json)
Hash identifier: 70/ei5VJZrWQMzHwyucKP4l76kH6MLdwCmbSqSw/O+8=
Subject key identifier: 57:4C:E2:5F:36:CA:9B:44:5D:AD:DB:52:DB:D3:BD:28:93:53:5A:F4
Authority key identifier: 87:73:67:FE:F9:A2:F8:6E:45:C6:42:69:72:30:FC:0E:BA:D9:B7:A8
Certificate issuer: /CN=877367fef9a2f86e45c642697230fc0ebad9b7a8
Certificate serial: 01932E690195F21BC014801ECBB1E7521446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft
Manifest number: 135C
Signing time: Fri 15 Nov 2024 06:00:53 +0000
Manifest this update: Fri 15 Nov 2024 06:00:53 +0000
Manifest next update: Sat 16 Nov 2024 06:00:53 +0000
Files and hashes: 1: 3vZq4hUVcMiBAY85NaOcEyuKf6A.roa (hash: WEK2U+uZ6iDRs13yjXwzeCDzV7E90Rdmx74htopKK30=)
2: h3Nn_vmi-G5FxkJpcjD8DrrZt6g.crl (hash: WnP1Azxl94UpSglPxrJE0KbWjaMo85nTefApilMtFw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:69:01:95:f2:1b:c0:14:80:1e:cb:b1:e7:52:14:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877367fef9a2f86e45c642697230fc0ebad9b7a8
Validity
Not Before: Nov 15 06:00:53 2024 GMT
Not After : Nov 16 06:00:53 2024 GMT
Subject: CN=574ce25f36ca9b445daddb52dbd3bd2893535af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:20:5e:51:6a:71:65:41:19:8a:29:d5:4a:
2f:08:56:d1:38:9c:fc:1e:a6:6b:32:e4:53:97:5a:
26:49:f6:01:c0:b9:bb:4b:6f:9f:0d:f7:74:c3:14:
f1:99:96:33:15:33:b5:b4:b2:24:20:09:99:f2:41:
68:14:fe:ed:0c:ff:74:dd:ec:34:52:01:b4:8a:e1:
18:e8:14:e6:be:2e:09:30:2a:8f:35:69:06:90:68:
57:bc:f7:e0:bd:4b:d9:01:0b:b5:d7:71:7b:a4:23:
0c:1e:d3:35:0e:09:cc:af:86:c1:6e:b9:b7:b5:bb:
94:4d:cc:d2:fd:a4:ba:b1:9b:c3:d2:24:35:08:ed:
1d:36:a9:18:a5:83:07:52:31:9b:06:11:16:8d:16:
f5:f8:56:c7:98:c3:f3:99:d4:e7:70:f8:c4:33:6c:
d0:6f:9d:3c:1e:1f:60:bc:c6:7f:30:48:60:ae:47:
7e:dd:95:20:27:d0:ec:1c:50:52:e2:9b:33:d5:1e:
30:ee:a1:a0:88:d2:46:1c:05:a1:46:98:ef:a5:8a:
13:d0:8d:ab:5c:32:75:83:c2:ff:82:4c:12:7c:0b:
e9:91:54:c6:89:f1:cf:6e:70:d2:cc:7b:d3:cf:e8:
1d:95:cb:c6:eb:ce:6a:f2:73:94:00:89:11:61:d1:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4C:E2:5F:36:CA:9B:44:5D:AD:DB:52:DB:D3:BD:28:93:53:5A:F4
X509v3 Authority Key Identifier:
keyid:87:73:67:FE:F9:A2:F8:6E:45:C6:42:69:72:30:FC:0E:BA:D9:B7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/74228e-110c-46aa-8dea-0d145255fbb0/1/h3Nn_vmi-G5FxkJpcjD8DrrZt6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:83:fb:bf:b0:7e:7d:a8:65:b8:5e:d5:09:09:a7:26:15:16:
2f:65:10:33:fa:9c:37:51:e2:ac:a5:88:49:42:08:16:bf:4a:
ac:e2:e0:15:8c:73:c7:31:c0:99:1e:e0:77:c8:36:06:2d:7f:
ec:94:18:32:77:2f:c1:38:2a:38:f8:fc:b8:36:85:86:c4:fa:
e6:84:32:14:94:4c:a2:2b:9a:51:bd:60:99:8c:59:a0:ed:02:
01:8f:03:f7:94:b4:93:d5:7c:d1:15:17:ff:41:ce:20:9e:47:
98:89:e5:a6:1c:da:4f:17:e5:82:ca:52:c8:fd:dd:e0:cf:f3:
f3:f0:30:20:29:56:b6:86:25:b5:ea:e4:5c:38:ae:5d:3d:6b:
dd:07:2f:49:f9:0b:c5:0e:c0:13:3f:00:41:ff:7c:d0:e7:2f:
9b:43:f3:b1:60:ec:99:ce:07:ec:a0:4b:af:eb:32:fd:26:08:
06:49:80:5d:b8:31:2a:86:05:64:bf:4f:2e:a5:ae:81:88:44:
fb:20:04:74:21:e8:50:74:1b:21:76:9c:7f:51:30:c1:a2:b8:
16:66:31:47:40:94:58:e0:3c:37:fc:d3:67:7f:99:fd:d3:25:
33:65:da:e1:fb:1c:6a:db:9b:d7:70:6d:5d:fe:9a:f1:10:03:
9f:7c:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 17:21:26 2024 by rpki-client on console-ams.rpki-client.org