Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/af7171-5f7a-42c4-a418-23774fa4b1af/1/NxseyTN8mkXNUZxOiWZepYNGvy4.mft
File: NxseyTN8mkXNUZxOiWZepYNGvy4.mft (raw, json)
Hash identifier: lhRZPmbZbHFLlvOuZfIIhSZtBVkCKl7BXHtorXlVG3w=
Subject key identifier: C4:69:82:C7:EC:A3:AF:D6:25:D0:45:E4:87:F2:D4:0F:B9:21:FC:43
Authority key identifier: 37:1B:1E:C9:33:7C:9A:45:CD:51:9C:4E:89:66:5E:A5:83:46:BF:2E
Certificate issuer: /CN=371b1ec9337c9a45cd519c4e89665ea58346bf2e
Certificate serial: 0185197217FE3B9CADFF73056FBEDAAA2667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxseyTN8mkXNUZxOiWZepYNGvy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/af7171-5f7a-42c4-a418-23774fa4b1af/1/NxseyTN8mkXNUZxOiWZepYNGvy4.mft
Manifest number: 0BC9
Signing time: Fri 16 Dec 2022 05:39:45 +0000
Manifest this update: Fri 16 Dec 2022 05:39:45 +0000
Manifest next update: Sat 17 Dec 2022 05:39:45 +0000
Files and hashes: 1: NxseyTN8mkXNUZxOiWZepYNGvy4.crl (hash: ZoMB7erfOQnFxgaZgqIOlG4Y+Kme1/Q4eXnTEX12Ots=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:72:17:fe:3b:9c:ad:ff:73:05:6f:be:da:aa:26:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371b1ec9337c9a45cd519c4e89665ea58346bf2e
Validity
Not Before: Dec 16 05:39:45 2022 GMT
Not After : Dec 17 05:39:45 2022 GMT
Subject: CN=c46982c7eca3afd625d045e487f2d40fb921fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:39:c7:6c:1f:76:72:1f:96:f0:30:a6:fd:
7f:9a:7f:0c:bb:a4:9c:72:76:f0:82:a0:bc:4d:05:
03:8f:b6:63:35:e5:a2:73:73:d6:e8:c4:ec:a4:3b:
38:2f:26:b4:d4:66:ab:c4:00:33:94:9b:9d:53:9a:
bb:42:d5:ec:16:3d:88:03:c8:22:d0:55:71:ab:0c:
91:7e:c1:f8:ac:41:34:4e:e1:9c:60:b2:22:72:7f:
00:8b:ac:36:29:7e:88:77:0b:9a:23:ae:bf:77:14:
cc:e9:61:6d:49:7d:f5:96:39:30:d2:39:61:e3:54:
07:82:4e:1e:04:16:48:11:19:bd:63:69:11:cf:37:
0c:99:a5:3f:b1:3b:e8:7b:65:87:06:ae:5d:67:87:
5f:b2:ce:dd:03:9c:b5:b2:7e:dd:b2:a6:dc:01:9f:
cf:94:e4:34:3c:07:52:fc:37:28:fa:6c:ad:90:f8:
5a:6a:41:86:51:84:7f:a2:0f:ab:9e:d1:29:dd:4c:
56:d0:8a:f6:e3:41:15:f1:47:31:7b:ac:09:69:01:
8b:b5:1b:89:46:58:1c:37:c7:8e:fd:bc:45:e1:88:
f7:67:cb:9a:a6:da:65:8b:c9:cb:c9:b5:5b:7f:1e:
2e:f8:4a:73:77:84:cf:a7:d1:ec:0f:c5:f5:c0:f2:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:69:82:C7:EC:A3:AF:D6:25:D0:45:E4:87:F2:D4:0F:B9:21:FC:43
X509v3 Authority Key Identifier:
keyid:37:1B:1E:C9:33:7C:9A:45:CD:51:9C:4E:89:66:5E:A5:83:46:BF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxseyTN8mkXNUZxOiWZepYNGvy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/af7171-5f7a-42c4-a418-23774fa4b1af/1/NxseyTN8mkXNUZxOiWZepYNGvy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/af7171-5f7a-42c4-a418-23774fa4b1af/1/NxseyTN8mkXNUZxOiWZepYNGvy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:60:a1:d8:99:31:81:39:08:4c:b3:df:48:f6:7b:28:64:90:
f8:2b:a2:27:50:90:9e:af:e0:75:0f:f3:c1:23:c0:2c:6b:f3:
56:81:7b:f3:c2:f9:82:a8:91:d5:ce:63:fd:0b:ae:32:c5:8b:
49:5d:de:78:25:af:fe:1f:d1:bf:da:18:38:db:6b:d2:d1:6d:
3b:17:5a:69:51:06:46:c0:0a:d7:bf:76:f1:9d:b6:70:38:35:
4e:35:dc:db:a5:84:56:4e:83:a9:73:e1:d3:b4:eb:24:84:22:
6b:0c:c7:2b:ac:43:89:84:0f:fa:ac:76:a0:7d:ff:59:e7:51:
37:3d:7b:80:f8:e2:f1:8b:91:01:13:f8:26:4b:c1:27:f4:fe:
2f:5f:28:4f:92:b6:1b:85:c4:31:61:cf:20:ee:62:5f:49:8c:
5c:cb:a9:b2:e0:82:ba:65:aa:0a:6c:fa:2e:a5:15:13:0b:38:
f4:bb:cc:22:ff:11:a5:8c:5a:4e:db:36:7f:9d:35:5e:5a:11:
3d:5b:b3:38:28:ea:ba:d2:8e:ae:92:b9:5c:80:d5:4f:d8:61:
d9:7e:09:6f:00:2a:f6:17:b7:d4:84:f2:82:f1:89:47:cc:47:
d6:29:4e:3d:03:54:52:65:79:81:78:8a:e4:1a:60:67:1b:60:
f1:de:11:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:42 2024 by rpki-client on console-fra.rpki-client.org