Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60d1d3f7-e122-43f4-b8d8-1e282b452d3d/0/BCD8024C8911FECDF2EAAD1E86E3AC77DF1FAC2D.mft
File: BCD8024C8911FECDF2EAAD1E86E3AC77DF1FAC2D.mft (raw, json)
Hash identifier: JpDGKMZD25IYwkGQNHCBOA4SzPw/GXYGaRlgSRu45Xo=
Subject key identifier: 9D:AE:B8:60:5E:66:66:CC:A4:90:6B:EE:0F:DC:CB:21:08:4D:EE:64
Authority key identifier: BC:D8:02:4C:89:11:FE:CD:F2:EA:AD:1E:86:E3:AC:77:DF:1F:AC:2D
Certificate issuer: /CN=bcd8024c8911fecdf2eaad1e86e3ac77df1fac2d
Certificate serial: 09F42840EA95C6477E18A1F978F3F675FF317808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNgCTIkR_s3y6q0ehuOsd98frC0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60d1d3f7-e122-43f4-b8d8-1e282b452d3d/0/BCD8024C8911FECDF2EAAD1E86E3AC77DF1FAC2D.mft
Manifest number: 0159
Signing time: Tue 05 Dec 2023 23:15:59 +0000
Manifest this update: Tue 05 Dec 2023 23:10:59 +0000
Manifest next update: Thu 07 Dec 2023 03:09:59 +0000
Files and hashes: 1: BCD8024C8911FECDF2EAAD1E86E3AC77DF1FAC2D.crl (hash: Ycxy+XDZr+JyUnhO4zpdUvpTOJp0SztkZ1NoXuietUI=)
2: 3231322e31382e3131352e302f32342d3234203d3e203234383735.roa (hash: m+Grf+QYKD0RinsYwFwhrwJThpAUUmSZZiyIw0ssru8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:f4:28:40:ea:95:c6:47:7e:18:a1:f9:78:f3:f6:75:ff:31:78:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd8024c8911fecdf2eaad1e86e3ac77df1fac2d
Validity
Not Before: Dec 5 23:10:59 2023 GMT
Not After : Dec 7 03:09:59 2023 GMT
Subject: CN=9DAEB8605E6666CCA4906BEE0FDCCB21084DEE64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:28:f1:6d:77:4c:df:5a:aa:32:57:c6:44:b5:
fe:96:79:4c:cd:31:d9:f5:82:28:76:f2:9a:c2:71:
78:a9:d2:34:cc:e8:f8:b7:d2:cb:07:1e:c7:3c:da:
26:c5:1e:ee:ed:79:d1:8b:c3:a9:10:e9:f0:17:55:
5f:8b:1b:57:6a:2d:e6:4c:92:04:f7:86:d4:04:6c:
7d:58:6f:51:73:52:e9:a7:e0:02:e7:08:d3:45:e2:
23:58:99:05:31:c9:86:24:89:15:b6:1d:1a:4e:d1:
eb:d0:29:47:29:7c:b9:33:07:7f:5a:59:5c:a3:31:
4d:4e:85:3e:9a:4e:c8:39:b5:9d:48:04:c4:43:49:
8e:a3:b1:5a:6a:41:cf:8b:c0:52:96:53:5d:be:33:
97:09:7c:a7:43:53:32:b0:40:4b:5d:66:b6:89:a8:
c2:d1:95:ab:e3:54:ba:4f:60:c6:a2:ae:63:fe:dc:
a6:e2:9a:94:1f:d5:e6:95:d3:4e:b6:a1:dd:7a:90:
71:04:24:af:04:69:11:2d:4a:11:53:06:26:35:3f:
6a:4d:8d:bf:f5:03:7f:e5:a6:85:86:f1:4b:a0:a7:
67:b2:f0:a1:e0:c4:33:4d:32:1f:5f:b6:88:ab:65:
05:cc:f6:5b:29:d7:fe:37:73:b5:eb:28:e7:b7:96:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:B8:60:5E:66:66:CC:A4:90:6B:EE:0F:DC:CB:21:08:4D:EE:64
X509v3 Authority Key Identifier:
keyid:BC:D8:02:4C:89:11:FE:CD:F2:EA:AD:1E:86:E3:AC:77:DF:1F:AC:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60d1d3f7-e122-43f4-b8d8-1e282b452d3d/0/BCD8024C8911FECDF2EAAD1E86E3AC77DF1FAC2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNgCTIkR_s3y6q0ehuOsd98frC0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60d1d3f7-e122-43f4-b8d8-1e282b452d3d/0/BCD8024C8911FECDF2EAAD1E86E3AC77DF1FAC2D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9e:65:b8:44:46:75:61:64:9b:7d:46:ec:bd:dd:b9:19:a2:
3d:56:f7:6d:9c:5a:66:ad:0e:01:c0:40:6e:60:bb:8f:66:b7:
92:86:84:e1:f4:c8:18:55:a2:12:f3:fb:ec:9d:b6:d5:e8:5d:
ca:f5:68:1d:1a:d0:bc:f5:88:26:47:e2:5b:a6:90:71:f0:d5:
67:52:32:74:78:b8:fe:72:4e:49:e0:11:81:c8:5b:3d:ef:2c:
62:8f:4b:88:8a:c6:26:68:73:99:7c:6d:d9:4c:80:79:38:12:
5d:9b:86:d1:91:51:f8:31:7d:3b:cf:7d:76:44:fd:92:8b:13:
a9:82:be:c3:96:5c:a8:91:a9:74:a0:f8:14:f8:84:ef:74:fc:
1c:aa:9e:04:fa:6d:fc:80:c8:53:8d:e4:55:4c:e7:24:cc:50:
fe:19:17:ca:ff:75:1d:3b:f4:56:2f:b3:18:4c:6c:68:cb:39:
ab:97:6f:b1:70:34:94:1e:22:f8:91:1e:c5:66:01:d3:c3:1b:
0f:89:c7:a0:cc:50:41:b5:ed:cb:5c:98:1f:07:58:8e:71:3b:
45:47:28:35:b5:3b:12:31:1d:6e:1c:ab:53:58:39:53:15:bb:
28:99:05:11:c8:99:f0:55:94:65:09:3f:57:95:76:84:63:07:
09:b8:ff:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org