Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.mft
File: DBa7UnpShZ4PabiNL-3t4b3p_y0.mft (raw, json)
Hash identifier: LAhQKNLfGnIAfD2APFo2NnruV1BCtp9PDh+CvJWbCnE=
Subject key identifier: 0F:B4:B9:8B:78:40:FE:E7:42:5B:D7:96:14:F4:FD:4D:B9:A2:2D:0C
Authority key identifier: 0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
Certificate issuer: /CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Certificate serial: 018E60ABD0AEB114037F6B22105FA9E8F541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.mft
Manifest number: 08D6
Signing time: Thu 21 Mar 2024 11:00:56 +0000
Manifest this update: Thu 21 Mar 2024 11:00:56 +0000
Manifest next update: Fri 22 Mar 2024 11:00:56 +0000
Files and hashes: 1: 6qI_5XPEOEo7aCZxV8QdrkazQYU.roa (hash: nAZV57OY5Tt727ECpw6VrBHSz3HCYEG4DseUfA3X7gk=)
2: DBa7UnpShZ4PabiNL-3t4b3p_y0.crl (hash: +pfWOBZ3E/uH9wF9JW1H7A71z8DI/NohHs+T9VHhMBQ=)
3: WocdVRGEeAZvfEJg1U_rPitmTN8.roa (hash: T4BRZu1zOLNNfs43/dvxRu0Qf+AjEoOdW+T5XbTy0RY=)
4: yR4ZhdPnFjVIh_9AgyDbt2SkLjc.roa (hash: 6J0jqgaZZsy0CQDg73orlMyZafvvzqix5gKt6+WQQYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:ab:d0:ae:b1:14:03:7f:6b:22:10:5f:a9:e8:f5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Validity
Not Before: Mar 21 11:00:56 2024 GMT
Not After : Mar 22 11:00:56 2024 GMT
Subject: CN=0fb4b98b7840fee7425bd79614f4fd4db9a22d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:c3:28:6e:4f:c4:6c:bd:6a:05:0a:02:00:
33:67:d3:58:af:85:86:b9:84:9a:af:ab:68:bd:1b:
d9:3e:9b:cc:e1:d2:78:eb:15:8c:b6:cd:8f:05:16:
04:55:2a:d0:85:6e:75:86:b0:ca:11:5a:fa:3a:29:
0a:59:05:00:29:2e:5b:40:89:8e:d5:dd:3b:38:46:
93:bc:0a:d7:78:5d:b9:b5:5b:b4:ef:e3:2c:12:4e:
cb:b8:26:be:6b:02:85:6a:3d:fc:9f:a5:f3:5c:68:
d8:f8:6f:21:1c:5d:86:e3:78:4c:4d:aa:7c:83:3e:
72:e4:ce:c7:62:d9:93:3e:65:37:60:3e:0f:9b:9b:
87:dd:39:3f:84:33:dd:50:4d:49:79:f2:1d:dd:69:
f4:3b:b2:c7:9d:92:18:cf:d1:04:7d:34:b2:d0:ec:
1a:21:54:e0:d1:0c:05:f1:1c:7c:57:ed:1a:35:f0:
89:09:e8:5e:c6:8e:d2:a3:96:91:27:a1:1e:1c:c0:
bc:56:eb:1b:6f:9e:14:97:c6:a6:e7:67:5f:0b:78:
59:63:23:3e:96:3b:9c:49:cf:71:2c:0a:92:40:aa:
68:1a:49:7f:8c:47:66:ba:e7:4d:24:3f:2a:12:12:
f1:f6:26:4d:e5:10:0e:22:ec:82:82:3b:d7:20:28:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B4:B9:8B:78:40:FE:E7:42:5B:D7:96:14:F4:FD:4D:B9:A2:2D:0C
X509v3 Authority Key Identifier:
keyid:0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:eb:33:b3:b8:66:fd:9c:bf:ce:b8:c8:2c:0d:af:78:97:56:
3c:55:84:98:23:7e:72:69:b7:0e:24:74:5b:c3:e7:bc:51:e9:
0d:38:cc:9c:60:9f:fd:df:54:57:f7:24:ed:b6:cd:b5:c3:7b:
21:8d:9b:15:7f:ea:c0:d7:15:23:38:9c:80:b7:b3:65:3f:04:
da:be:f4:dd:d8:4c:bd:6b:80:ff:fc:c9:36:c0:89:b6:14:d8:
6c:a0:a8:0d:df:15:c8:8d:b1:ba:2a:0d:83:75:5c:00:90:57:
53:13:65:7b:b3:7d:a7:22:8c:51:83:65:41:10:07:ec:0d:25:
24:cf:04:2d:74:51:4a:f2:c9:97:f2:00:4c:b8:2e:5e:56:8f:
fa:7e:7e:72:1b:1c:1c:8f:5c:1b:28:d2:7d:7f:e7:0a:72:69:
f3:09:64:a1:61:28:cc:88:7f:76:5a:ab:a5:46:df:bf:a2:14:
c2:cd:d4:51:37:38:f4:55:c1:d5:f7:ae:87:d7:42:86:05:56:
4f:d0:10:06:d4:19:50:30:29:6c:61:17:6a:d6:8b:17:cd:42:
f3:d8:d6:4c:eb:88:71:b1:ec:72:5b:5e:57:7d:6a:2b:9e:d8:
44:45:93:3c:57:46:24:36:0e:0e:aa:36:ec:bd:14:8e:9b:ba:
a7:09:64:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 18:46:37 2024 by rpki-client on console.sobornost.net