Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.mft
File: r7NGGNyBMKnxANOMnaVdD2S44QA.mft (raw, json)
Hash identifier: CCxhwUjm0RF04Ujd98vF4G3cUCiMxN+LOCSA/6u0vKY=
Subject key identifier: 49:E1:8E:DF:4F:53:F5:20:E8:ED:5D:17:DF:9B:FC:92:BF:DD:D2:FD
Authority key identifier: AF:B3:46:18:DC:81:30:A9:F1:00:D3:8C:9D:A5:5D:0F:64:B8:E1:00
Certificate issuer: /CN=afb34618dc8130a9f100d38c9da55d0f64b8e100
Certificate serial: 01875EDBE99045E9E12E3C24F42CEE098F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7NGGNyBMKnxANOMnaVdD2S44QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.mft
Manifest number: 0E
Signing time: Sat 08 Apr 2023 03:14:43 +0000
Manifest this update: Sat 08 Apr 2023 03:14:43 +0000
Manifest next update: Sun 09 Apr 2023 03:14:43 +0000
Files and hashes: 1: r7NGGNyBMKnxANOMnaVdD2S44QA.crl (hash: ERkbHCBAqZBMb2Ex5G+cEqDNfhOy8shnSR81DUghE6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5e:db:e9:90:45:e9:e1:2e:3c:24:f4:2c:ee:09:8f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb34618dc8130a9f100d38c9da55d0f64b8e100
Validity
Not Before: Apr 8 03:14:43 2023 GMT
Not After : Apr 9 03:14:43 2023 GMT
Subject: CN=49e18edf4f53f520e8ed5d17df9bfc92bfddd2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:1a:3a:04:10:d0:75:fb:af:95:d8:b3:0e:
21:ee:0c:a5:a3:a1:a2:7c:e6:6f:33:f4:6a:72:53:
2c:09:04:ad:df:ac:54:12:78:af:05:d8:81:74:e6:
bf:26:89:19:86:d2:11:f7:e7:95:87:e9:86:4f:43:
82:de:ab:46:f7:2c:4c:e6:6d:0f:4b:ba:7b:3f:54:
4c:35:ae:94:33:5c:2c:55:59:ec:3e:8d:8e:2a:99:
5e:19:ef:cf:c6:0d:25:1f:31:d8:8c:40:7b:33:68:
3e:62:5f:b9:83:cf:ec:d9:97:0c:a2:23:12:3a:ff:
9b:6f:7d:9a:f9:11:96:4e:eb:9c:01:50:ac:e3:4a:
2d:31:4a:d5:15:fd:e5:17:8d:57:02:3a:7e:68:64:
37:f1:4c:45:7a:9f:1e:6d:64:84:c6:ed:83:11:85:
69:69:9f:6c:f9:59:0a:08:57:45:d1:11:43:b4:ef:
a3:2e:0a:77:88:84:2a:dd:95:16:05:9f:f2:78:80:
de:46:e3:d3:2a:d9:e4:59:6f:c5:72:23:8f:93:e2:
66:be:34:5e:96:50:1e:a2:d3:02:eb:fc:e7:ea:5e:
36:fe:23:70:e0:5b:6c:9f:20:c0:87:55:21:e3:eb:
a3:01:1d:eb:a2:35:22:9a:7d:8e:18:67:1b:97:2d:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E1:8E:DF:4F:53:F5:20:E8:ED:5D:17:DF:9B:FC:92:BF:DD:D2:FD
X509v3 Authority Key Identifier:
keyid:AF:B3:46:18:DC:81:30:A9:F1:00:D3:8C:9D:A5:5D:0F:64:B8:E1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7NGGNyBMKnxANOMnaVdD2S44QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/db226a-998b-4b88-9c11-64f2a0fff3db/1/r7NGGNyBMKnxANOMnaVdD2S44QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:91:54:64:46:0e:e4:68:1b:a3:cd:17:dc:3e:e1:83:df:ad:
49:1d:6f:d9:1d:83:29:11:88:f2:4d:46:ee:7c:c2:c1:93:0f:
8b:ac:fc:53:6f:4c:9f:8e:0e:27:33:e9:d8:1f:95:83:83:60:
7d:1b:b9:bb:9d:fe:7f:93:dd:87:dd:52:1e:7c:e5:b5:a4:5a:
0b:cc:ef:36:7e:27:0b:04:c4:4d:33:08:9c:db:9d:01:db:2f:
ac:70:63:fa:8f:b1:89:46:86:52:91:37:5d:94:e8:86:26:74:
51:70:94:d3:5f:09:70:78:4b:67:92:70:91:69:f0:78:44:29:
7c:c0:52:8b:69:4c:1d:eb:22:90:90:02:54:6e:a2:7d:36:bd:
87:5f:88:c0:c9:25:89:a9:17:eb:c9:78:61:b4:80:ed:81:69:
da:c6:a1:f9:d1:d5:d1:6d:64:a3:13:2b:8e:09:02:57:b6:19:
19:4e:bf:6a:c8:17:1e:a8:2d:e8:9e:31:9f:47:a8:da:4a:8c:
1e:bd:95:18:2a:ec:88:49:29:29:9f:5e:bf:8f:99:3c:6f:0a:
a2:39:da:1d:a7:a1:75:4d:f3:50:cb:e7:7f:66:53:c7:93:58:
2f:ce:e0:f9:50:a4:9f:d4:4e:89:4f:2d:e9:f5:f5:24:8c:58:
de:77:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:03 2023 by rpki-client on console.sobornost.net