Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b40d0-c637-42c1-9ba8-41b22a957ec0/1/P1lprXSh4DPal2nbgMFSiOYXNkQ.mft
File: P1lprXSh4DPal2nbgMFSiOYXNkQ.mft (raw, json)
Hash identifier: 8zqOElIQcxiQekWPluAueLiijQiUwO1jPHUHYbXVPcA=
Subject key identifier: 85:43:D3:3F:F8:5A:54:FF:CD:13:2C:B5:47:08:33:64:C1:53:47:E7
Authority key identifier: 3F:59:69:AD:74:A1:E0:33:DA:97:69:DB:80:C1:52:88:E6:17:36:44
Certificate issuer: /CN=3f5969ad74a1e033da9769db80c15288e6173644
Certificate serial: 018E7432A72A12D4205F5CF1EE8A2687A88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1lprXSh4DPal2nbgMFSiOYXNkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b40d0-c637-42c1-9ba8-41b22a957ec0/1/P1lprXSh4DPal2nbgMFSiOYXNkQ.mft
Manifest number: 02AC
Signing time: Mon 25 Mar 2024 06:01:00 +0000
Manifest this update: Mon 25 Mar 2024 06:01:00 +0000
Manifest next update: Tue 26 Mar 2024 06:01:00 +0000
Files and hashes: 1: P1lprXSh4DPal2nbgMFSiOYXNkQ.crl (hash: 43sFma79/3n9yz5YzMdUteIslGE+IBjwqMLLKqKJ4nU=)
2: yiwd9OxkUA24HOm00F9DQGHQExI.roa (hash: O6QOH+mCYfJfyt0rdQq1H8mC9yWYcbnrqvM7+ZuQZck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:32:a7:2a:12:d4:20:5f:5c:f1:ee:8a:26:87:a8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5969ad74a1e033da9769db80c15288e6173644
Validity
Not Before: Mar 25 06:01:00 2024 GMT
Not After : Mar 26 06:01:00 2024 GMT
Subject: CN=8543d33ff85a54ffcd132cb547083364c15347e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:81:b5:21:27:00:bf:27:7b:b0:4e:d4:22:
f6:98:61:51:39:61:7d:40:28:c2:17:53:c0:25:81:
e2:dd:25:c5:07:a2:0b:e2:f2:31:22:ce:3c:aa:2f:
83:6f:0b:eb:a5:16:0f:3d:97:73:69:7c:32:f2:fc:
98:1d:a4:f6:27:c6:eb:e9:63:24:e0:bf:86:fb:51:
74:09:48:96:69:35:b7:a4:95:b0:2c:10:10:3a:dd:
dd:36:36:b8:da:df:8f:86:e5:d9:11:e6:3c:fd:38:
49:9b:0a:6f:7d:00:a9:8f:b4:11:82:72:f0:c8:11:
ff:e5:d3:31:61:fd:f1:b7:d8:49:0c:a7:82:ba:8c:
0f:36:b0:2c:06:9f:c2:76:6f:63:66:0c:d7:2f:80:
48:32:0b:0e:55:bf:4b:c4:d4:2b:8d:fa:d8:22:35:
7a:1f:47:aa:46:be:a3:c9:9d:52:b1:6b:c5:5d:c8:
3e:7b:d0:e1:35:f4:87:ce:ea:96:87:5f:41:e7:33:
3e:72:33:00:f3:96:b6:6b:8e:18:f8:21:3b:cb:0c:
93:34:2b:9f:3f:b9:4d:5e:4a:40:dd:11:f5:8f:05:
22:82:87:43:2f:c7:c0:75:e8:91:1a:d5:2c:a5:d6:
ca:54:42:f2:5b:22:02:66:69:81:b8:de:cf:7c:66:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:43:D3:3F:F8:5A:54:FF:CD:13:2C:B5:47:08:33:64:C1:53:47:E7
X509v3 Authority Key Identifier:
keyid:3F:59:69:AD:74:A1:E0:33:DA:97:69:DB:80:C1:52:88:E6:17:36:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1lprXSh4DPal2nbgMFSiOYXNkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b40d0-c637-42c1-9ba8-41b22a957ec0/1/P1lprXSh4DPal2nbgMFSiOYXNkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b40d0-c637-42c1-9ba8-41b22a957ec0/1/P1lprXSh4DPal2nbgMFSiOYXNkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:03:23:db:d2:0f:1d:06:8d:e4:e5:ba:00:68:0a:5d:63:89:
94:bb:24:f8:29:1c:ea:f0:77:fe:e8:48:a2:e3:92:a6:d4:a0:
26:ba:8a:ae:55:58:0c:31:b9:b1:98:ba:da:98:c7:7e:d9:bb:
c8:0f:f8:bb:66:9c:b8:57:48:24:b0:61:2f:ce:7f:7a:fa:17:
d7:4c:d2:f7:a6:67:8d:4b:a5:c7:ed:2e:92:1c:a0:fd:50:85:
27:d9:2b:d2:08:2b:c6:2b:2c:29:5d:a1:c8:87:85:f2:9c:8f:
41:46:83:17:c7:8d:52:3b:2f:22:2a:4b:d6:ba:0e:0b:31:ec:
51:b5:38:0f:e1:17:f0:1e:ac:fd:7b:fa:b9:ca:09:03:d4:5b:
2d:98:fb:1a:60:fa:5b:3a:51:e0:49:86:91:a0:64:a0:c8:52:
6d:6f:13:1c:b0:99:de:bd:4b:ba:e1:27:40:b0:a6:bb:8b:40:
98:be:3d:c9:5a:82:e3:bc:69:ee:ff:c8:ae:66:1f:18:8e:21:
26:56:69:30:d3:d2:9c:a3:00:3f:f3:c1:35:6e:0a:c8:7a:6f:
8b:a7:5b:19:49:11:d9:d4:cb:c2:8f:32:c8:8d:11:68:07:1e:
6d:e4:5d:e2:a3:e6:2d:ec:10:68:e9:e9:77:1c:55:ae:e3:6f:
e0:b9:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 17:36:29 2024 by rpki-client on console.sobornost.net