Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4792e1-5b9f-4037-8dcb-21014aefbe5a/1/gPALHfY1r9LKor4te0qW7oede2s.mft
File: gPALHfY1r9LKor4te0qW7oede2s.mft (raw, json)
Hash identifier: tnn5a4pKr8AApkf7iHfTJkHpuBYvMLx3z6ns7lHXe7c=
Subject key identifier: A8:9F:DA:AC:5E:B8:86:23:09:99:D9:44:2E:03:13:7E:BD:5B:A5:A2
Authority key identifier: 80:F0:0B:1D:F6:35:AF:D2:CA:A2:BE:2D:7B:4A:96:EE:87:9D:7B:6B
Certificate issuer: /CN=80f00b1df635afd2caa2be2d7b4a96ee879d7b6b
Certificate serial: 01934715AF8D2123124F9617A73592954E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPALHfY1r9LKor4te0qW7oede2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4792e1-5b9f-4037-8dcb-21014aefbe5a/1/gPALHfY1r9LKor4te0qW7oede2s.mft
Manifest number: 06BF
Signing time: Wed 20 Nov 2024 01:00:23 +0000
Manifest this update: Wed 20 Nov 2024 01:00:23 +0000
Manifest next update: Thu 21 Nov 2024 01:00:23 +0000
Files and hashes: 1: gPALHfY1r9LKor4te0qW7oede2s.crl (hash: SzNK6z2EX8b+V8/07YT17q/cHKgPtJylcVeiwWRds/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:15:af:8d:21:23:12:4f:96:17:a7:35:92:95:4e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f00b1df635afd2caa2be2d7b4a96ee879d7b6b
Validity
Not Before: Nov 20 01:00:23 2024 GMT
Not After : Nov 21 01:00:23 2024 GMT
Subject: CN=a89fdaac5eb886230999d9442e03137ebd5ba5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:94:28:d2:fa:87:2c:e3:8e:09:21:43:bd:
ff:c5:55:42:15:ae:3f:2b:56:5a:e7:21:0e:9f:3f:
e6:dd:09:d2:fb:91:be:a8:b9:f9:03:51:07:5a:47:
c2:0a:16:d4:9f:2d:d5:3e:4a:86:a1:e4:2c:98:67:
50:da:99:6a:dd:a3:ec:be:f5:64:54:2d:c2:01:80:
60:96:61:fa:40:f8:03:57:90:bd:1a:e4:6a:bd:01:
05:ec:37:69:67:07:19:af:08:9f:a8:de:f2:53:5c:
48:1a:92:1d:48:7d:20:02:73:be:73:02:b1:6c:5e:
e1:d1:4c:79:4a:f1:45:41:a7:c0:41:c2:86:7a:45:
55:96:55:20:b4:9f:d6:86:6c:61:fe:d6:85:1d:47:
a4:9b:a2:77:1d:7c:24:82:ce:62:da:d1:e4:d3:1a:
35:b3:a4:ab:7f:d2:5e:6a:48:7f:b5:89:03:70:94:
c4:22:f1:c1:21:c5:79:e8:4a:a1:7a:8f:99:b2:ff:
c2:b3:60:0d:cd:a3:59:84:30:67:59:5a:70:2f:4f:
f1:a4:41:b9:62:7d:7a:eb:92:27:dc:84:51:92:bf:
c6:5f:7f:e0:4c:7b:02:46:82:65:6f:aa:5d:11:03:
27:6a:e0:71:38:26:be:11:9d:2d:ba:7c:2e:17:41:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9F:DA:AC:5E:B8:86:23:09:99:D9:44:2E:03:13:7E:BD:5B:A5:A2
X509v3 Authority Key Identifier:
keyid:80:F0:0B:1D:F6:35:AF:D2:CA:A2:BE:2D:7B:4A:96:EE:87:9D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPALHfY1r9LKor4te0qW7oede2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4792e1-5b9f-4037-8dcb-21014aefbe5a/1/gPALHfY1r9LKor4te0qW7oede2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4792e1-5b9f-4037-8dcb-21014aefbe5a/1/gPALHfY1r9LKor4te0qW7oede2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1f:6e:83:a9:9e:a7:b2:56:b4:24:59:4d:60:ee:b8:4b:1a:
74:71:b1:83:54:a2:ea:75:b0:86:52:4b:d7:6d:2f:a9:89:b9:
09:3a:7d:5d:8c:83:69:82:2b:7e:2f:5c:85:ad:45:1f:6c:83:
7f:ac:a6:3e:ec:9f:85:d7:1b:7e:d9:ed:b7:2c:74:54:ac:1c:
30:c2:e2:d7:78:55:ba:f3:89:d9:ec:44:e5:cf:70:7c:b3:6b:
18:3e:90:64:1f:8f:ff:7e:88:33:61:9b:4c:8b:d4:fa:7b:83:
50:15:11:8c:ac:1e:32:c3:64:68:5e:06:18:59:f8:c5:f3:8c:
80:af:82:b6:30:1f:52:24:1d:eb:da:a9:d2:ee:1d:2b:74:96:
66:2c:c6:c4:f2:ee:1e:1e:c8:ad:ed:be:7d:e9:b6:28:71:8b:
88:92:2f:a4:0c:f6:ca:8a:bc:66:e1:59:20:80:68:53:cb:62:
77:95:f2:24:e9:53:90:dd:c4:6c:7f:db:18:fc:03:56:b8:a2:
55:2f:1e:94:5e:50:89:4e:e0:12:0b:00:54:e1:9a:dc:1b:8f:
9c:29:ca:bc:c7:4e:59:b4:9d:6b:f7:86:29:70:e4:57:85:14:
70:c9:c0:24:a7:47:15:33:4a:ed:aa:c7:3f:e4:cd:a0:fc:bc:
0c:58:91:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:20:37 2024 by rpki-client on console.sobornost.net