Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
File: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json)
Hash identifier: JozDoL8p/gqNRkFFMv3t8cyHnj2surHFqEU8d72Q3sI=
Subject key identifier: 2C:AC:8B:E7:52:69:54:F5:00:99:14:D0:F2:F6:B3:87:B0:3B:0D:0A
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Certificate issuer: /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial: 0194BC04D0BE5AA945A790211F718F49DF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
Manifest number: 11D3
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: vFPqxr+Oox5S8LXAt1loanoXKMGOw61a7JvDA9wPlew=)
2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d0:be:5a:a9:45:a7:90:21:1f:71:8f:49:df:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=2cac8be7526954f5009914d0f2f6b387b03b0d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:f7:80:09:70:37:bd:60:ae:8d:13:9a:65:
8a:1e:ff:30:b7:9c:8b:e7:aa:0d:bf:33:d2:ac:2c:
dd:0b:aa:f6:12:93:f7:34:b3:45:40:92:6b:cc:f5:
84:62:23:63:cd:39:e4:23:38:80:f8:6d:98:b9:18:
16:79:f9:71:83:87:7c:8a:90:42:9c:13:5d:07:3e:
2e:2c:63:c0:dd:9b:e8:a2:0a:a1:a6:ae:e7:20:d2:
20:ed:91:a1:2b:b7:17:df:2e:78:5f:04:31:5b:01:
10:47:81:db:61:55:72:d3:39:b1:b6:65:f2:3c:29:
5a:77:af:78:32:6a:3e:09:3a:b6:c3:77:03:86:42:
3b:65:54:b0:12:30:68:6b:a7:ae:b7:0a:ee:ca:f7:
5b:aa:bd:87:d2:36:ba:2d:d1:fe:fa:71:56:e4:fb:
f8:05:75:4c:a2:d2:63:7f:68:df:ac:ae:38:f2:6e:
67:59:bd:9c:d1:b2:48:b7:79:7f:f2:3d:7a:b1:a0:
9e:ac:91:88:3a:dc:3d:73:36:a1:68:c7:8b:da:72:
5f:02:cb:76:cd:ce:06:1a:c4:b4:c6:50:2f:ea:ea:
3e:c4:b2:35:d4:8e:80:72:3d:c4:12:2c:5e:47:36:
20:36:18:35:76:92:b9:d6:40:00:df:78:9d:ca:89:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AC:8B:E7:52:69:54:F5:00:99:14:D0:F2:F6:B3:87:B0:3B:0D:0A
X509v3 Authority Key Identifier:
keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:aa:08:ce:cd:71:9d:38:bc:2b:fe:51:ff:57:cb:64:08:1d:
2d:a4:0a:a2:5c:43:81:f6:68:b8:5f:37:97:3f:cb:fb:73:9a:
11:36:eb:a0:f2:29:f1:04:57:3e:d7:d5:88:aa:77:6f:96:0d:
6b:ec:60:6c:f8:50:53:46:53:d9:31:37:12:e4:09:e4:a0:41:
46:50:ec:a0:7d:15:24:34:b5:aa:2c:e7:f9:d4:a5:42:fd:52:
77:02:ba:d2:33:47:d3:b4:a6:04:42:af:9c:88:cc:8f:bb:f0:
4a:d0:a8:f6:be:81:4c:cc:bb:8e:06:4a:7c:eb:2c:3d:df:91:
e6:20:2a:84:88:8b:f9:e7:2c:38:c8:ae:9d:97:91:fd:01:e4:
a0:67:60:55:d2:c1:2e:d6:24:72:d7:33:fe:ed:80:dd:c6:b1:
70:73:67:f7:d1:ce:4d:bc:05:97:d9:10:f6:6d:25:5e:3c:19:
50:75:e0:59:de:5d:5d:24:be:e8:a1:66:11:e7:13:17:d4:fe:
5d:61:88:32:11:a1:d4:ac:20:51:6d:4e:a6:f4:31:3c:6b:e8:
3f:f3:16:31:3e:98:f7:04:5a:a0:08:93:19:9a:82:43:b6:60:
b0:73:4b:49:24:f2:c9:6d:ea:87:d1:9f:73:b2:2c:2a:08:ed:
14:e1:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:53 2025 by rpki-client