Manifest
$ rpki-client -vvf rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
File: CB2B40C722F645663A261D605D1C78BD1B720065.mft (raw, json)
Hash identifier: 3n4u+Rw8M8dl+2EOSuP4weCcClS+Et47ti9Bj9F7PGM=
Subject key identifier: EB:A3:CA:21:BD:4C:4E:9F:AC:4E:ED:47:99:16:62:00:91:F6:82:B6
Authority key identifier: CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
Certificate issuer: /CN=cb2b40c722f645663a261d605d1c78bd1b720065
Certificate serial: 37AE673DE764419D08DF7AD5C16D930824DCA1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject info access: rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
Manifest number: 032D
Signing time: Wed 20 Nov 2024 08:35:49 +0000
Manifest this update: Wed 20 Nov 2024 08:30:49 +0000
Manifest next update: Thu 21 Nov 2024 10:34:49 +0000
Files and hashes: 1: AS199514.asa (hash: z/iu5ZLu9SXKGBji4vZxPRtWFiHSeseJmOwWXknQw+M=)
2: CB2B40C722F645663A261D605D1C78BD1B720065.crl (hash: plYQVgXCHLD+FXMMEGW69wXcAdVz+aQaFT/e6cIkP/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ae:67:3d:e7:64:41:9d:08:df:7a:d5:c1:6d:93:08:24:dc:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2b40c722f645663a261d605d1c78bd1b720065
Validity
Not Before: Nov 20 08:30:49 2024 GMT
Not After : Nov 21 10:34:49 2024 GMT
Subject: CN=EBA3CA21BD4C4E9FAC4EED479916620091F682B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:df:b2:7b:6c:d6:c0:af:df:8b:ef:7a:77:64:
9b:30:c5:64:38:77:ea:b9:9d:a9:54:82:07:01:a8:
91:9e:e3:01:c4:d5:e8:d8:ea:c7:87:65:6c:6b:18:
25:74:ce:c6:83:aa:2b:82:9e:dd:ce:3c:0c:8a:26:
c8:5a:b6:4b:92:36:ac:2f:49:f0:f0:d8:ad:21:ad:
4f:9f:76:13:8b:3b:36:36:bb:be:f6:36:d2:74:ab:
8f:d7:53:62:4f:9d:d6:93:89:56:a5:c4:40:c6:91:
b4:63:2b:aa:ae:a0:40:aa:69:d7:12:1d:ff:05:60:
10:60:0d:fe:ba:8a:7d:cc:d2:7c:12:d8:90:2c:c9:
ee:5b:f8:2b:54:8f:72:b5:b7:f2:00:24:da:aa:f2:
32:8a:e1:33:ba:85:24:7b:61:27:61:4f:63:75:33:
d9:36:03:12:d9:c8:47:2c:93:18:e2:93:31:ad:4e:
21:9b:22:b9:14:c2:ce:a6:f4:44:ca:e9:c8:56:be:
b3:92:d0:3e:2c:42:b3:00:01:76:1b:94:f1:84:36:
1d:c9:3a:c2:9e:07:c0:41:f8:9b:89:7c:08:48:4b:
0f:64:a2:cb:6e:95:85:8e:be:90:2d:ce:93:a1:52:
5c:62:a5:9c:29:94:a4:a3:95:ea:81:dd:52:a9:0a:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:CA:21:BD:4C:4E:9F:AC:4E:ED:47:99:16:62:00:91:F6:82:B6
X509v3 Authority Key Identifier:
keyid:CB:2B:40:C7:22:F6:45:66:3A:26:1D:60:5D:1C:78:BD:1B:72:00:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yytAxyL2RWY6Jh1gXRx4vRtyAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.co/repo/Riffi/0/CB2B40C722F645663A261D605D1C78BD1B720065.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:42:a5:3d:ca:03:e4:62:7f:58:2e:6d:c2:ac:46:34:e7:2a:
c1:a2:bb:fb:0a:82:99:64:04:47:da:dc:7a:6c:4e:35:d3:f1:
9c:83:46:6f:ac:35:eb:f1:c9:2a:a5:02:d2:09:e5:70:9d:5e:
2c:5a:6d:ec:09:22:82:7a:39:c0:70:27:8e:63:af:a7:60:f1:
2d:15:c6:4a:6b:c2:15:24:46:97:c4:3b:31:29:5a:2d:e0:08:
88:56:e8:7b:c3:30:32:fe:06:50:47:ee:bb:e8:d4:e2:d8:89:
27:9e:2c:0b:c7:8d:5e:87:bd:93:d7:b1:a8:aa:8b:73:18:19:
4f:3b:93:ab:9a:a5:87:6e:b4:b0:bd:ee:eb:a6:df:65:37:40:
6a:24:02:95:20:45:3c:d6:12:b5:97:d3:de:80:c1:0c:92:10:
3b:b0:19:9f:cf:9e:53:8f:f5:4f:b8:06:e5:80:44:d6:3e:1f:
82:c9:6c:12:2e:15:48:37:f4:c4:2d:f5:3d:47:16:d0:65:3b:
f0:9d:b5:e5:cf:6a:c8:f2:24:f0:ef:30:0b:d1:f3:8c:4d:fd:
77:79:c7:dc:3c:04:e6:56:96:5d:fe:fb:28:dc:95:58:fc:5e:
6d:c5:30:5a:b8:67:d5:35:3a:df:a4:91:58:c9:46:d4:c3:43:
79:b7:00:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:11:44 2024 by rpki-client on console.sobornost.net