Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft
File: HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft (raw, json)
Hash identifier: QN1GnGF06FropVwDbBtpvxW7TpXPLFdTWV578k/HCVY=
Subject key identifier: 65:41:82:10:16:9C:0C:78:FE:34:75:3E:BC:EE:5B:DD:78:85:4A:82
Authority key identifier: 1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
Certificate issuer: /CN=1c14ea32ebe84556fd468f812eac103153789ed0
Certificate serial: 018C66B2AA7CF32F62322465A4820010FE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft
Manifest number: 08EB
Signing time: Thu 14 Dec 2023 05:00:34 +0000
Manifest this update: Thu 14 Dec 2023 05:00:34 +0000
Manifest next update: Fri 15 Dec 2023 05:00:34 +0000
Files and hashes: 1: HBTqMuvoRVb9Ro-BLqwQMVN4ntA.crl (hash: 6klch+g/PV2bIJXftX2f32ZegJcBCKgT5/kkdOENwCA=)
2: U-fhA4cxf7MShV3SlBRouycozrI.roa (hash: Z8IDY7CAVwXomz7l7MTwZSF3Ew+FAuuGd+lOkIs54q8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:66:b2:aa:7c:f3:2f:62:32:24:65:a4:82:00:10:fe:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c14ea32ebe84556fd468f812eac103153789ed0
Validity
Not Before: Dec 14 05:00:34 2023 GMT
Not After : Dec 15 05:00:34 2023 GMT
Subject: CN=65418210169c0c78fe34753ebcee5bdd78854a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b6:9f:d7:c0:e9:8d:5c:36:e7:ef:fb:cc:f4:
3e:85:bb:81:dd:f5:0b:1f:bd:79:0a:91:04:9d:93:
f4:5a:fa:94:6a:e0:77:71:ff:38:d9:e3:7d:ca:f0:
4e:d0:66:00:f9:29:82:92:7d:94:5b:01:39:91:e3:
0f:ae:8c:8e:b7:d6:a2:8c:ba:f4:70:f0:fd:4f:02:
cc:10:07:70:a2:5f:f6:36:14:b7:a2:33:c5:e5:bd:
bf:91:ad:22:3c:81:ae:99:e2:bb:ff:aa:c6:04:ed:
f6:c3:4d:eb:89:0b:4e:70:91:a7:30:58:b5:cc:ae:
75:5c:0c:99:75:bf:78:9e:32:ab:9d:96:a9:36:a3:
ef:09:81:5e:cb:f2:6b:49:f9:cc:b4:d2:5e:8c:9d:
f2:92:96:6b:06:b2:c0:f5:ef:d2:4e:c3:19:96:f0:
be:29:6f:a7:06:a7:41:8f:1a:06:b4:df:3b:a6:04:
2e:3e:68:51:5b:91:ec:ca:e3:6b:d4:10:c2:9f:00:
ab:92:8c:dc:e8:21:1b:8a:1b:59:9d:d2:28:7a:53:
a1:12:2a:91:60:ed:f7:19:17:f3:0d:59:cc:71:4d:
b6:21:3c:20:0b:63:83:7f:06:9a:ce:e1:22:dd:7b:
16:01:f3:99:b2:ed:13:f4:c7:6a:18:89:87:57:af:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:82:10:16:9C:0C:78:FE:34:75:3E:BC:EE:5B:DD:78:85:4A:82
X509v3 Authority Key Identifier:
keyid:1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e7:a5:bd:d2:ac:ce:a5:b5:5c:3b:e9:39:e0:b4:12:fc:9c:
56:b2:7a:22:e2:4e:da:c9:10:89:d2:85:86:18:85:fc:90:19:
02:26:61:1f:61:e1:68:0b:fa:13:3e:f4:dc:15:65:c2:b3:5f:
d6:8e:f2:11:4d:71:d1:c2:b5:46:40:38:b6:4b:7f:46:34:64:
04:53:46:b6:00:28:9c:55:ed:54:67:ff:5c:bf:c9:0e:0d:d1:
99:cf:8c:2a:91:91:6a:bf:be:f5:4b:43:5e:4e:99:3d:3f:c6:
2b:f4:c9:24:a5:a6:6a:e2:84:36:34:c5:af:24:20:cf:9e:0d:
2f:3e:f7:0c:29:eb:88:1c:27:57:04:b3:49:5a:ab:b8:15:de:
89:a1:92:61:69:23:67:e8:8d:0f:6d:41:8b:4f:85:c6:f7:1b:
34:cc:ef:07:6b:38:55:b7:47:66:29:a4:ed:bd:c9:8c:21:49:
b9:5e:df:05:f2:f2:15:1c:dc:74:07:54:98:fb:32:aa:2e:10:
41:4e:d5:61:d3:04:3b:e1:e4:90:ef:ef:2b:a3:94:bd:7a:1d:
8f:65:51:b5:f2:00:47:d0:01:23:ed:e0:54:e7:81:b9:aa:d1:
5c:f0:9a:bb:8b:7c:e0:dc:bf:9d:23:1d:46:57:1e:f4:08:79:
e6:1f:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:40 2023 by rpki-client on console.sobornost.net