Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/40b6ab-0bfd-42c1-af4b-d4aa27c1fce4/1/xGQTMufh3vIli_pNBdeONPtXkpc.mft
File: xGQTMufh3vIli_pNBdeONPtXkpc.mft (raw, json)
Hash identifier: WG+mps/sE50716g1bWWBIdUMG0BQTML8SoJ5raU1sQ8=
Subject key identifier: BF:31:DF:CE:0F:2C:28:A5:C2:EF:AF:04:7A:0A:CA:C8:23:EC:BE:98
Authority key identifier: C4:64:13:32:E7:E1:DE:F2:25:8B:FA:4D:05:D7:8E:34:FB:57:92:97
Certificate issuer: /CN=c4641332e7e1def2258bfa4d05d78e34fb579297
Certificate serial: 01948EBE53387BC997932C8B56B1986FC7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGQTMufh3vIli_pNBdeONPtXkpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/40b6ab-0bfd-42c1-af4b-d4aa27c1fce4/1/xGQTMufh3vIli_pNBdeONPtXkpc.mft
Manifest number: 0851
Signing time: Wed 22 Jan 2025 16:00:25 +0000
Manifest this update: Wed 22 Jan 2025 16:00:25 +0000
Manifest next update: Thu 23 Jan 2025 16:00:25 +0000
Files and hashes: 1: xGQTMufh3vIli_pNBdeONPtXkpc.crl (hash: RhUZmZFNx53L486k1oPUFCdv1G0A4C/PQgcRLzFOORU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:be:53:38:7b:c9:97:93:2c:8b:56:b1:98:6f:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4641332e7e1def2258bfa4d05d78e34fb579297
Validity
Not Before: Jan 22 16:00:25 2025 GMT
Not After : Jan 23 16:00:25 2025 GMT
Subject: CN=bf31dfce0f2c28a5c2efaf047a0acac823ecbe98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:03:ba:32:d4:d7:de:3f:8b:7b:4a:a9:51:
cd:f6:ef:57:9c:3e:04:7d:92:2d:c9:0a:40:90:82:
a2:70:7f:b5:74:bd:b2:c9:4a:50:23:86:20:82:90:
86:60:3f:3e:db:5e:67:ed:7e:f9:1a:36:91:ac:11:
48:fb:3e:68:3a:80:fe:eb:a7:92:ed:8c:b2:d4:43:
14:f1:90:0f:4c:38:d2:fa:70:66:d8:02:35:13:10:
51:67:4f:b0:ff:20:3f:da:a4:ab:ae:6b:07:85:56:
92:c2:24:5d:19:09:61:26:87:52:67:74:95:71:08:
57:60:b3:36:18:3e:00:1a:f4:9b:30:e5:bb:4c:e0:
29:51:a1:4c:ee:76:c1:ca:fe:ee:c4:9d:dc:2a:18:
ba:3f:cc:e9:aa:e1:33:e2:61:2d:5a:09:c9:93:08:
d7:ca:0d:c1:74:44:f5:a5:50:69:cc:b9:bb:ff:74:
e4:57:54:b6:97:77:ee:5b:86:17:20:5e:20:c0:b0:
a2:ec:8b:73:de:f0:0c:43:2c:36:f7:33:55:f9:be:
c3:31:22:3d:7d:ee:de:f6:13:f8:ce:35:bd:68:96:
51:f5:0d:b7:fb:b5:0f:ab:8f:3a:4c:55:4e:c0:7c:
a4:cb:55:55:51:87:1a:d5:51:5d:ea:3a:a0:e5:19:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:DF:CE:0F:2C:28:A5:C2:EF:AF:04:7A:0A:CA:C8:23:EC:BE:98
X509v3 Authority Key Identifier:
keyid:C4:64:13:32:E7:E1:DE:F2:25:8B:FA:4D:05:D7:8E:34:FB:57:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGQTMufh3vIli_pNBdeONPtXkpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/40b6ab-0bfd-42c1-af4b-d4aa27c1fce4/1/xGQTMufh3vIli_pNBdeONPtXkpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/40b6ab-0bfd-42c1-af4b-d4aa27c1fce4/1/xGQTMufh3vIli_pNBdeONPtXkpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:81:31:bb:3b:24:41:ce:d2:5f:c6:7e:b8:1c:83:24:61:0e:
76:6f:25:c1:44:88:9b:98:30:c5:b4:49:82:1e:16:2b:d6:39:
99:ee:a6:9e:aa:ea:74:b4:c0:59:a5:db:93:94:a2:f8:74:60:
a2:22:fb:03:51:8e:d1:da:aa:a8:23:aa:a1:9e:1e:22:fd:1e:
73:c6:a1:3e:1c:f7:9c:87:8e:88:42:46:84:93:24:25:ab:18:
89:e8:d3:c2:07:32:88:c4:f9:75:36:ff:7a:44:25:d7:39:dd:
c4:a9:70:88:b9:e2:83:7a:b6:1a:3a:a7:15:7c:dc:8f:ca:9d:
3d:67:34:84:1b:03:53:be:1e:cc:54:ba:05:ee:b2:82:c4:08:
e0:f1:77:f6:e1:8a:a7:71:1a:3d:3e:42:0f:85:81:66:4b:c4:
d3:af:7b:46:03:32:94:35:63:da:72:e3:82:23:ba:e9:ad:db:
21:80:d4:66:4d:13:53:59:cb:53:d0:9d:18:2a:1e:fd:6f:b5:
ee:2b:84:67:f4:ae:97:cf:fe:52:d6:e0:9e:76:04:66:b9:be:
d6:15:03:81:a6:94:4d:03:9c:93:3e:1d:96:d7:c3:b3:7a:a3:
51:b1:f2:1c:06:06:9e:72:a8:f9:80:32:3a:d4:60:75:8c:41:
dd:45:b2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:12 2025 by rpki-client on console.sobornost.net