Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.mft
File: zRzl1y2syrz3l0snLsJ678UatiA.mft (raw, json)
Hash identifier: rSiM0JXMYL7RTtYC3pAefmE0qvBD+wDAIem83Us8NfY=
Subject key identifier: F4:3C:0F:12:5B:F5:99:8B:AB:35:A0:C9:96:6F:26:DA:BF:0F:6B:F0
Authority key identifier: CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
Certificate issuer: /CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Certificate serial: 018CEE18C3FC6BFD7C015B3E3483DC7A9ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.mft
Manifest number: 080E
Signing time: Tue 09 Jan 2024 12:00:49 +0000
Manifest this update: Tue 09 Jan 2024 12:00:49 +0000
Manifest next update: Wed 10 Jan 2024 12:00:49 +0000
Files and hashes: 1: gNq-DNUiY_bgRwQyKl_VBvsnRVo.roa (hash: LAYTr3A4BNdNJDG5RyTTQVu3VDnTzfS+lgoqlIlbVqs=)
2: zRzl1y2syrz3l0snLsJ678UatiA.crl (hash: sFc+4wsFrOmCtLJ4OXRWgorjaITSsM7kQLipQ+1Uz4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:18:c3:fc:6b:fd:7c:01:5b:3e:34:83:dc:7a:9a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Validity
Not Before: Jan 9 12:00:49 2024 GMT
Not After : Jan 10 12:00:49 2024 GMT
Subject: CN=f43c0f125bf5998bab35a0c9966f26dabf0f6bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:23:30:b8:d0:34:7b:52:ac:71:b3:a9:59:d7:
c7:41:8a:2f:bd:6b:25:44:e6:8d:58:ea:be:fa:d0:
a6:eb:87:ed:97:2d:c3:3f:94:a3:f9:44:b1:68:28:
c5:a1:69:f8:09:4f:2e:e9:93:2a:bc:86:eb:d8:f7:
35:a5:df:e2:43:16:52:a0:50:37:03:09:70:11:95:
64:63:ae:ec:8a:d1:65:5d:c7:a4:b2:fe:c4:02:3f:
34:ff:d6:73:1b:94:6d:0e:e9:58:34:e5:25:ce:a8:
72:88:9e:36:05:c5:dd:f5:82:a3:c1:ca:65:8a:27:
93:6c:da:36:23:d3:2a:dc:fc:52:39:b6:1c:57:da:
ea:82:cf:f4:7d:15:a5:0a:5b:48:d6:63:bf:3d:69:
26:41:84:26:62:8e:0e:6e:5d:9b:05:ea:4f:4f:d8:
a5:d2:bc:85:5e:24:bb:ae:2a:f4:b1:0e:56:00:84:
ee:50:c6:af:e7:f0:35:6e:23:d3:4a:d7:0f:3b:aa:
a7:42:bb:7e:bb:10:f1:cc:1f:57:74:69:21:07:ba:
e2:1a:9b:be:50:73:29:04:23:83:37:37:b1:67:7d:
6d:82:d9:90:10:e2:77:cc:63:09:7c:3c:2f:22:16:
05:65:5b:f4:06:94:17:df:53:80:dd:2e:8b:e7:4f:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3C:0F:12:5B:F5:99:8B:AB:35:A0:C9:96:6F:26:DA:BF:0F:6B:F0
X509v3 Authority Key Identifier:
keyid:CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:22:f7:da:82:7a:a0:7c:cd:33:57:be:23:dc:3f:17:87:49:
cb:e3:30:cf:6d:26:ac:61:6c:39:41:4c:27:3d:e3:b7:8c:95:
78:10:3f:33:3e:42:7f:e0:0d:9a:6b:09:ca:25:11:c6:4f:eb:
04:c3:c8:ea:37:d9:a5:b9:8e:90:78:fc:fa:ab:c4:64:50:d8:
7f:8b:be:dc:0a:95:a3:02:45:9f:0d:88:6f:b8:01:21:9d:ac:
10:48:5f:d8:cb:1c:41:b0:2a:fd:22:cb:ea:5c:5a:ef:ee:6c:
00:4b:84:0a:35:e0:52:20:e7:74:32:83:30:64:56:93:58:bc:
09:16:ca:1e:d7:6b:13:56:5d:c0:2c:79:0a:aa:08:97:a5:4f:
89:08:45:b0:1b:f5:89:0d:ad:5d:45:ff:5d:b1:1d:8d:ec:f5:
c9:31:26:7f:a2:4c:41:ae:0d:d8:75:f6:ab:11:ae:e0:21:3c:
aa:ba:6d:92:b8:3e:c5:0a:25:89:21:73:a4:04:46:be:1d:80:
06:79:19:2b:f6:98:f7:5b:57:ba:db:d5:b5:5c:7a:04:52:83:
45:f6:a2:95:a7:6b:69:d9:f0:4e:b3:93:b9:23:b9:9d:cc:4f:
98:62:16:1c:88:6d:1c:5e:ed:58:5e:97:b3:2f:77:4a:27:b3:
f4:6f:f4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:24 2024 by rpki-client on console.sobornost.net