Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
File: KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft (raw, json)
Hash identifier: HNHQdYczctko/Jz49pVDmITyW8WDNaMXNg0Y0PZee/M=
Subject key identifier: 66:83:AC:8B:E9:47:46:EB:51:13:3F:82:C8:6C:04:F4:E6:B4:35:AD
Authority key identifier: 2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
Certificate issuer: /CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Certificate serial: 019347175DC036712A6922CFBBB0B0B36A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
Manifest number: 08EF
Signing time: Wed 20 Nov 2024 01:02:13 +0000
Manifest this update: Wed 20 Nov 2024 01:02:13 +0000
Manifest next update: Thu 21 Nov 2024 01:02:13 +0000
Files and hashes: 1: 2vnWNpa9n6_uQA8_P5SizsK4cwY.roa (hash: SUTV3wb047Rd9aklRlapacjw4HXLC5ea5rMvDHlobqk=)
2: KwsaUXc9Gg8J9ibmH-BXuBpDK7I.crl (hash: mr/nq/mx/TSHEb07w3DJlnmVSx+Ap8S0yE6PiWYqIFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:17:5d:c0:36:71:2a:69:22:cf:bb:b0:b0:b3:6a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0b1a51773d1a0f09f626e61fe057b81a432bb2
Validity
Not Before: Nov 20 01:02:13 2024 GMT
Not After : Nov 21 01:02:13 2024 GMT
Subject: CN=6683ac8be94746eb51133f82c86c04f4e6b435ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:17:b8:7c:f8:2c:94:ad:b2:d1:ed:6b:ef:
f8:a0:9b:7c:30:5d:cb:82:7c:21:c8:40:3e:83:92:
47:7f:39:a6:2b:04:7e:a7:47:90:c0:34:5f:aa:0a:
a0:e5:d1:d8:62:ed:e7:a2:00:e5:54:07:85:37:cc:
f6:2c:9c:68:3c:2e:1b:49:1e:3c:5f:69:fe:0f:3b:
fc:24:e0:91:e0:35:79:cf:19:41:9b:05:55:06:d3:
27:7c:2e:54:be:b2:24:33:34:d1:74:6a:7c:f1:55:
9c:2d:1f:87:81:88:6a:f7:5f:53:85:e9:69:9d:27:
c7:10:2e:6c:2d:c0:b6:32:fb:4d:26:43:3b:ee:27:
9c:98:34:56:b9:2c:6a:e4:82:ab:f4:04:48:71:47:
e2:02:8a:26:84:73:45:d6:db:8a:42:f9:a3:9c:b8:
e8:3c:32:95:9c:04:cd:d6:5b:62:3f:02:23:6f:9e:
02:bb:07:ba:bc:a7:27:91:c2:0c:ac:9a:7e:16:90:
d9:6b:d4:ae:fd:25:2e:cf:2b:84:5e:0a:86:d0:db:
a5:ca:59:29:b0:c3:b2:76:b7:e8:8e:d7:22:97:ad:
9f:43:07:30:a4:48:47:68:51:af:7f:d0:0c:44:51:
98:58:b4:69:bf:30:63:14:d6:9f:e5:76:c6:43:32:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:83:AC:8B:E9:47:46:EB:51:13:3F:82:C8:6C:04:F4:E6:B4:35:AD
X509v3 Authority Key Identifier:
keyid:2B:0B:1A:51:77:3D:1A:0F:09:F6:26:E6:1F:E0:57:B8:1A:43:2B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b5b732-e313-4043-9c2d-fba23099d76b/1/KwsaUXc9Gg8J9ibmH-BXuBpDK7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:be:c9:70:fc:e1:17:fc:29:2b:15:62:bd:e3:9b:5d:7a:7e:
a1:31:6d:10:f8:1e:96:58:a3:77:47:39:79:7d:e4:13:97:84:
48:98:14:3f:e9:47:e6:0c:8b:f1:79:d7:1a:85:9a:c7:b6:a3:
b1:19:96:58:2f:fb:b3:5f:21:69:ae:0b:7f:21:04:62:3a:8a:
58:92:36:4a:0d:09:19:18:7d:5d:90:55:fc:1b:63:ef:6b:b6:
d9:af:82:a7:b5:e3:b0:f0:9c:2f:04:b3:ae:7e:3d:31:3c:8b:
63:e2:b6:56:46:5e:95:37:e4:f7:20:7d:bf:1b:cb:f2:67:e5:
23:14:75:eb:28:e3:df:50:60:3b:bb:1e:32:16:aa:10:6a:ff:
cb:05:83:f4:85:31:48:33:b6:03:af:3e:3c:d0:8e:00:4c:ca:
44:b5:62:18:2d:22:27:fa:7b:c6:2a:00:34:cd:9e:16:f4:ec:
d2:5b:63:0e:d4:49:55:98:a7:df:62:05:1d:a8:7e:71:25:c3:
5a:1e:c5:d8:97:a2:f4:80:0b:68:19:d8:a2:40:66:2b:76:72:
9b:98:7c:9d:f5:99:1f:62:1f:9a:66:ca:54:be:02:b2:f5:98:
5c:44:35:34:74:c7:b5:a1:4e:1b:53:aa:23:dc:92:03:1d:3f:
2b:ac:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:12:53 2024 by rpki-client on console.sobornost.net