Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
File: dDbW6AAjNMdDTqze-L8s5yFslT8.mft (raw, json)
Hash identifier: /e1BSb+zlArTC0Kg7lPq5Omr3k4KQ5k7wUKjHE21DgE=
Subject key identifier: 48:54:14:32:EB:34:6A:61:1C:20:14:F7:B3:E3:DB:0A:80:F3:A1:B2
Authority key identifier: 74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
Certificate issuer: /CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Certificate serial: 019346715DD7D797B1A01E69125B04F9860E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
Manifest number: 0D09
Signing time: Tue 19 Nov 2024 22:00:54 +0000
Manifest this update: Tue 19 Nov 2024 22:00:54 +0000
Manifest next update: Wed 20 Nov 2024 22:00:54 +0000
Files and hashes: 1: JGsJOXsM1MeaLAh590gBW7PNApU.roa (hash: ZludnWROEhMg+ODqZnJ0blQNcE9dZiGcbIRgJlKOi00=)
2: dDbW6AAjNMdDTqze-L8s5yFslT8.crl (hash: zRB4kPKifYC/Wakmxxdx6P+P2WG33u908NWrJdrRRa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:46:71:5d:d7:d7:97:b1:a0:1e:69:12:5b:04:f9:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Validity
Not Before: Nov 19 22:00:54 2024 GMT
Not After : Nov 20 22:00:54 2024 GMT
Subject: CN=48541432eb346a611c2014f7b3e3db0a80f3a1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:73:46:b0:20:5a:a4:dd:2a:0f:e4:bc:72:
db:96:6c:d6:07:48:03:61:b3:56:58:61:b8:60:35:
a3:98:17:3b:7b:7e:5f:07:ab:2b:40:06:c8:d1:34:
b8:7a:5d:0f:08:56:01:b2:25:2e:ff:a3:2c:ca:c8:
97:f6:c6:a2:95:32:f8:e2:96:9e:41:7e:7f:bb:d2:
73:5f:aa:49:39:db:05:91:a1:21:33:32:ea:b5:b5:
ec:ce:b0:c5:23:f2:62:91:ff:63:e5:be:ca:32:e9:
12:7d:1e:0c:46:f6:2e:5d:bc:20:d7:b1:8b:f7:95:
de:80:24:25:3a:cf:1b:fb:b6:f8:18:72:9b:19:e2:
e2:d9:b9:ea:f9:a5:83:71:40:c1:9e:d1:7c:27:0f:
83:9e:3a:6e:fe:20:d4:59:bd:2d:6d:ab:97:e9:82:
f9:1e:78:f7:c8:d6:1a:e6:69:74:b0:c2:04:64:13:
11:c6:fe:2f:50:ad:a9:93:18:eb:89:ed:15:88:11:
7b:bf:2a:63:de:88:dd:07:35:76:1d:d6:c7:76:db:
5d:5d:f5:59:c6:30:13:a9:9e:03:cf:46:20:39:ee:
91:ce:d9:72:ef:23:fc:f3:e0:eb:21:4b:76:8e:98:
ab:57:70:eb:6f:89:de:0f:29:8b:48:20:f0:a6:d6:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:54:14:32:EB:34:6A:61:1C:20:14:F7:B3:E3:DB:0A:80:F3:A1:B2
X509v3 Authority Key Identifier:
keyid:74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d8:20:eb:72:0b:11:2e:9f:55:f1:c6:6c:24:ff:bf:34:00:
92:a2:84:3c:b0:83:0b:a3:8a:f2:9a:db:6b:08:55:1c:50:9e:
c2:16:db:05:d1:9f:d6:b0:0b:46:fd:22:44:01:9e:0e:0c:04:
5f:73:6b:e5:f6:4f:dd:00:f4:88:06:81:15:06:66:0e:00:e9:
80:dd:e8:4d:d5:5f:5a:91:8e:1f:bc:61:af:f2:eb:96:61:f1:
4d:b1:ab:75:a8:54:c0:0b:81:b5:c0:3b:51:ce:d8:9f:67:fb:
37:1d:ad:38:d0:36:3a:fe:cc:7b:8c:49:b2:50:40:2c:40:1b:
d0:b4:5b:b6:89:10:be:ad:d5:7a:15:49:ec:90:d4:08:b5:7b:
5e:ff:22:b7:bb:ef:8e:68:99:2f:ce:31:20:f5:77:94:74:4a:
bd:e4:bf:59:8f:bc:fd:11:6b:2b:7f:ad:fd:65:9a:bc:cc:8f:
d7:f9:33:4d:b2:7d:7f:24:ae:10:a3:05:82:1e:c4:14:4f:a5:
40:41:24:3e:65:40:1c:9a:68:e0:62:11:31:da:c8:6f:72:35:
e3:44:db:26:f0:b5:33:29:ea:10:7b:f2:6b:62:9a:dc:43:0c:
27:95:10:6b:ea:b6:af:66:88:61:8e:9e:04:7a:56:33:06:3b:
c3:99:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:12:56 2024 by rpki-client on console.sobornost.net