Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.mft
File: zZIz9qiNCPZVnCIGsb_yZVsSIjE.mft (raw, json)
Hash identifier: sgJwofrsw8OqdaN0vJSX0jC/f8HWrjniZvRt46cS/ZQ=
Subject key identifier: 08:C9:27:69:26:77:F9:1D:88:68:16:94:F8:53:D2:73:C6:3F:BD:AD
Authority key identifier: CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
Certificate issuer: /CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Certificate serial: 018CEDE208334F071FD39D8B29CD5866B439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.mft
Manifest number: 102D
Signing time: Tue 09 Jan 2024 11:01:02 +0000
Manifest this update: Tue 09 Jan 2024 11:01:02 +0000
Manifest next update: Wed 10 Jan 2024 11:01:02 +0000
Files and hashes: 1: MkRHfjzdt_EmaRoZX6572cfDXKI.roa (hash: fmnR5u3g21RNvJNynudhpstS09AfyiLUKjnwTJJzneE=)
2: zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl (hash: uDiC7MEJezYJosZm7TIhuZkZzwiljLFm+8FLDjniO0w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:e2:08:33:4f:07:1f:d3:9d:8b:29:cd:58:66:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9233f6a88d08f6559c2206b1bff2655b122231
Validity
Not Before: Jan 9 11:01:02 2024 GMT
Not After : Jan 10 11:01:02 2024 GMT
Subject: CN=08c927692677f91d88681694f853d273c63fbdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:2b:df:e6:b5:5c:a0:01:16:36:b6:7e:e8:
d8:4f:c9:eb:7f:a5:93:ce:98:0c:96:b2:e1:fb:0d:
95:c2:7c:d4:43:8d:63:1b:f3:0d:f5:a0:8b:81:25:
39:9e:f1:e6:4f:4c:15:2a:84:77:01:1d:eb:3f:7a:
f6:f3:c8:f9:6d:d1:cb:3f:11:5b:e7:46:4e:4f:91:
f3:10:7f:ef:ed:a6:ba:22:f6:3d:27:98:c4:31:17:
69:c1:1e:a6:7d:b0:eb:e4:4b:51:4a:47:f3:75:a2:
43:e9:0c:94:6d:e7:5b:40:03:ba:6d:6e:6d:79:02:
23:12:98:e7:c2:41:89:2f:d5:d6:8b:87:04:28:49:
af:ac:83:69:65:34:82:f0:ac:31:e6:0f:4d:f1:37:
22:f5:b9:04:26:66:b7:e4:6a:94:79:80:99:55:c2:
32:53:1c:f4:68:ed:3d:91:e2:2e:12:c6:ea:6b:47:
37:8e:28:22:c0:03:49:00:fc:de:8c:46:0b:c9:0a:
14:a5:a8:10:eb:dc:91:30:21:b2:1b:be:17:53:ec:
65:5c:45:cd:06:00:b7:a8:c6:11:ff:9c:9c:69:68:
c5:30:4d:ff:8c:05:7e:70:d2:18:31:03:7c:31:b4:
47:18:ba:11:71:bc:a0:b3:40:ba:41:3d:81:b3:bd:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C9:27:69:26:77:F9:1D:88:68:16:94:F8:53:D2:73:C6:3F:BD:AD
X509v3 Authority Key Identifier:
keyid:CD:92:33:F6:A8:8D:08:F6:55:9C:22:06:B1:BF:F2:65:5B:12:22:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIz9qiNCPZVnCIGsb_yZVsSIjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/0a116f-5a0b-4566-9f44-b837bf9d4c5f/1/zZIz9qiNCPZVnCIGsb_yZVsSIjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:98:e7:11:e5:11:54:34:42:19:3a:0e:4c:49:68:55:1b:98:
52:9d:66:cb:ff:66:37:38:a2:fd:34:1c:77:ec:da:1f:3e:47:
5b:c5:45:e2:2b:55:52:1e:7d:11:b3:6b:bb:ff:d2:ff:91:19:
d2:41:0f:76:4d:4e:31:32:74:13:7c:73:60:a3:bd:54:41:92:
33:b6:60:32:8d:f9:d0:88:f3:39:f6:94:23:75:02:7f:9a:0b:
53:7d:fa:11:a2:2d:1e:c3:3e:c9:57:0b:b3:88:8e:a6:9c:b7:
ec:80:e3:09:9a:e0:8d:d9:b3:77:d9:b2:a0:82:12:f8:20:5d:
b7:70:2c:ca:33:23:dd:e2:41:c7:45:d6:3c:c5:02:4a:71:97:
53:cc:f5:42:fe:98:cc:b0:bb:60:aa:e0:0c:27:4d:58:f0:2a:
15:16:7e:f7:97:30:ea:12:d3:69:17:f1:c1:ad:2a:f1:99:12:
53:6c:b9:e9:fb:62:5e:4f:90:5a:b4:90:46:e9:57:75:35:f4:
ea:65:11:d1:16:9e:32:54:a0:22:00:df:f4:73:ca:d8:77:7d:
27:39:43:6b:90:e0:da:0a:05:21:03:b5:4e:0b:1d:37:26:9f:
7b:3e:4a:00:fd:cb:5a:9a:e3:82:38:06:e3:e3:6e:18:41:ba:
a7:b4:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:46 2024 by rpki-client on console.sobornost.net