Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.mft
File: 2XQKAvvhI2Imw2azPCnzbatw3lw.mft (raw, json)
Hash identifier: 9own2pTTXbfBSU3ka7EGhoj0Vp19p8OrrMNlXWzEJg0=
Subject key identifier: 4F:30:9D:DE:5A:FE:8B:15:9C:14:CA:F1:30:E0:F4:8C:4C:C1:E4:82
Authority key identifier: D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
Certificate issuer: /CN=d9740a02fbe1236226c366b33c29f36dab70de5c
Certificate serial: 018CED065AB135AF40E0B4E342C604FDBD07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.mft
Manifest number: 07CD
Signing time: Tue 09 Jan 2024 07:01:05 +0000
Manifest this update: Tue 09 Jan 2024 07:01:05 +0000
Manifest next update: Wed 10 Jan 2024 07:01:05 +0000
Files and hashes: 1: 2XQKAvvhI2Imw2azPCnzbatw3lw.crl (hash: ofFBgEuHSHeyHPTJF/VUiAY+2zXMrkgM1z+azV/Nvek=)
2: 9jp5_XfTiEwwNHNk2oxw-oayz6g.roa (hash: 3r63RXuBq2+H+3uAIUcsKa19QDg8Wvj+gzAnmLVuRWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:06:5a:b1:35:af:40:e0:b4:e3:42:c6:04:fd:bd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9740a02fbe1236226c366b33c29f36dab70de5c
Validity
Not Before: Jan 9 07:01:05 2024 GMT
Not After : Jan 10 07:01:05 2024 GMT
Subject: CN=4f309dde5afe8b159c14caf130e0f48c4cc1e482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:5f:52:0f:4e:d5:20:32:ac:76:06:62:7d:
64:aa:4f:0c:62:e9:37:4f:a9:d2:cf:8e:aa:06:00:
cf:4a:01:4d:a8:f5:94:44:82:e1:c7:d8:27:40:0f:
26:3d:2a:73:56:bb:8b:e0:f1:16:f6:6c:7b:75:3a:
b1:80:77:20:ec:5d:0a:35:87:4d:8b:b5:4c:a1:2a:
69:49:e7:6d:e4:e2:f5:d7:ea:a4:f3:77:f9:dd:22:
00:54:84:bf:1f:be:91:76:fd:32:69:c5:65:c1:6b:
d9:2e:6d:9a:e4:e6:ce:57:b3:63:3d:8a:87:21:a8:
b3:5a:00:cc:b0:2b:fc:40:d2:64:73:02:2c:7f:10:
1d:88:5b:ab:3f:85:9d:8f:f3:24:d7:d4:bf:21:9c:
f2:fb:38:79:37:e9:a2:56:79:8a:df:df:d7:c7:f1:
44:4c:bb:ef:03:34:49:f2:fc:94:1d:d5:14:7c:5a:
2d:2c:d3:68:9b:d6:a0:6b:78:5d:ba:00:dd:73:52:
3f:a1:4d:cd:4c:51:ab:13:59:f6:bc:4b:61:e6:98:
c3:70:53:ef:c9:cb:10:3b:e4:ba:64:41:a3:81:fc:
51:fe:34:e8:66:99:a1:9c:79:ba:0c:b1:46:fd:b3:
33:01:9a:a7:e2:c8:b8:fd:21:f5:49:66:6c:72:f1:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:30:9D:DE:5A:FE:8B:15:9C:14:CA:F1:30:E0:F4:8C:4C:C1:E4:82
X509v3 Authority Key Identifier:
keyid:D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fa:1e:f1:0a:08:35:c6:07:82:4a:67:b6:fa:86:90:34:43:
1f:25:cf:8c:ca:b6:5a:59:26:2b:d8:ea:de:e4:34:e0:b6:1c:
ef:47:36:72:ed:dc:e2:fd:f0:8a:1d:80:02:8f:32:4e:91:61:
1b:3e:71:21:2a:38:eb:b6:49:48:81:8c:84:a2:37:fe:43:5f:
41:3e:7c:71:c5:4f:0f:ac:fb:81:bc:29:b1:eb:95:7a:c5:ec:
e1:bd:20:d1:61:65:39:fa:a5:de:ca:db:99:46:fb:51:e8:8c:
08:07:ff:8c:0b:a6:2e:ca:32:e0:bf:01:a2:00:03:08:3b:bf:
ff:80:b8:ec:cd:ab:a9:f4:49:8c:66:95:fc:8f:29:25:fa:35:
ad:5d:f2:cf:99:70:37:55:d1:41:f2:7d:c3:a7:0e:6a:16:7e:
4e:7b:bf:40:32:6c:c5:91:70:3a:91:21:ae:23:f7:fb:5f:c6:
19:7f:17:83:5b:28:7c:eb:f8:44:b1:c4:8b:a6:fa:b3:fe:4c:
52:57:b8:e3:20:50:4d:64:e6:da:cf:52:99:42:1a:ac:8e:d5:
2f:f6:34:b0:a5:2e:d7:b7:2a:77:de:b7:c2:dd:62:e6:c0:ca:
02:cc:18:f8:2a:86:f7:3b:d3:29:73:42:1f:28:97:b7:aa:ec:
55:42:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:49 2024 by rpki-client on console.sobornost.net