Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft
File: j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft (raw, json)
Hash identifier: f+pQi37gfi62ShorZxEAQn7W0umF6HkZvJUlZKZbSlc=
Subject key identifier: 65:FA:C2:5B:CE:20:E5:8B:35:FF:18:99:B5:D4:E6:45:CA:F2:DF:BA
Authority key identifier: 8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
Certificate issuer: /CN=8fad478776df320a8667e75e69e09efb73938b64
Certificate serial: 0193259C69ED43050D982924CB2BD357EA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft
Manifest number: 0811
Signing time: Wed 13 Nov 2024 13:00:27 +0000
Manifest this update: Wed 13 Nov 2024 13:00:27 +0000
Manifest next update: Thu 14 Nov 2024 13:00:27 +0000
Files and hashes: 1: j61Hh3bfMgqGZ-deaeCe-3OTi2Q.crl (hash: d6DA/Rp+s8idurSc1c3luCKPODDb/FaarnoWNl6iGD4=)
2: oYXgundrAO0Q2b5rG68_0833RN8.roa (hash: /JHMdaSb5qI53jhZftTbpu9fAZ4kIfufYKYUXrQeJjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:9c:69:ed:43:05:0d:98:29:24:cb:2b:d3:57:ea:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fad478776df320a8667e75e69e09efb73938b64
Validity
Not Before: Nov 13 13:00:27 2024 GMT
Not After : Nov 14 13:00:27 2024 GMT
Subject: CN=65fac25bce20e58b35ff1899b5d4e645caf2dfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:44:f3:a0:db:6b:d1:e2:6e:4d:73:b5:e0:
22:d3:7c:1b:59:22:e7:ff:11:8e:42:e0:96:dd:b6:
eb:11:f1:2f:63:90:bd:4a:05:2a:36:ee:83:2d:f8:
3b:a0:aa:ef:ce:ca:2c:5b:5d:f5:e0:63:e5:33:eb:
97:0c:17:6b:01:e3:92:8f:ba:18:81:76:52:8a:f5:
1f:54:41:c3:65:4f:0a:1a:f9:52:30:87:31:32:70:
94:0d:3b:a1:ac:7b:8f:73:ae:72:54:c3:38:6e:49:
95:f3:a8:d5:b4:a9:fc:c2:da:d6:ca:95:a6:c6:7f:
41:c5:4e:c8:23:c4:ce:e4:18:9a:4f:20:2b:60:8c:
1a:92:db:fb:10:6e:4c:88:7e:87:5c:16:5c:89:61:
e6:b8:cb:a7:82:59:e9:f6:2b:eb:e5:68:4b:fb:e5:
5b:ed:c9:aa:1b:c2:c9:ab:0f:64:a5:06:13:e8:ef:
a0:40:95:82:7f:e8:55:11:b9:52:e2:f1:bf:68:32:
de:70:46:10:f5:23:f3:eb:46:1d:fe:27:78:ac:59:
ef:53:29:e9:f0:e8:d0:e1:ad:fd:32:8c:6b:2d:33:
7b:e7:0e:5c:e6:c4:c3:32:66:1b:d4:47:9f:2f:50:
b5:a8:73:7b:78:5c:7b:50:4b:29:ce:c9:dc:0e:b5:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FA:C2:5B:CE:20:E5:8B:35:FF:18:99:B5:D4:E6:45:CA:F2:DF:BA
X509v3 Authority Key Identifier:
keyid:8F:AD:47:87:76:DF:32:0A:86:67:E7:5E:69:E0:9E:FB:73:93:8B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5314cd-1d64-498a-8187-21dd62b91ea3/1/j61Hh3bfMgqGZ-deaeCe-3OTi2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6c:cf:b5:2a:28:ef:20:ec:25:de:35:94:5e:e8:91:93:87:
d1:46:7a:5f:24:4b:6c:3a:07:a2:77:81:4f:2a:45:39:2e:9e:
cf:da:f4:58:fc:5c:ae:05:bb:e0:88:fa:fe:04:31:e7:ae:13:
84:a7:d6:17:99:86:ae:f6:5c:ba:b5:80:ea:cb:51:e7:b9:3d:
b8:c3:2f:ba:87:a4:30:05:d4:a2:02:87:9a:e6:8f:68:da:94:
f2:5f:ff:0c:ca:17:87:ec:67:fd:7c:d5:d7:5d:05:c6:c0:80:
8c:3a:5e:3a:39:0c:d3:2e:11:9c:41:91:14:f3:a4:27:71:79:
d8:36:da:64:6f:71:d0:24:67:a5:71:44:97:73:ab:ea:bd:57:
c2:76:91:a0:f0:a7:a6:39:fe:de:42:fc:01:ac:81:80:57:79:
e5:6e:61:ff:a8:f5:0d:62:4f:b0:6c:ea:17:33:0e:d1:e7:6f:
fb:41:24:54:95:b9:93:6c:94:9b:22:44:51:53:ec:dc:1b:75:
45:e0:f5:2b:da:8c:3d:d1:1d:6c:66:8e:20:6d:eb:dd:30:bf:
f3:ce:31:9e:b1:62:21:9c:7f:e8:85:ac:cb:e9:f7:36:21:0f:
11:20:46:d8:c1:ef:d7:47:d1:92:b0:29:0e:92:72:05:fb:9e:
84:f5:5f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:41:07 2024 by rpki-client on console.sobornost.net