Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/868e9b-e143-4e57-867a-43ee37032079/1/UiJxF76mOcvIl_wx52SjSV-0AcI.mft
File: UiJxF76mOcvIl_wx52SjSV-0AcI.mft (raw, json)
Hash identifier: zWCvVpuacMy5O9E6ZbiGRottEjYfjuZw3Ic/DASaGQ8=
Subject key identifier: 02:6F:F6:82:C2:C2:E2:2C:50:F9:21:9B:A7:10:E8:44:E7:0D:AA:26
Authority key identifier: 52:22:71:17:BE:A6:39:CB:C8:97:FC:31:E7:64:A3:49:5F:B4:01:C2
Certificate issuer: /CN=52227117bea639cbc897fc31e764a3495fb401c2
Certificate serial: 018CEE86959104C0292EE0031658E4AB311C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJxF76mOcvIl_wx52SjSV-0AcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/868e9b-e143-4e57-867a-43ee37032079/1/UiJxF76mOcvIl_wx52SjSV-0AcI.mft
Manifest number: 08C4
Signing time: Tue 09 Jan 2024 14:00:46 +0000
Manifest this update: Tue 09 Jan 2024 14:00:46 +0000
Manifest next update: Wed 10 Jan 2024 14:00:46 +0000
Files and hashes: 1: UiJxF76mOcvIl_wx52SjSV-0AcI.crl (hash: vGIz/j5gVo3VN319mTKU/Jg3umkJhRQGAyHIgIIAZHQ=)
2: fYiL-gcJYS3DvoXlbk8npEzex9s.roa (hash: 9Q8MjsVPLUrU7yHevN8gaqVNPjLnBSbpSJ0GOIYxwtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:86:95:91:04:c0:29:2e:e0:03:16:58:e4:ab:31:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52227117bea639cbc897fc31e764a3495fb401c2
Validity
Not Before: Jan 9 14:00:46 2024 GMT
Not After : Jan 10 14:00:46 2024 GMT
Subject: CN=026ff682c2c2e22c50f9219ba710e844e70daa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:25:28:36:b2:82:31:cb:02:91:2a:f5:8b:
57:7f:0a:6c:b1:6d:ca:bd:3c:a0:8a:18:6c:2d:a3:
f5:76:31:f1:0b:d7:ec:8f:63:b3:54:cb:50:65:76:
5e:6f:33:96:74:84:ad:c5:02:97:e7:9c:59:37:ab:
03:1d:1b:ce:48:47:60:3e:f6:62:33:ff:0a:00:0e:
a7:01:7a:5f:82:a3:12:9f:b4:65:9a:c1:0a:a3:95:
ac:b9:c4:23:0f:b1:e8:c7:a4:51:30:eb:d4:08:55:
48:62:20:ec:ed:2e:b4:fd:8a:a9:39:37:45:25:b4:
b8:f5:3a:56:9b:02:bb:7e:32:c8:32:b3:22:f5:e0:
33:1c:01:4d:ef:11:48:1c:da:e6:fe:88:46:c6:59:
73:d4:c5:30:f5:c5:76:36:66:bb:09:13:1d:6e:97:
84:ac:6a:95:6a:b2:bb:75:85:e5:f0:f4:37:6a:60:
6c:4d:fd:6c:1a:bf:48:cb:fb:4b:52:c6:de:2a:8a:
43:03:4e:d2:eb:0a:bf:67:a7:e2:14:eb:f7:e1:7e:
29:9a:98:37:18:03:a4:d9:37:84:55:d2:ec:92:d9:
cb:01:08:74:0a:bf:cc:af:b0:21:2e:9a:3a:36:c1:
02:a2:04:08:ec:4a:d2:42:5e:de:b5:83:99:9a:7f:
6e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:F6:82:C2:C2:E2:2C:50:F9:21:9B:A7:10:E8:44:E7:0D:AA:26
X509v3 Authority Key Identifier:
keyid:52:22:71:17:BE:A6:39:CB:C8:97:FC:31:E7:64:A3:49:5F:B4:01:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJxF76mOcvIl_wx52SjSV-0AcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/868e9b-e143-4e57-867a-43ee37032079/1/UiJxF76mOcvIl_wx52SjSV-0AcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/868e9b-e143-4e57-867a-43ee37032079/1/UiJxF76mOcvIl_wx52SjSV-0AcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:59:fd:e6:5d:40:3e:0d:4e:41:de:57:c9:fb:1d:8c:20:49:
8d:f8:dc:b5:26:5f:3d:19:da:7e:09:e0:91:38:f4:c9:d5:03:
ab:5d:33:99:8b:ec:a0:05:ea:a6:b3:99:ae:07:3a:1a:bb:6b:
a1:7c:12:45:61:72:e2:43:93:e4:c1:a9:41:f0:87:c3:85:12:
fd:9e:ec:0e:2b:d5:9d:e3:36:f6:92:b5:71:b3:82:b1:0b:60:
e6:f8:84:24:44:09:e4:47:c9:5d:b1:ce:1d:96:b1:36:76:44:
8f:38:42:d6:6e:bd:c5:f6:45:42:d2:0c:a9:ca:ca:50:c7:ff:
95:fe:c3:27:9e:bd:bd:eb:16:e0:9a:2c:cd:27:42:b1:33:e0:
64:1d:cd:7e:99:16:03:a1:f0:b8:bd:1f:a7:d1:e9:6b:45:cc:
51:82:80:ea:f1:83:74:ff:db:07:2c:5e:27:fa:2a:7c:25:72:
0e:5c:2f:c7:e3:7c:e9:14:78:4b:0b:20:21:50:e5:82:40:67:
42:7f:60:1e:3d:d4:ee:12:97:cb:3a:6f:60:c2:2a:11:5a:1e:
7b:0f:58:81:8f:13:e4:d7:c2:13:7d:34:a3:73:31:9c:43:9b:
7f:b4:08:41:73:b1:bd:3c:38:3e:b9:54:d3:cf:14:e4:4d:87:
7e:cc:fb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:53 2024 by rpki-client on console.sobornost.net