
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ae88a1-9526-4d77-afa4-f21e16035cc6/1/45tdrzltDXgO0izgbzmzG5wPQxI.mft
File: 45tdrzltDXgO0izgbzmzG5wPQxI.mft (raw, json)
Hash identifier: 1W7HKZDXzlEPxOJXHbApepte9zZ9u017LD1+6ZD8QYg=
Subject key identifier: C1:F8:1B:1D:42:0B:8E:7F:C2:EC:2E:98:81:AB:D7:4D:A3:A0:33:19
Authority key identifier: E3:9B:5D:AF:39:6D:0D:78:0E:D2:2C:E0:6F:39:B3:1B:9C:0F:43:12
Certificate issuer: /CN=e39b5daf396d0d780ed22ce06f39b31b9c0f4312
Certificate serial: 018CED063AC0984585E8C6055FD737418FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45tdrzltDXgO0izgbzmzG5wPQxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ae88a1-9526-4d77-afa4-f21e16035cc6/1/45tdrzltDXgO0izgbzmzG5wPQxI.mft
Manifest number: 0CB0
Signing time: Tue 09 Jan 2024 07:00:57 +0000
Manifest this update: Tue 09 Jan 2024 07:00:57 +0000
Manifest next update: Wed 10 Jan 2024 07:00:57 +0000
Files and hashes: 1: 45tdrzltDXgO0izgbzmzG5wPQxI.crl (hash: Y02C8No09h72V/H2LUJIpgSwjqllIT6dczv4xXK1SYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:06:3a:c0:98:45:85:e8:c6:05:5f:d7:37:41:8f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39b5daf396d0d780ed22ce06f39b31b9c0f4312
Validity
Not Before: Jan 9 07:00:57 2024 GMT
Not After : Jan 10 07:00:57 2024 GMT
Subject: CN=c1f81b1d420b8e7fc2ec2e9881abd74da3a03319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:27:9c:4e:25:16:67:1a:5c:2a:da:44:86:
c8:73:cc:7c:13:5a:3e:ac:2a:88:c6:d0:9c:4a:55:
ed:78:88:cb:33:f8:b1:41:bf:f8:c8:15:70:f3:6a:
83:f0:13:29:cd:28:3d:f2:2f:1f:0f:1d:1f:ef:d7:
da:dc:29:ac:c3:26:2c:f3:d7:a7:9a:80:b4:82:5e:
f6:fa:7b:7c:ea:c9:30:04:eb:88:f8:fe:e9:fa:55:
c5:06:c7:9b:b4:6c:4b:e4:a2:50:eb:b3:3f:b9:1a:
fd:59:c7:22:07:19:b1:ba:7f:c9:2a:f9:0c:b7:8d:
62:5d:da:0b:6f:13:2a:d2:39:91:4b:f0:39:19:f2:
2b:45:9b:82:7b:86:7e:86:a5:cd:dd:42:46:6d:10:
94:04:36:db:fa:11:82:f9:24:68:74:88:78:c1:58:
75:94:b7:95:74:d7:b6:99:c1:84:8c:3e:0d:7f:91:
79:39:a0:3e:2a:e8:f7:32:f5:35:55:c9:32:e3:b3:
46:17:74:6d:98:5b:4e:1e:cb:c1:89:63:74:fb:b5:
a1:c0:16:67:75:89:e9:46:4c:f4:49:3a:b0:d7:5c:
40:85:a6:80:77:82:79:89:7a:1e:4c:13:3e:2d:41:
e1:d9:4b:44:a5:32:d4:88:aa:d6:41:2c:2c:a6:b8:
ca:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:1B:1D:42:0B:8E:7F:C2:EC:2E:98:81:AB:D7:4D:A3:A0:33:19
X509v3 Authority Key Identifier:
keyid:E3:9B:5D:AF:39:6D:0D:78:0E:D2:2C:E0:6F:39:B3:1B:9C:0F:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45tdrzltDXgO0izgbzmzG5wPQxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ae88a1-9526-4d77-afa4-f21e16035cc6/1/45tdrzltDXgO0izgbzmzG5wPQxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ae88a1-9526-4d77-afa4-f21e16035cc6/1/45tdrzltDXgO0izgbzmzG5wPQxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:83:e0:63:71:4b:8b:69:f8:e7:21:2d:70:95:52:13:5d:0e:
39:b5:cc:04:8d:b1:c3:6e:ba:8b:38:07:c9:53:4c:e3:5a:79:
9f:36:a5:75:08:60:41:79:32:5d:1a:2f:b5:5e:0c:69:f8:e9:
f7:c8:93:5d:cf:8f:3e:85:ab:fc:4e:f3:bc:04:58:7b:34:2d:
71:6b:7e:8f:d4:69:d4:5b:0f:a1:53:1c:39:37:4f:86:a2:f1:
91:9b:fd:6e:37:f7:3e:7c:a6:e2:c2:1f:81:69:14:a6:55:be:
02:c9:2c:58:c1:12:bb:ca:53:41:35:f6:e4:52:93:8c:2f:c4:
75:61:2e:e2:a0:99:ef:83:87:b2:41:17:db:6a:ad:3b:1b:b0:
12:57:68:50:27:02:f7:1a:a1:d5:a0:24:b9:22:bc:ca:6d:49:
69:40:40:75:66:50:ce:5e:33:e3:3c:ac:f7:6d:9e:95:74:3d:
0f:b5:2e:ac:d8:e4:53:f0:b2:21:32:91:53:5c:c7:45:d6:01:
17:f7:7a:24:c7:0d:c8:81:e7:c3:d8:8b:75:20:6b:4f:b0:c7:
b7:c3:b9:20:5f:d9:42:24:be:38:a8:ed:43:18:a9:c8:31:db:
1f:cd:a0:cf:32:c4:60:5a:16:e3:29:65:66:c6:cc:01:17:d1:
88:67:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:01 2024 by rpki-client on console.sobornost.net