Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
File: aO6OfkIFOVOcTuiTOr04wCTjvVs.mft (raw, json)
Hash identifier: CV9z3Oopb5Mw2OfESWJKr5P8Hib3AQlRGPKh5w825jk=
Subject key identifier: 85:11:5A:3F:34:EC:A0:89:B1:92:DA:15:F6:A0:30:41:63:D5:01:FF
Authority key identifier: 68:EE:8E:7E:42:05:39:53:9C:4E:E8:93:3A:BD:38:C0:24:E3:BD:5B
Certificate issuer: /CN=68ee8e7e420539539c4ee8933abd38c024e3bd5b
Certificate serial: 01948F633B0153146A8EDD0D37288C9ECB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO6OfkIFOVOcTuiTOr04wCTjvVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
Manifest number: 0E02
Signing time: Wed 22 Jan 2025 19:00:32 +0000
Manifest this update: Wed 22 Jan 2025 19:00:32 +0000
Manifest next update: Thu 23 Jan 2025 19:00:32 +0000
Files and hashes: 1: aO6OfkIFOVOcTuiTOr04wCTjvVs.crl (hash: PXlYG+Hqawt/BAdY7rMQnw33vPc5D7u5YfyiVHJeoLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:63:3b:01:53:14:6a:8e:dd:0d:37:28:8c:9e:cb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ee8e7e420539539c4ee8933abd38c024e3bd5b
Validity
Not Before: Jan 22 19:00:32 2025 GMT
Not After : Jan 23 19:00:32 2025 GMT
Subject: CN=85115a3f34eca089b192da15f6a0304163d501ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6a:9f:04:3b:94:04:af:39:43:64:8a:ac:4b:
9c:f4:22:c6:55:e7:43:2d:66:d6:60:7e:24:0f:74:
18:2e:0b:7d:5d:bd:cc:3b:f3:89:a9:3f:8c:64:a6:
d8:6b:9d:3d:72:2d:62:55:ff:d2:ae:46:09:b1:ca:
b2:87:57:6d:72:af:85:3a:41:b8:ec:a7:38:51:9e:
86:71:d0:af:5e:0e:f4:21:4d:1e:11:bf:72:f2:3e:
c3:91:28:d0:6e:e0:21:26:8e:a4:84:6f:ad:26:90:
68:09:b5:51:f4:08:6b:fe:79:2b:a8:46:75:a5:96:
28:d6:1e:9e:3c:db:0a:ad:bb:fe:f1:81:b9:f3:71:
ae:f3:37:07:35:18:a6:b9:9a:d9:cc:44:f8:19:36:
92:c4:5b:02:3c:0e:24:ec:8a:3c:2c:38:8c:85:b0:
8e:0b:9a:b4:0f:a4:e8:69:af:ca:70:1e:35:64:af:
b6:10:fb:e6:4d:01:76:52:81:d7:f6:91:68:b0:ae:
3c:5d:66:7c:f7:1c:b3:10:6d:28:6e:d6:d0:a7:ac:
6b:14:91:a5:91:1c:d0:30:9d:00:77:26:ae:0b:e5:
84:9c:cc:94:bf:41:37:c3:59:e0:67:ed:bc:4e:e3:
e2:df:85:1e:47:7f:d3:ce:d9:b7:2b:c8:16:04:68:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:5A:3F:34:EC:A0:89:B1:92:DA:15:F6:A0:30:41:63:D5:01:FF
X509v3 Authority Key Identifier:
keyid:68:EE:8E:7E:42:05:39:53:9C:4E:E8:93:3A:BD:38:C0:24:E3:BD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO6OfkIFOVOcTuiTOr04wCTjvVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:63:cd:d2:e4:9d:80:c8:5a:fa:2b:f5:32:b2:4d:02:ac:78:
96:64:a8:02:e4:b1:48:f6:82:60:6d:e6:1a:b6:c2:01:9d:eb:
32:75:5e:d4:55:0e:84:a0:23:1f:6b:b3:50:b9:f3:94:67:1b:
a6:7e:69:dd:c6:1e:ae:80:05:6d:4c:fa:79:16:1a:9f:82:be:
16:db:00:b9:d4:26:09:2b:1b:31:7d:63:4d:d1:60:59:d6:fa:
d6:6e:2c:00:09:57:e7:d0:f9:5c:7c:4a:fe:89:84:7b:cc:d9:
eb:ac:60:cf:46:ba:51:68:2d:61:23:1f:ce:81:0b:16:f0:4f:
02:d7:8d:b6:6f:0d:28:96:35:e2:1a:20:57:01:5c:d6:ae:97:
12:ab:48:e7:8d:08:a6:7e:f0:a5:dc:2e:59:5e:b1:2c:b0:67:
03:22:42:c0:ac:c6:16:fb:25:b0:5c:bb:5b:c5:f8:91:9c:06:
eb:c3:76:bf:8b:64:ed:8e:05:85:3a:31:9d:9a:c4:34:57:6d:
9b:c1:95:61:7e:16:25:b5:47:00:d0:41:99:07:94:83:6b:49:
2c:3c:98:30:86:27:81:3a:21:0b:a7:7f:46:ee:e3:9a:bb:5a:
5a:4c:d7:87:cf:4f:13:5e:83:bd:e3:46:d5:30:f4:4a:e5:e6:
4f:c5:eb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:02 2025 by rpki-client on console.sobornost.net