Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.mft
File: 2JrgAUoUYnBer34iZC7ZuZh_kTE.mft (raw, json)
Hash identifier: RfDKiAQHdO4cckAjVP75YphEutZmwOJ+4u8kahkT4IU=
Subject key identifier: 97:EC:CD:A9:26:E5:DB:AA:FD:AE:6A:10:6A:04:75:A2:71:DB:E6:0C
Authority key identifier: D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
Certificate issuer: /CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Certificate serial: 018CED3DA17D0C0ED1AA936967C9FF84F165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.mft
Manifest number: 0D34
Signing time: Tue 09 Jan 2024 08:01:28 +0000
Manifest this update: Tue 09 Jan 2024 08:01:28 +0000
Manifest next update: Wed 10 Jan 2024 08:01:28 +0000
Files and hashes: 1: 2JrgAUoUYnBer34iZC7ZuZh_kTE.crl (hash: PXtQElIjwukE84/3Yjysl5GlR9o+nL7fmQ4HH+62hAE=)
2: nDXhWYs4EKdUQv8-JeZybipB-hQ.roa (hash: 5BUgCHGmETVEQNMkTHW+xnrjYNOgf3CBgNS5xxy+E9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:3d:a1:7d:0c:0e:d1:aa:93:69:67:c9:ff:84:f1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Validity
Not Before: Jan 9 08:01:28 2024 GMT
Not After : Jan 10 08:01:28 2024 GMT
Subject: CN=97eccda926e5dbaafdae6a106a0475a271dbe60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:d4:d3:64:35:92:4c:09:b6:30:d3:45:de:
16:bc:ad:a6:c7:a5:e9:b4:0a:63:1b:3c:96:a2:e7:
d0:d9:af:9c:29:25:69:95:26:e7:45:47:83:5b:f3:
52:d9:14:56:be:ff:56:41:2d:42:50:a0:5d:62:26:
b5:0a:bf:d1:5b:8d:57:bd:2a:02:f9:c5:65:8a:06:
51:9e:0d:53:a3:b2:ee:b8:a1:e2:9e:4c:4c:44:a1:
1b:ac:f6:43:a4:01:42:fe:25:d1:7b:9e:f2:ea:b4:
a8:3b:64:34:c1:8c:51:45:7f:44:1f:42:63:0d:5e:
73:3c:39:83:62:8b:32:04:5a:c2:75:c9:bf:bd:08:
c6:5f:cd:5a:0d:ba:22:b0:b1:bd:e3:3b:00:bc:53:
aa:df:49:89:df:51:2f:19:08:4a:53:06:ae:d9:58:
80:5a:f1:43:85:b4:50:1d:c3:84:b0:e9:09:40:97:
59:44:93:41:2e:0b:b1:d0:3f:7c:94:47:57:5a:c5:
71:67:23:1f:0a:f9:d4:32:60:7f:3d:51:46:be:c6:
16:c7:f8:ea:59:78:97:e1:fc:4c:43:f1:6c:91:33:
0b:93:f4:62:97:e2:71:ce:5c:cb:b3:1c:ef:46:a4:
e0:5a:b3:a7:3b:50:e6:67:50:0d:aa:a5:cf:7e:af:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:CD:A9:26:E5:DB:AA:FD:AE:6A:10:6A:04:75:A2:71:DB:E6:0C
X509v3 Authority Key Identifier:
keyid:D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:09:7d:ed:a9:23:3e:1f:74:50:02:61:6d:66:e2:e5:ab:f6:
51:e5:23:9a:6f:8f:80:b5:eb:3c:f0:4c:43:38:cf:44:c4:84:
8d:c7:07:a8:d7:7f:3c:32:9a:46:63:9c:80:4a:db:bb:64:f2:
5f:04:09:76:69:97:58:04:d2:00:eb:fa:97:f5:d9:4d:26:c3:
02:61:bf:72:5f:10:a0:70:8b:fb:68:cf:1a:55:e2:f5:95:6e:
16:6b:5d:d7:8b:25:ea:f6:75:9f:9d:cc:84:ee:20:f5:82:2a:
ee:e3:b5:7f:a3:b5:28:9e:ca:2a:c3:0b:aa:58:1a:b7:2d:0b:
dc:cf:b6:70:de:19:80:8a:88:24:5b:0c:1a:78:b9:6b:5e:d3:
6d:0b:f9:9f:ca:b8:b6:27:15:61:32:64:fc:ea:f7:04:76:02:
58:32:25:01:dd:b9:37:e0:13:4b:28:2e:58:a0:c9:5e:40:e1:
a1:09:e2:ba:29:f5:22:a0:9f:4e:23:96:e5:e5:05:bb:f8:6f:
a4:a3:92:66:ec:f5:a3:c2:b0:22:33:69:54:14:8a:59:16:57:
f0:b4:fc:8d:1b:95:d0:2d:cf:14:5a:e8:a2:f6:66:67:9f:7c:
27:ed:4a:73:05:09:74:63:17:9c:dd:2e:d4:67:9b:37:18:6c:
ba:73:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:05 2024 by rpki-client on console.sobornost.net