Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
File: zxCtkS75QqrLTRCt05kDxun7sDo.mft (raw, json)
Hash identifier: rePZAHtGfjqZpDjlAq5GUuS2g67mMkSI49oAAY1Ex+E=
Subject key identifier: B0:57:7C:D6:4A:BD:ED:87:6D:DF:8E:6C:55:FA:C4:85:78:8C:0C:84
Authority key identifier: CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
Certificate issuer: /CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Certificate serial: 0193267805FEAB6BDCB21592A5AB7E4A9FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
Manifest number: 0BB5
Signing time: Wed 13 Nov 2024 17:00:20 +0000
Manifest this update: Wed 13 Nov 2024 17:00:20 +0000
Manifest next update: Thu 14 Nov 2024 17:00:20 +0000
Files and hashes: 1: RufuW3_xCNrkXrItzwSh1-gqEtU.roa (hash: rS3Btv0ZqtLDbIiRa7t0h8uqqwVYVSfQARh6vcBuITQ=)
2: UDU8Pa3uOujL1w0akg2MLry4Qig.roa (hash: KKbTLgoHo1K8c7U1i4ZZNtSs8IVFZkRkKjPhlImrX5Q=)
3: zxCtkS75QqrLTRCt05kDxun7sDo.crl (hash: N1LpMlqelTUVvOOUX2zPX+R5+W0IF/RLw6w2L9AinTU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:78:05:fe:ab:6b:dc:b2:15:92:a5:ab:7e:4a:9f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Validity
Not Before: Nov 13 17:00:20 2024 GMT
Not After : Nov 14 17:00:20 2024 GMT
Subject: CN=b0577cd64abded876ddf8e6c55fac485788c0c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:1d:73:b4:16:16:55:65:db:e3:ba:a3:d9:
d2:68:c4:86:40:c9:ea:15:64:6c:c5:ec:2c:f4:f5:
96:eb:a2:5d:5c:8e:52:5a:bb:aa:07:bd:df:67:7c:
63:0c:ac:2e:17:75:e3:9b:ed:73:0d:39:90:22:4a:
12:35:66:85:29:53:01:b2:09:61:86:36:aa:5c:f5:
40:2a:af:70:af:22:61:76:c2:3f:dc:ed:cb:64:fc:
8b:4e:88:22:f2:14:d6:7c:fe:92:cd:27:5e:b4:d2:
ce:e4:4e:97:79:20:a9:3f:37:8f:cb:4d:b8:59:42:
a6:9f:02:77:84:ab:69:d4:2c:18:b4:5c:43:ee:a6:
45:a0:49:0a:d0:d6:42:d0:4d:49:d8:07:23:df:82:
e2:c5:90:5a:d2:6f:29:41:38:ec:85:53:d6:2d:65:
db:b1:af:e5:6a:a9:7e:7f:13:a8:78:c0:e9:9c:ff:
71:47:10:a9:fb:00:ee:c5:43:91:d8:8f:28:92:ce:
81:b5:f9:b1:0d:03:0b:cf:c4:e5:fe:32:97:1d:69:
67:b6:4b:1e:fb:a8:3d:23:b8:cc:94:60:68:60:b0:
23:98:a3:9a:ed:23:52:90:4c:83:cc:8c:25:7e:a1:
c1:b3:86:34:84:be:d5:5a:c0:a7:14:07:2a:f1:a2:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:57:7C:D6:4A:BD:ED:87:6D:DF:8E:6C:55:FA:C4:85:78:8C:0C:84
X509v3 Authority Key Identifier:
keyid:CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:64:6f:85:d0:78:5f:e0:61:b1:a6:5b:03:de:8a:93:d3:e3:
bb:4c:dc:22:92:fc:63:65:50:4b:39:6b:e3:22:26:ae:10:1c:
93:5e:e0:01:df:f2:e1:bc:59:11:d1:89:b8:e5:af:e3:5a:6a:
53:65:72:09:cd:76:45:0e:5a:20:a4:25:93:15:85:13:91:29:
5a:a1:0b:ef:89:2f:ae:f3:6d:ab:81:5c:fb:f5:71:66:c2:b8:
70:c6:4a:e3:4a:a1:70:b8:28:19:e2:f4:0d:79:d9:d8:51:a5:
a3:c4:84:f7:b8:2f:3c:c3:e2:72:42:d1:83:c4:2c:44:26:dd:
a1:49:66:a4:9b:ae:17:6b:c4:ee:14:39:41:8a:99:7b:a7:52:
fa:64:ee:0c:c5:d9:3b:7a:3c:1a:81:7f:b4:78:3c:47:0a:6c:
47:2b:1d:8b:48:56:49:91:6a:23:30:6d:6d:35:d6:f6:30:b6:
fe:32:2e:41:6f:71:1b:0f:31:a2:59:2f:56:0a:ef:86:27:dd:
b9:da:a5:df:e4:a5:5e:f2:f9:23:21:07:41:c2:01:41:47:3b:
a3:c5:00:3a:56:88:63:54:d7:04:67:ff:b2:64:ce:36:47:47:
28:58:ad:9e:a4:8f:6d:e7:7b:be:d8:63:ab:8d:7a:f8:d1:92:
96:c7:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:49:29 2024 by rpki-client on console.sobornost.net