Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c89bf-c81e-413f-a2d4-a05560601ac2/1/S5k5WNR9quNJ7sb9LrooNUN35dQ.mft
File: S5k5WNR9quNJ7sb9LrooNUN35dQ.mft (raw, json)
Hash identifier: 5Ia1pLfppMe219Kf0UomFJxXRsN0NVJacbELpfvOa/E=
Subject key identifier: 81:10:7C:8D:35:60:34:05:A5:F8:66:1D:3E:84:BC:7C:DD:CA:B9:E1
Authority key identifier: 4B:99:39:58:D4:7D:AA:E3:49:EE:C6:FD:2E:BA:28:35:43:77:E5:D4
Certificate issuer: /CN=4b993958d47daae349eec6fd2eba28354377e5d4
Certificate serial: 018DE8B972A88C9C50D561169F7C01F27C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5k5WNR9quNJ7sb9LrooNUN35dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c89bf-c81e-413f-a2d4-a05560601ac2/1/S5k5WNR9quNJ7sb9LrooNUN35dQ.mft
Manifest number: 10A4
Signing time: Tue 27 Feb 2024 04:01:24 +0000
Manifest this update: Tue 27 Feb 2024 04:01:24 +0000
Manifest next update: Wed 28 Feb 2024 04:01:24 +0000
Files and hashes: 1: 4285rdG6PZ1Yvzn1_kDU4k0YbF4.roa (hash: 4aoU9vgGjtCopezu+YYMssMGMAFt/5UWfo9W6gdfHHo=)
2: S5k5WNR9quNJ7sb9LrooNUN35dQ.crl (hash: t3zS4JxWqOI1387iSmkfHTDMjjzNk7tXg6aWYOyl8LE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e8:b9:72:a8:8c:9c:50:d5:61:16:9f:7c:01:f2:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b993958d47daae349eec6fd2eba28354377e5d4
Validity
Not Before: Feb 27 04:01:24 2024 GMT
Not After : Feb 28 04:01:24 2024 GMT
Subject: CN=81107c8d35603405a5f8661d3e84bc7cddcab9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:b4:f5:7b:96:6b:aa:79:2b:75:df:6f:22:
dc:3b:1b:20:c7:4b:66:5d:a6:15:f0:fe:b1:83:d0:
67:fe:83:13:4b:31:61:a9:48:7a:30:50:8e:0d:2b:
4a:d7:40:bd:19:3a:a4:a1:1e:2d:c8:34:cf:f5:93:
f7:d3:6a:c1:68:a2:d8:1a:55:e0:60:77:90:09:35:
b1:af:75:be:fb:6e:6b:cf:a6:cd:4f:5f:f0:41:ea:
30:ea:ef:6e:de:f6:00:bf:94:62:61:40:5e:01:6b:
be:2e:82:01:75:46:55:a3:aa:d4:a4:20:cf:2f:9e:
f1:3a:4e:2d:39:be:a0:ea:0e:d7:45:1e:4d:62:62:
6c:90:63:67:77:6a:da:64:ff:eb:23:b2:bb:ab:b5:
54:0c:c7:93:ee:ef:0f:d9:05:32:df:76:0d:1b:aa:
19:c8:2c:19:10:80:82:cf:da:dd:b2:e6:4c:a1:02:
32:87:2a:6e:c9:ed:9a:15:6d:d2:82:97:91:87:78:
cc:7e:f0:9d:aa:13:3e:70:1e:94:3c:e6:52:22:d5:
27:c8:c6:2b:1f:5d:72:5d:f6:a4:c6:d8:41:fe:ee:
35:c2:07:18:7f:13:83:57:ae:62:b0:5f:53:0b:f9:
e6:9e:37:5c:8a:7a:88:45:e1:7e:81:4e:a0:87:67:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:7C:8D:35:60:34:05:A5:F8:66:1D:3E:84:BC:7C:DD:CA:B9:E1
X509v3 Authority Key Identifier:
keyid:4B:99:39:58:D4:7D:AA:E3:49:EE:C6:FD:2E:BA:28:35:43:77:E5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5k5WNR9quNJ7sb9LrooNUN35dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c89bf-c81e-413f-a2d4-a05560601ac2/1/S5k5WNR9quNJ7sb9LrooNUN35dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c89bf-c81e-413f-a2d4-a05560601ac2/1/S5k5WNR9quNJ7sb9LrooNUN35dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9c:42:e7:00:cf:f4:03:0a:c8:d8:c2:7f:c9:94:f0:19:e7:
a8:6c:de:7a:47:2c:23:30:a5:d3:2b:5e:d6:06:8b:2d:8f:50:
af:83:dd:5f:b9:12:f4:aa:49:35:86:55:94:9d:a5:e9:07:7c:
2c:8c:2e:13:33:10:c7:1c:a7:a6:d7:a8:8f:1b:5a:d8:4b:24:
fc:5e:ab:78:81:e7:81:78:59:16:9f:38:cb:33:8f:d1:c5:13:
c2:f3:62:f9:28:06:ac:0b:e6:a8:fb:4f:49:22:be:d4:c4:02:
a6:f4:c9:59:e4:a5:d8:ec:c9:2d:bb:5f:17:09:ff:13:9a:4e:
37:c6:b4:6b:1d:1d:cd:c5:4b:3b:64:8a:4f:ac:ff:d4:fe:a5:
dd:e1:44:47:c1:59:ac:88:c9:28:03:26:7b:ad:20:43:c3:73:
e6:8f:d0:d6:e8:e8:37:23:f0:25:4e:c0:29:37:ab:44:c8:16:
98:f5:70:06:84:52:cf:a2:f8:6b:ab:ab:38:9a:ca:59:98:c3:
3d:c1:27:0f:71:8b:6a:30:e2:b2:23:17:a1:22:f0:92:26:75:
d0:8e:58:a8:02:f2:bc:4d:dd:a7:99:4b:16:8d:f8:70:e1:df:
e1:49:f5:57:c8:6a:37:1f:30:ec:18:7e:02:6e:c6:cc:ea:dc:
21:6e:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 16:06:17 2024 by rpki-client on console.sobornost.net