Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.mft
File: zQbRm7PqWdFnY-9e8LxV2-7c54U.mft (raw, json)
Hash identifier: 7DnFJilRrKv1qyNyPnaZTYn2PnRYRnFDVC4rtXdM3Tc=
Subject key identifier: 9A:67:DF:B5:CB:FC:EE:C4:E3:9F:56:0B:96:52:25:2E:BA:3C:D9:AA
Authority key identifier: CD:06:D1:9B:B3:EA:59:D1:67:63:EF:5E:F0:BC:55:DB:EE:DC:E7:85
Certificate issuer: /CN=cd06d19bb3ea59d16763ef5ef0bc55dbeedce785
Certificate serial: 018CED066A71BEB12B9BEEB1261A74751CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQbRm7PqWdFnY-9e8LxV2-7c54U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.mft
Manifest number: 0F7F
Signing time: Tue 09 Jan 2024 07:01:09 +0000
Manifest this update: Tue 09 Jan 2024 07:01:09 +0000
Manifest next update: Wed 10 Jan 2024 07:01:09 +0000
Files and hashes: 1: zQbRm7PqWdFnY-9e8LxV2-7c54U.crl (hash: FPCbQfVC466g8l1VafbUcRSOQNOf70Bv739T7pQsoZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:06:6a:71:be:b1:2b:9b:ee:b1:26:1a:74:75:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd06d19bb3ea59d16763ef5ef0bc55dbeedce785
Validity
Not Before: Jan 9 07:01:09 2024 GMT
Not After : Jan 10 07:01:09 2024 GMT
Subject: CN=9a67dfb5cbfceec4e39f560b9652252eba3cd9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:78:a4:bf:0f:1e:4a:af:3d:ee:a7:22:e3:
eb:91:9f:a1:9b:7c:7f:15:45:49:31:dc:72:56:74:
c7:9f:7b:06:60:69:00:99:12:71:26:ab:a6:82:fd:
60:83:14:2d:8b:fe:2a:e0:05:2f:dc:a4:21:74:f2:
99:c8:50:3d:72:67:1b:02:27:c0:db:12:af:8a:65:
e6:24:03:97:ea:a0:9d:09:e9:61:05:19:49:21:b1:
d3:13:63:99:87:09:c3:42:a7:da:aa:c9:8b:7c:e4:
d9:cf:0b:0e:f6:16:d7:a9:c6:93:b7:8d:6d:1b:5e:
68:d6:a7:34:98:63:a7:00:ee:e2:98:58:8a:d9:4a:
b1:d8:aa:ea:1f:ba:88:98:28:03:09:f6:e6:63:c4:
75:71:64:f2:68:3a:42:a3:1d:10:c1:ee:38:c8:18:
a6:7b:e6:8c:60:51:84:bd:e7:ec:fb:a9:00:f2:17:
cc:b7:40:8d:16:f7:62:e0:35:3a:a7:96:d3:4f:0f:
58:dc:9f:74:43:b3:10:d2:62:9f:34:ba:9b:c7:d2:
fa:0f:1a:6b:c6:67:e5:ee:ba:2d:37:57:69:d7:3a:
52:f6:51:15:0a:7b:f2:39:20:60:cd:0d:76:95:ea:
ed:c8:8b:41:e5:12:bb:5f:f3:a6:28:ae:f2:38:88:
4b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:67:DF:B5:CB:FC:EE:C4:E3:9F:56:0B:96:52:25:2E:BA:3C:D9:AA
X509v3 Authority Key Identifier:
keyid:CD:06:D1:9B:B3:EA:59:D1:67:63:EF:5E:F0:BC:55:DB:EE:DC:E7:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQbRm7PqWdFnY-9e8LxV2-7c54U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/945e36-973a-461d-8f3f-3cd1a573eab2/1/zQbRm7PqWdFnY-9e8LxV2-7c54U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cc:90:07:17:c7:e7:e4:5f:ce:47:b5:54:e7:15:26:c0:aa:
8d:0e:d7:e6:f3:6a:75:97:8f:eb:05:10:0f:1e:d1:7a:cd:a4:
1a:cc:38:dc:f5:d9:ed:05:f9:62:54:65:68:34:a4:2c:53:b7:
58:a4:ef:5c:58:d5:ab:a6:0d:f4:cf:31:6f:a7:4a:fe:4f:88:
84:9f:67:19:d8:60:65:19:b3:a7:70:25:57:c0:f9:00:4a:7a:
a4:02:d1:52:b3:a4:92:4e:94:cd:a3:71:b6:51:c2:31:2c:4d:
01:71:aa:cb:1e:7d:f4:56:a1:d9:d2:08:ba:1e:a7:71:ba:3b:
48:72:d9:c7:c3:4c:14:96:72:0e:b2:d6:ae:9b:64:6c:17:e2:
60:1c:8d:b7:19:d7:07:42:04:b4:8a:1f:2e:b3:ea:f1:c7:3f:
fd:17:de:fa:5d:38:a0:ee:49:e0:b5:21:fd:8b:9b:03:2e:0d:
46:24:b6:cf:56:3e:0e:36:2c:b2:7e:36:e2:a9:e9:8d:c2:2f:
a2:c5:7c:48:95:82:08:fd:b0:80:a2:18:cd:d0:ac:30:0c:5d:
2d:b3:f9:cb:65:14:9b:8c:46:12:8c:8d:3a:6a:6a:96:5b:ed:
23:a5:0f:f0:3a:18:5e:9b:8d:61:de:05:ac:b1:ee:2b:f5:0b:
25:b2:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:11 2024 by rpki-client on console.sobornost.net