Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
File: M_NfwrXUmCjCbgfKYpwBLMESCrY.mft (raw, json)
Hash identifier: GZgUuQ6jqmq09lbgmNaUc4oC6Yvkxjm6mWmNiLxPBnk=
Subject key identifier: B8:61:B2:E0:2E:5C:60:B8:C5:0E:40:C7:46:26:2A:5B:D3:5F:DA:10
Authority key identifier: 33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
Certificate issuer: /CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Certificate serial: 0193FA0AC44920288FC782A29FEF9A3A35E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
Manifest number: 021B
Signing time: Tue 24 Dec 2024 19:00:29 +0000
Manifest this update: Tue 24 Dec 2024 19:00:29 +0000
Manifest next update: Wed 25 Dec 2024 19:00:29 +0000
Files and hashes: 1: M_NfwrXUmCjCbgfKYpwBLMESCrY.crl (hash: 3OBXcj7i7MExGrFWmRkB7ty7e2FBP2IX+pCCux3MzYk=)
2: _mLWscYmuc-MJUJJCSOGafkMJIM.roa (hash: +LfsYWpmCqahSkFoMT2QruOjUsA7i4js7QXm54pT4oQ=)
3: g08iHmm6sXlXjDUy0PY4H34qkAE.roa (hash: 9lYva97NwegnjQ/qFMMK53KMc2IK/aUtfkDXS/0P7Gk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fa:0a:c4:49:20:28:8f:c7:82:a2:9f:ef:9a:3a:35:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f35fc2b5d49828c26e07ca629c012cc1120ab6
Validity
Not Before: Dec 24 19:00:29 2024 GMT
Not After : Dec 25 19:00:29 2024 GMT
Subject: CN=b861b2e02e5c60b8c50e40c746262a5bd35fda10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:02:a6:20:04:a7:2d:c7:eb:62:92:be:b1:
18:ca:74:8c:47:6e:7b:7a:28:7f:51:68:34:bd:cc:
19:23:78:e6:02:d5:76:6f:ba:1c:ec:2d:00:3d:05:
ab:05:36:13:ed:14:80:55:19:56:4e:3a:2a:a3:03:
01:7e:4b:03:50:55:c2:e5:74:8a:f9:c3:8c:a3:d5:
f0:b3:79:62:21:c4:73:8c:6f:eb:2e:98:14:62:5a:
69:70:06:76:d5:d7:14:ed:cc:c0:05:85:1d:58:3c:
a6:1f:e2:f8:fa:46:a2:7c:81:eb:23:5b:f6:5b:92:
63:bb:a2:43:80:fe:f9:23:94:b7:51:6e:7e:54:82:
cc:b1:1e:31:2c:f1:3f:38:b1:20:31:d3:68:43:b6:
72:bf:01:fd:c3:df:2e:6f:ee:99:ca:aa:f4:58:89:
53:19:39:8f:de:ff:82:3d:38:9b:7e:be:57:8d:1e:
2c:62:4c:87:b0:81:82:ad:97:2e:c1:bc:51:0e:a4:
f3:1d:20:d3:90:c1:80:bf:1a:80:05:39:ed:1f:0a:
e3:e3:f0:15:65:87:14:cc:fa:ba:ee:2c:2f:7e:d9:
31:cc:88:06:61:81:09:b5:b9:10:76:ee:6e:0c:f9:
f6:24:f1:95:26:dd:35:96:44:2d:ce:0c:b7:15:ec:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:61:B2:E0:2E:5C:60:B8:C5:0E:40:C7:46:26:2A:5B:D3:5F:DA:10
X509v3 Authority Key Identifier:
keyid:33:F3:5F:C2:B5:D4:98:28:C2:6E:07:CA:62:9C:01:2C:C1:12:0A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_NfwrXUmCjCbgfKYpwBLMESCrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/653fc6-6f78-45f4-a4dc-f04dd817cbf9/1/M_NfwrXUmCjCbgfKYpwBLMESCrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3d:4f:83:c0:59:fd:ca:e6:0b:a1:11:2a:38:2d:0d:cc:b1:
44:5b:4d:9e:c6:9a:f7:b3:7f:2d:1e:f8:4b:1e:ce:27:22:e2:
5a:19:8c:8c:3d:79:4e:99:92:64:8a:08:bd:70:e3:e3:64:80:
29:9c:58:99:a0:10:f3:ff:05:8c:af:2f:ec:5d:7c:9f:e9:04:
d4:84:49:42:14:df:aa:f3:4c:03:b0:3b:32:ee:a2:ed:66:3b:
4f:14:f5:47:3e:d1:1d:23:2d:6a:3a:70:d8:b5:d9:5c:14:33:
ae:f6:6e:b2:1b:58:40:74:db:d4:94:b9:d4:8c:5f:e7:da:f2:
12:45:76:32:b3:a1:d5:a5:96:4f:79:90:dc:ef:1c:81:53:d0:
5e:a2:4e:82:73:5b:04:34:82:57:14:53:e6:eb:16:51:20:ff:
06:b1:cf:e2:02:c0:6c:11:44:c4:7f:5e:ef:1c:6c:1e:34:c7:
0c:90:6d:57:40:50:22:b8:c3:e5:d3:92:89:eb:b7:18:25:98:
15:ff:f2:70:b8:44:b0:41:db:0d:73:c5:18:8b:78:dd:1f:0f:
47:da:d9:74:0f:48:0e:35:64:35:31:08:f0:3d:5a:95:f2:e7:
ed:e6:8a:2e:f7:f9:86:16:02:9f:40:35:39:ad:4b:e5:90:10:
16:63:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:34 2024 by rpki-client on console.sobornost.net