Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft
File: y_TOjMrJljtVr0-8MzMtWVhhx1I.mft (raw, json)
Hash identifier: lgd+gnHaca7ugXBKxXa00XpXW/RboC2nFPHvjJtr+NE=
Subject key identifier: 5C:3B:8F:46:36:44:AB:B8:2E:BC:D3:3C:07:50:EF:60:FD:72:F7:13
Authority key identifier: CB:F4:CE:8C:CA:C9:96:3B:55:AF:4F:BC:33:33:2D:59:58:61:C7:52
Certificate issuer: /CN=cbf4ce8ccac9963b55af4fbc33332d595861c752
Certificate serial: 0192AFCF6F179761E553A9DB6C0088576435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_TOjMrJljtVr0-8MzMtWVhhx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft
Manifest number: 0247
Signing time: Mon 21 Oct 2024 16:01:00 +0000
Manifest this update: Mon 21 Oct 2024 16:01:00 +0000
Manifest next update: Tue 22 Oct 2024 16:01:00 +0000
Files and hashes: 1: eKB1a00gUrTeUxis91hsgoFaO-U.roa (hash: Xn18j2CYlfE/zq0D2BbdrrqB5JsL5Hrhdqavtz96e1Q=)
2: y_TOjMrJljtVr0-8MzMtWVhhx1I.crl (hash: GVZHRH+HFr7wc/FE8pVmuT93PZzX4Ex3ThPRdGbC7JA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:cf:6f:17:97:61:e5:53:a9:db:6c:00:88:57:64:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf4ce8ccac9963b55af4fbc33332d595861c752
Validity
Not Before: Oct 21 16:01:00 2024 GMT
Not After : Oct 22 16:01:00 2024 GMT
Subject: CN=5c3b8f463644abb82ebcd33c0750ef60fd72f713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:69:d7:1c:bf:a2:2e:28:05:f4:f0:be:11:
6b:dc:32:1a:82:4c:da:9c:f4:2c:84:98:10:1c:a5:
15:3a:83:90:df:3a:1d:03:6f:a1:2b:95:18:93:3f:
5e:2f:e8:6c:d0:88:71:f4:1a:eb:50:98:1e:48:00:
74:ae:95:73:07:7d:42:74:14:38:38:bb:27:f2:05:
2a:f3:33:f9:32:e1:5f:8f:9b:3d:0c:4e:05:43:88:
21:6f:5f:8e:3e:62:2b:b2:db:38:8a:01:3f:a9:9d:
86:bc:77:b3:4e:21:c2:22:00:48:51:95:b7:dd:38:
cb:43:2f:40:79:58:3e:28:5e:62:f6:f2:d8:74:ee:
89:55:dd:59:6d:b6:47:f3:f2:26:4f:de:d2:43:50:
8b:8c:ef:ee:7f:71:4b:85:30:ca:16:e3:24:c3:36:
6e:1c:fc:e4:4a:df:57:0b:84:8f:0a:11:34:6b:e6:
4d:75:f1:d0:a9:2c:7a:1c:f4:9f:2b:42:c0:12:e4:
68:56:ab:ac:57:ae:60:01:e5:b5:66:23:d5:be:25:
75:a9:c1:b7:31:d0:9c:c7:11:88:da:37:7b:f2:93:
32:73:69:9e:ae:be:c8:a3:4d:d6:68:2b:03:07:44:
09:aa:93:63:d4:08:01:ad:8f:d0:8f:cb:c3:25:b6:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:8F:46:36:44:AB:B8:2E:BC:D3:3C:07:50:EF:60:FD:72:F7:13
X509v3 Authority Key Identifier:
keyid:CB:F4:CE:8C:CA:C9:96:3B:55:AF:4F:BC:33:33:2D:59:58:61:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_TOjMrJljtVr0-8MzMtWVhhx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:16:68:dc:7c:e9:33:eb:06:60:2c:bb:e3:ef:f3:5a:03:55:
eb:1e:58:3b:c6:72:00:2a:90:05:e5:58:33:d1:84:f5:e6:91:
22:2b:94:91:17:dd:53:d7:71:58:09:2b:ed:4a:b1:1f:8f:23:
e0:06:5f:5d:f8:8a:9e:2a:07:e2:e7:23:4d:bb:6d:f2:1f:6b:
8f:f8:c5:f1:d0:fd:61:87:81:b7:6f:5f:71:50:eb:ea:c3:f9:
e2:59:f2:5b:3f:26:1f:51:2f:d8:33:84:3c:0c:40:ea:cb:24:
62:22:8e:eb:c3:d7:8d:c8:b2:81:75:4e:93:50:73:74:7f:cc:
3e:22:be:33:ee:a6:8d:7f:39:0b:c2:63:c0:06:06:f7:48:2a:
7b:08:ef:e5:f3:4c:86:46:2a:4a:67:92:4f:8f:49:df:ff:ac:
f7:a5:11:8a:05:4d:49:c6:c7:f1:e8:20:a8:3f:b2:0e:82:00:
bf:ff:e2:a6:61:16:98:f9:15:80:75:9a:64:c2:75:a0:b1:41:
c6:35:9b:f7:a4:72:27:60:22:d8:7b:85:4a:fd:16:4c:b0:c9:
c1:13:53:18:6b:95:0c:87:19:57:d9:f9:bc:c3:21:56:b2:1b:
a2:9d:e0:0a:3a:7c:4b:e4:d0:b7:ad:13:bb:5c:5c:d2:c1:1c:
ad:8f:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:31 2024 by rpki-client on console.sobornost.net