Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
File: jnqSzEub2N43j34iGKYlF9msVrw.mft (raw, json)
Hash identifier: LStIafVhiA4p+qiSB+z8Edi5cDPcbXmmB6ZFwLUrOd8=
Subject key identifier: A4:D5:04:CB:F1:DE:13:D9:FF:76:1C:62:8D:D1:83:84:03:5B:40:69
Authority key identifier: 8E:7A:92:CC:4B:9B:D8:DE:37:8F:7E:22:18:A6:25:17:D9:AC:56:BC
Certificate issuer: /CN=8e7a92cc4b9bd8de378f7e2218a62517d9ac56bc
Certificate serial: 0193F9D3F2940F4F78C574920192F8EF36ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnqSzEub2N43j34iGKYlF9msVrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
Manifest number: 0F6A
Signing time: Tue 24 Dec 2024 18:00:37 +0000
Manifest this update: Tue 24 Dec 2024 18:00:37 +0000
Manifest next update: Wed 25 Dec 2024 18:00:37 +0000
Files and hashes: 1: S25kZ6al-ctwb8BPTOUFZUwkye0.roa (hash: yeFPo6DxiHCXYF9YQ1UuN4S//oeWU2z9m/NapFi5Irg=)
2: jnqSzEub2N43j34iGKYlF9msVrw.crl (hash: PDfH8qnG9bcNm63/7V4ejCu81vrYPyrelI0MdhCC5bw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:d3:f2:94:0f:4f:78:c5:74:92:01:92:f8:ef:36:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7a92cc4b9bd8de378f7e2218a62517d9ac56bc
Validity
Not Before: Dec 24 18:00:37 2024 GMT
Not After : Dec 25 18:00:37 2024 GMT
Subject: CN=a4d504cbf1de13d9ff761c628dd18384035b4069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:90:60:ce:8d:0f:64:64:67:6b:0c:c7:5c:
06:fb:1a:86:de:a5:be:82:cf:ba:11:c2:69:b8:5f:
b9:75:78:f7:c7:18:fd:0c:00:c5:79:d6:7b:ed:f1:
ba:e9:aa:c0:f5:0f:a2:a9:04:b6:64:45:c3:e3:0d:
57:40:7f:d6:f8:1d:22:ef:e4:3d:f6:f0:3e:9c:46:
04:4f:8a:dd:8c:63:fe:8d:10:74:3a:66:e9:29:43:
89:69:bf:4d:5d:ba:3b:8a:68:a6:f0:99:38:db:b3:
1d:35:11:12:92:96:79:07:20:1a:15:e3:81:1c:26:
b9:ed:8a:7c:0b:95:09:32:ea:6a:f6:6d:75:3f:35:
ff:db:eb:99:48:ce:a2:e2:b7:3d:db:b7:35:97:29:
f1:83:77:72:e6:8a:a1:2e:ab:32:76:6f:04:b1:e4:
ce:a4:cf:71:8e:ce:f4:f2:1a:57:24:a5:bf:55:fc:
b0:f7:1d:c7:88:94:68:f6:41:30:57:c4:7b:62:16:
07:72:c8:22:60:0e:73:a3:ae:5b:98:14:71:7e:3c:
06:e2:3b:20:f5:18:78:62:4a:15:f4:4e:7b:cb:b1:
b3:f5:8e:4b:32:09:00:5f:1f:70:e4:ca:0d:79:62:
af:91:47:ca:b4:c9:de:38:85:7e:94:f8:b3:dc:22:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D5:04:CB:F1:DE:13:D9:FF:76:1C:62:8D:D1:83:84:03:5B:40:69
X509v3 Authority Key Identifier:
keyid:8E:7A:92:CC:4B:9B:D8:DE:37:8F:7E:22:18:A6:25:17:D9:AC:56:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnqSzEub2N43j34iGKYlF9msVrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f59aa0-1fb3-4dda-9e5e-43202c7a5001/1/jnqSzEub2N43j34iGKYlF9msVrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:db:1e:53:19:9c:65:56:43:56:b6:ac:9a:08:a0:ad:04:74:
17:c7:a2:bf:bb:b8:fd:22:83:52:24:3b:e9:57:0f:67:19:86:
7e:a4:74:71:4b:d5:cf:36:13:64:be:cc:bb:67:a2:5a:22:9a:
fb:04:5b:ad:03:fa:93:32:00:dd:33:b6:ed:74:53:68:29:24:
8b:dd:d7:7b:1c:9f:b5:cb:33:02:a3:4a:c3:a6:f2:5c:c7:fc:
94:8f:f2:98:23:69:19:f1:03:39:96:6e:6f:36:73:b3:c4:e1:
5f:8c:39:e1:d5:34:8f:95:fa:25:5d:ef:73:da:0e:9a:d9:aa:
16:76:fd:7d:23:bf:89:af:95:f0:fb:4d:b8:e1:6c:ad:83:9e:
ce:10:66:2c:98:c6:ba:0f:08:33:6e:ce:50:c3:7a:16:8d:80:
62:45:55:6f:1f:1e:25:2a:64:48:f0:79:b4:06:61:88:49:90:
29:c5:5c:70:79:65:f5:c3:94:00:d0:df:aa:f3:b0:7f:d2:14:
8d:c9:5c:2b:dd:c3:be:a6:60:0c:c1:2d:75:5b:66:ad:f2:94:
27:e7:dc:21:d2:80:07:62:44:5a:e0:43:1d:a4:fb:68:6d:3e:
7b:64:90:5d:58:ff:94:70:85:b4:79:bd:e6:c7:3b:46:53:98:
65:6d:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:37 2024 by rpki-client on console.sobornost.net