Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
File: In2aKDPXQRs1_yA45zADD88vmBM.mft (raw, json)
Hash identifier: 4LAAW5X1PXHksbtK0FQBWAjoDbVSEn8NOc0bV2PwIU8=
Subject key identifier: F5:AF:32:E6:AA:FA:19:ED:FB:8F:44:64:97:C3:5D:3F:39:A7:63:AE
Authority key identifier: 22:7D:9A:28:33:D7:41:1B:35:FF:20:38:E7:30:03:0F:CF:2F:98:13
Certificate issuer: /CN=227d9a2833d7411b35ff2038e730030fcf2f9813
Certificate serial: 01948F637B14D2479A145383C63A34F6E0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
Manifest number: 09DB
Signing time: Wed 22 Jan 2025 19:00:48 +0000
Manifest this update: Wed 22 Jan 2025 19:00:48 +0000
Manifest next update: Thu 23 Jan 2025 19:00:48 +0000
Files and hashes: 1: In2aKDPXQRs1_yA45zADD88vmBM.crl (hash: BmLiGTnxAE3tyz2riGSYv5wLmOCWDQqm1CWQunIQVZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:63:7b:14:d2:47:9a:14:53:83:c6:3a:34:f6:e0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227d9a2833d7411b35ff2038e730030fcf2f9813
Validity
Not Before: Jan 22 19:00:48 2025 GMT
Not After : Jan 23 19:00:48 2025 GMT
Subject: CN=f5af32e6aafa19edfb8f446497c35d3f39a763ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:40:fe:c2:f5:d8:90:c3:10:58:13:cd:38:ed:
0c:9a:c5:46:c8:f7:bc:1e:b9:d5:65:e6:ba:99:ce:
55:38:aa:21:78:15:e9:18:d1:02:6b:0c:39:7e:fe:
09:51:8c:f8:4d:bb:df:78:4d:2a:c5:4e:29:d6:e2:
d4:d0:54:b0:fa:b5:9a:26:e0:dc:f9:5b:62:7e:40:
0f:70:02:94:58:ec:18:29:52:90:e9:54:5f:67:04:
12:11:1b:e5:9d:31:16:78:a3:93:59:0e:7c:a4:c7:
1c:ee:d5:82:9a:5f:fe:7a:a7:8c:b0:87:84:02:45:
f9:19:00:2a:a0:24:d8:f5:1e:99:2c:67:8a:28:ae:
39:2c:a2:c4:ce:2b:01:c9:92:1f:79:cb:7e:0a:0a:
59:77:bd:1f:cf:83:5d:8a:ab:c7:ed:3f:4c:c4:63:
f3:3a:df:d6:24:75:5d:1d:a2:ff:77:af:ac:eb:81:
cd:31:de:ba:22:98:18:91:25:ce:f0:78:b7:b6:5d:
10:9e:91:f8:ed:5f:39:a9:95:32:5e:b2:81:d9:9c:
43:0f:68:37:0b:12:7f:57:99:17:30:06:56:15:9c:
89:51:b4:e4:fc:bb:13:86:64:e9:6a:8a:16:89:93:
20:87:6a:6e:aa:f9:38:8b:9d:5e:bf:ce:30:3a:dd:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AF:32:E6:AA:FA:19:ED:FB:8F:44:64:97:C3:5D:3F:39:A7:63:AE
X509v3 Authority Key Identifier:
keyid:22:7D:9A:28:33:D7:41:1B:35:FF:20:38:E7:30:03:0F:CF:2F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f0:d9:39:32:3d:02:65:1f:4a:76:fe:64:6f:6b:0c:d5:c7:
18:5b:62:c7:dc:03:e7:6e:87:3e:4d:2f:13:a2:24:8e:3a:00:
7e:8b:af:ae:43:4a:7b:32:7f:97:6a:d0:6c:1d:5a:ad:71:7a:
34:9c:c7:b3:c9:d8:dd:b6:79:33:09:58:64:cd:aa:c8:a5:fe:
38:1b:8b:e5:d5:e8:c0:94:f1:14:cd:bc:30:80:9a:b5:78:62:
40:d2:89:c1:86:72:91:7b:cb:df:c8:4b:00:30:56:ee:5a:7d:
20:ce:c4:e0:0b:ec:5a:ae:4e:9a:a1:cd:ab:52:b3:8a:c5:88:
53:5b:0c:a6:2b:41:3b:50:04:8d:c7:52:c5:c0:5c:39:fa:a5:
96:26:e6:04:e6:3f:28:9b:4d:52:6b:20:c5:22:b0:6c:7d:14:
2c:a1:bd:a3:46:6a:81:f9:d6:29:55:90:fc:57:5d:db:29:62:
39:cc:e9:3f:78:e9:84:6a:ce:70:d7:9d:22:04:58:96:15:84:
d7:17:b4:b7:af:13:14:69:b4:26:6f:78:60:24:13:58:ec:3d:
16:17:1e:f3:f8:d6:56:b1:c5:9e:23:63:d7:01:c4:14:d2:7c:
68:4d:6c:36:d3:0c:68:2a:66:ac:34:96:4c:97:48:10:76:bc:
8d:3d:0d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:13 2025 by rpki-client on console.sobornost.net