Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7bc217-00b5-4880-a1b7-cfa40b4165b6/1/1UAf5UfJzhOzso9DlzCD06VDM9Q.mft
File: 1UAf5UfJzhOzso9DlzCD06VDM9Q.mft (raw, json)
Hash identifier: WJTH+49E/L1qn5Nisv3wmg3mYcb7gp+AWlpcOREkYhs=
Subject key identifier: 2A:F1:7F:A0:F3:F7:01:99:31:A9:9A:59:11:6A:03:61:E2:84:EF:8E
Authority key identifier: D5:40:1F:E5:47:C9:CE:13:B3:B2:8F:43:97:30:83:D3:A5:43:33:D4
Certificate issuer: /CN=d5401fe547c9ce13b3b28f43973083d3a54333d4
Certificate serial: 019489CF1C75D49023B838DFCB01218C1D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UAf5UfJzhOzso9DlzCD06VDM9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7bc217-00b5-4880-a1b7-cfa40b4165b6/1/1UAf5UfJzhOzso9DlzCD06VDM9Q.mft
Manifest number: 0313
Signing time: Tue 21 Jan 2025 17:00:39 +0000
Manifest this update: Tue 21 Jan 2025 17:00:39 +0000
Manifest next update: Wed 22 Jan 2025 17:00:39 +0000
Files and hashes: 1: 01MVfvHrRUsATo8m1nYCeVS5QFU.roa (hash: Tv7S3KxeeQwbuV2XZ5VmoiWDIoaTYAEsv6ByEbQgcvg=)
2: 1UAf5UfJzhOzso9DlzCD06VDM9Q.crl (hash: Rq6XoeXxY7wlsgTSJ84BUihMq6qebh5xqErbd7AgIk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:89:cf:1c:75:d4:90:23:b8:38:df:cb:01:21:8c:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5401fe547c9ce13b3b28f43973083d3a54333d4
Validity
Not Before: Jan 21 17:00:39 2025 GMT
Not After : Jan 22 17:00:39 2025 GMT
Subject: CN=2af17fa0f3f7019931a99a59116a0361e284ef8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:87:f9:b6:34:14:6a:a2:72:2b:5f:ea:c8:
07:e8:6a:c8:1f:d3:ea:40:b2:dc:0e:9f:64:a0:72:
23:24:de:ee:fb:4f:96:ec:53:2e:60:fa:12:8f:f8:
c1:99:98:e5:f1:e3:69:51:bf:68:88:60:34:65:8d:
4d:87:ba:49:06:34:e5:16:83:7b:a8:61:3d:52:2b:
fa:84:c8:ab:18:b7:1b:e9:b0:45:da:a4:2c:dd:d3:
f0:21:c4:c8:fe:bb:a1:03:70:49:91:80:d5:86:51:
ac:39:ef:e4:1d:fe:9c:38:53:24:df:63:66:4a:ad:
31:a7:bb:31:13:d1:ef:ad:51:2a:aa:ea:a1:86:6d:
f7:73:f1:7f:76:8e:5d:07:99:98:00:e0:d9:fb:dd:
19:12:aa:ec:a7:51:63:69:30:03:4e:52:81:e6:b6:
39:b7:c8:00:90:c7:bc:7e:c2:36:74:61:c9:27:a4:
ab:ef:d4:2f:0f:9a:33:2a:e1:61:a8:e5:3a:a6:d7:
c9:c7:42:dc:7a:c4:9e:5b:71:91:b9:e1:07:f5:a1:
0e:b4:6b:9a:c7:b2:ca:3d:44:4b:a9:da:cf:4c:05:
b1:58:75:76:0a:4f:14:2e:c0:6d:12:c6:96:14:eb:
b9:5f:84:a1:3e:48:f3:38:fd:b9:38:2d:f1:63:5b:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:7F:A0:F3:F7:01:99:31:A9:9A:59:11:6A:03:61:E2:84:EF:8E
X509v3 Authority Key Identifier:
keyid:D5:40:1F:E5:47:C9:CE:13:B3:B2:8F:43:97:30:83:D3:A5:43:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UAf5UfJzhOzso9DlzCD06VDM9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7bc217-00b5-4880-a1b7-cfa40b4165b6/1/1UAf5UfJzhOzso9DlzCD06VDM9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7bc217-00b5-4880-a1b7-cfa40b4165b6/1/1UAf5UfJzhOzso9DlzCD06VDM9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:68:4d:91:48:c1:33:f3:b4:4c:5e:64:68:e6:39:7d:43:df:
40:2a:a2:6f:b9:e4:5d:c7:0f:b1:3b:06:3c:69:e4:9b:17:4f:
27:43:86:6c:8c:19:55:6e:79:5a:da:32:e4:41:9d:5c:77:55:
67:3c:7a:b9:a5:57:b2:43:ff:0a:5d:71:bd:90:b0:08:c0:41:
5b:29:ba:ed:4b:62:8d:80:87:f8:eb:69:47:43:69:60:cb:0c:
e5:6a:c0:9d:a0:95:e1:2d:e4:50:19:67:2a:5c:ca:31:ff:3a:
6e:42:d0:b1:08:57:53:c7:6e:70:ef:84:e7:48:30:a8:7f:2b:
60:aa:b2:0f:56:c7:29:b4:5b:fa:c5:e6:3b:7d:aa:fe:69:51:
94:04:32:4f:e5:6e:f5:b4:57:19:64:5c:0c:99:ff:44:72:ee:
b5:59:b3:b1:b8:53:fd:66:1d:ee:54:61:31:ff:d8:d6:5c:e7:
bd:28:c9:db:b1:43:76:e8:a3:1b:31:16:bb:79:94:80:56:6a:
b9:19:43:b4:0a:5c:c1:0d:c0:17:8d:95:6f:80:1b:e6:62:d2:
51:16:8c:99:cc:44:13:89:d4:36:d0:b7:9b:65:1b:9c:bd:e6:
8d:b8:aa:7a:0e:0b:86:b8:f5:44:35:07:f0:d8:d3:70:b3:a8:
fa:bd:04:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 17:22:20 2025 by rpki-client on console.sobornost.net