Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
File: Cl0ds8h0vigpimiBLKoksbQ-A8k.mft (raw, json)
Hash identifier: TVdXevRgU16ECp+LCBGnEObuhjez1dae8hGVhJFqDs0=
Subject key identifier: E9:00:9F:68:D0:23:DC:A7:52:24:C5:C3:36:03:5C:82:FB:66:D1:98
Authority key identifier: 0A:5D:1D:B3:C8:74:BE:28:29:8A:68:81:2C:AA:24:B1:B4:3E:03:C9
Certificate issuer: /CN=0a5d1db3c874be28298a68812caa24b1b43e03c9
Certificate serial: 018A811DA06A1553C1CCEA6CC9CD63F3CA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl0ds8h0vigpimiBLKoksbQ-A8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
Manifest number: 065E
Signing time: Sun 10 Sep 2023 22:01:56 +0000
Manifest this update: Sun 10 Sep 2023 22:01:56 +0000
Manifest next update: Mon 11 Sep 2023 22:01:56 +0000
Files and hashes: 1: 7NJaRX6O6v5HeUz3LPaRXyzaQuY.roa (hash: c1qDX0iR44/Co9gtVWzZOyQAOAHOlkIoK3KdqhLwRTs=)
2: Cl0ds8h0vigpimiBLKoksbQ-A8k.crl (hash: n2rekSxA1OSb/o4snyvNuK0T9jHxs8V3eFHszfn/4+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:81:1d:a0:6a:15:53:c1:cc:ea:6c:c9:cd:63:f3:ca:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5d1db3c874be28298a68812caa24b1b43e03c9
Validity
Not Before: Sep 10 22:01:56 2023 GMT
Not After : Sep 11 22:01:56 2023 GMT
Subject: CN=e9009f68d023dca75224c5c336035c82fb66d198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:f1:5e:cf:4b:5d:05:5f:70:c2:b0:a1:75:
bd:cd:c4:38:c4:b5:54:32:d5:78:d7:54:9d:55:fc:
cb:66:a9:7a:09:20:d2:74:1a:72:33:aa:da:77:62:
00:8a:59:39:f8:12:ed:e0:ce:2f:c1:85:fa:95:fc:
37:6b:cc:71:30:58:88:78:d2:fb:fb:5f:2a:57:ce:
f6:9d:55:75:fe:4f:17:e9:4f:b3:8e:f1:9e:5a:99:
79:a1:87:a2:d1:89:5c:43:78:e3:17:4b:9f:01:99:
87:0a:4e:6f:a2:81:69:c7:c0:ee:98:33:91:aa:4e:
24:2a:a6:42:ce:02:b3:cd:92:eb:1b:58:8b:0d:f7:
c9:6e:30:3a:ef:e5:6d:d3:96:6e:c4:a2:b6:a8:c2:
a4:48:ec:22:44:df:4c:2b:e6:bb:be:4e:46:3b:bb:
42:f8:b5:13:77:03:74:d7:91:c0:c6:5d:2a:c6:ea:
ee:4b:6b:78:f2:eb:33:5d:a0:2c:33:7b:07:54:24:
67:4b:fb:4e:79:df:6e:19:80:de:58:f0:67:c6:8f:
53:67:fe:15:91:9c:c7:3f:25:6e:8d:bf:f1:23:b4:
8b:3f:48:a8:db:94:f2:a0:3e:e7:30:dc:f0:55:08:
f8:e3:47:ad:40:ca:0a:48:23:bd:19:e3:49:86:57:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:9F:68:D0:23:DC:A7:52:24:C5:C3:36:03:5C:82:FB:66:D1:98
X509v3 Authority Key Identifier:
keyid:0A:5D:1D:B3:C8:74:BE:28:29:8A:68:81:2C:AA:24:B1:B4:3E:03:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl0ds8h0vigpimiBLKoksbQ-A8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/343037-4550-469d-82fd-4f5588947a4a/1/Cl0ds8h0vigpimiBLKoksbQ-A8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b7:bd:59:3f:bf:b7:b3:2a:ce:d2:48:8b:3e:0d:50:af:0a:
0d:30:33:a7:f5:e3:2f:b2:c8:c0:97:7d:6b:4e:00:d9:3f:05:
82:03:8a:f7:e0:3c:df:5b:85:15:a0:86:f1:d2:45:fc:db:98:
1a:f4:aa:68:83:8d:ae:23:9f:5c:cd:41:39:30:cb:16:e8:a1:
13:0b:50:38:43:9d:b6:5b:70:86:4f:3f:2e:40:e9:65:92:ed:
bf:55:0e:f7:09:cf:7a:4f:a8:0c:2b:5f:9b:eb:a3:2e:6d:35:
cf:09:f5:97:d5:b5:55:6b:1a:a4:34:e2:68:a0:e4:38:29:00:
38:25:1d:8a:29:c3:05:ad:c9:13:3d:61:aa:62:40:31:37:82:
ed:60:9e:f9:ff:f8:d5:84:cd:fc:1e:3f:d5:f8:1a:1a:81:d4:
5b:da:af:2b:3b:e3:0a:7d:81:1d:b3:45:71:b2:b2:a9:bb:0d:
04:1a:1a:8a:1c:6f:e5:6d:a2:49:e9:f3:c9:f0:d4:12:13:d4:
e8:ff:68:ce:a5:45:1c:f3:dc:92:48:50:2e:c2:e4:73:a5:5d:
18:16:cd:db:de:0e:cb:e5:d7:7f:e0:c2:4d:fc:d1:cc:ac:76:
2b:5f:e0:d3:10:63:65:79:27:7f:92:bb:13:10:41:fc:42:81:
e9:39:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net