Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9ee73e-3d08-483f-99e6-638e8c98c110/1/BwWGAmVswbF2KKY2Rlwuibz8DQ4.mft
File: BwWGAmVswbF2KKY2Rlwuibz8DQ4.mft (raw, json)
Hash identifier: aGRyPkJud2z2xS8M671ChORbTKbA4Z2J0YnImHuV/mQ=
Subject key identifier: 88:B3:EA:D0:B7:0B:6D:63:5B:68:35:B3:71:23:94:E5:43:E3:56:99
Authority key identifier: 07:05:86:02:65:6C:C1:B1:76:28:A6:36:46:5C:2E:89:BC:FC:0D:0E
Certificate issuer: /CN=07058602656cc1b17628a636465c2e89bcfc0d0e
Certificate serial: 018CED7420881242BEF72A58268A0A417C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwWGAmVswbF2KKY2Rlwuibz8DQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9ee73e-3d08-483f-99e6-638e8c98c110/1/BwWGAmVswbF2KKY2Rlwuibz8DQ4.mft
Manifest number: 0829
Signing time: Tue 09 Jan 2024 09:00:59 +0000
Manifest this update: Tue 09 Jan 2024 09:00:59 +0000
Manifest next update: Wed 10 Jan 2024 09:00:59 +0000
Files and hashes: 1: BwWGAmVswbF2KKY2Rlwuibz8DQ4.crl (hash: PYnxTliQ4dxIbF2uoq4yE9Yvh8uyCMVr51ecbKsmsfc=)
2: YdF7fEACdYQuJo-HXfYWbepREDA.roa (hash: zo4JoOiIIG24z5O1tcjxRuPmKA3nfj0keDMpt+tyIRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:74:20:88:12:42:be:f7:2a:58:26:8a:0a:41:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07058602656cc1b17628a636465c2e89bcfc0d0e
Validity
Not Before: Jan 9 09:00:59 2024 GMT
Not After : Jan 10 09:00:59 2024 GMT
Subject: CN=88b3ead0b70b6d635b6835b3712394e543e35699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:ed:da:7b:ba:63:56:6a:d8:9b:61:54:87:
ce:b5:76:cb:f0:a7:5a:4c:99:63:f8:ea:0f:15:9c:
fc:fc:3c:58:38:23:c9:a7:37:eb:32:53:76:6f:ee:
b2:76:79:10:3e:89:18:12:af:4c:36:fa:ce:69:c6:
7b:e1:41:54:76:ec:b2:b5:4a:ed:75:e5:93:98:15:
34:2e:ed:54:69:45:ae:b8:65:d7:d9:90:ca:72:4d:
a3:c0:43:55:15:89:57:02:bb:ad:df:0b:86:d6:c8:
f4:2f:b7:73:1d:92:61:73:99:67:d4:d7:2b:01:14:
d7:0a:ea:32:68:e5:67:e6:da:fd:5c:45:32:ba:b2:
8a:bd:29:4a:f1:61:52:10:39:04:20:e3:e3:2b:c1:
52:41:bb:90:f9:2d:60:0c:bb:b6:17:8e:94:4f:ce:
d5:f0:6b:17:67:81:3a:58:06:71:b4:5d:2a:97:a2:
96:f6:00:26:35:4e:75:38:1e:b2:db:ba:f4:bb:85:
d9:0e:22:ab:93:e8:63:99:43:39:f3:a0:e2:d1:aa:
b3:a4:2f:82:54:63:e8:40:f1:cd:1f:41:06:dc:af:
58:94:53:0d:27:a5:18:8b:e9:07:ae:a7:09:0f:99:
05:da:ac:77:12:93:67:f5:1f:ec:4f:68:10:64:45:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:EA:D0:B7:0B:6D:63:5B:68:35:B3:71:23:94:E5:43:E3:56:99
X509v3 Authority Key Identifier:
keyid:07:05:86:02:65:6C:C1:B1:76:28:A6:36:46:5C:2E:89:BC:FC:0D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwWGAmVswbF2KKY2Rlwuibz8DQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9ee73e-3d08-483f-99e6-638e8c98c110/1/BwWGAmVswbF2KKY2Rlwuibz8DQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9ee73e-3d08-483f-99e6-638e8c98c110/1/BwWGAmVswbF2KKY2Rlwuibz8DQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0c:0b:ac:bc:85:3d:ca:47:3c:26:b4:b8:00:86:43:5a:0d:
d8:9e:bb:ad:7f:51:ec:d3:b8:5c:87:da:b0:f6:20:87:3f:55:
45:9c:d8:37:2f:6a:60:52:19:b1:f4:af:c8:a6:0d:63:7e:ed:
a3:3c:67:46:6a:8c:3b:aa:b0:97:b2:12:f8:84:07:1f:1d:99:
cc:4c:b7:cc:63:44:0c:51:73:f0:aa:98:f1:22:8a:b6:a4:3c:
ee:f5:93:d6:08:8e:2d:48:aa:07:03:0e:32:c9:49:8c:4d:84:
47:87:44:96:a6:34:b3:a1:25:c5:6b:03:6b:ad:35:4b:0b:d0:
70:a3:7e:42:73:a9:e3:d9:4c:40:7d:54:dc:33:29:49:94:30:
bf:eb:09:c7:e1:71:54:5e:cd:7a:3b:ef:6a:f8:5e:93:97:52:
22:0e:61:26:75:ce:a7:d6:22:ef:b5:9e:d3:05:48:72:dd:85:
e7:1a:4f:a1:82:91:40:32:78:14:57:ef:f4:27:3b:bd:f1:d4:
36:b1:8f:22:45:93:cf:e0:09:1e:7f:ed:38:21:20:74:cf:d4:
8f:21:94:9a:c6:62:24:ef:ea:4c:5d:2e:71:ca:23:d7:6d:cc:
2a:db:ff:fb:81:cf:e0:cf:0f:6d:80:b8:38:d7:b1:bc:3d:b5:
fd:47:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:21 2024 by rpki-client on console.sobornost.net