Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/kGS2CFSSI5KMaefdP8Eljaeky6c.mft
File: kGS2CFSSI5KMaefdP8Eljaeky6c.mft (raw, json)
Hash identifier: CcXu4CyhmBfAEY1f5rIcA49ydN6yMXLO0/VYFpwv22s=
Subject key identifier: 0C:1E:3C:52:A2:34:B8:7B:D4:CB:A5:19:BD:24:B1:44:B7:C4:21:FE
Authority key identifier: 90:64:B6:08:54:92:23:92:8C:69:E7:DD:3F:C1:25:8D:A7:A4:CB:A7
Certificate issuer: /CN=9064b608549223928c69e7dd3fc1258da7a4cba7
Certificate serial: 018CEE50010689D4BCF7F735E9CF10602522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGS2CFSSI5KMaefdP8Eljaeky6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/kGS2CFSSI5KMaefdP8Eljaeky6c.mft
Manifest number: 0D54
Signing time: Tue 09 Jan 2024 13:01:09 +0000
Manifest this update: Tue 09 Jan 2024 13:01:09 +0000
Manifest next update: Wed 10 Jan 2024 13:01:09 +0000
Files and hashes: 1: bQcanNvQlEGeo4Kibu0YFzw-D9s.roa (hash: 2mW1GV8QoLQk1Pq0420qz5L7/JVK+6fNm6tcNHa9q2Y=)
2: kGS2CFSSI5KMaefdP8Eljaeky6c.crl (hash: 9Mc6rM9uBEbmSPG7UH3KzeHsxVcmorYp18gJkDXcovo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:50:01:06:89:d4:bc:f7:f7:35:e9:cf:10:60:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b608549223928c69e7dd3fc1258da7a4cba7
Validity
Not Before: Jan 9 13:01:09 2024 GMT
Not After : Jan 10 13:01:09 2024 GMT
Subject: CN=0c1e3c52a234b87bd4cba519bd24b144b7c421fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:57:fc:7e:a2:2f:51:ab:a8:aa:46:c6:38:
95:68:7f:1c:f0:12:e5:ee:50:3a:dd:90:10:b0:43:
60:1c:04:a2:2d:47:06:bf:f6:89:0c:e8:c2:59:32:
76:da:44:7a:5c:c4:76:5a:3b:2f:a8:43:2f:4e:20:
ff:8d:81:c0:43:ab:3d:6b:69:80:74:19:51:e0:c3:
c6:49:5c:32:f9:12:67:e3:f2:bc:df:51:d0:1f:ce:
8b:be:6a:72:bd:89:67:61:67:9a:67:ec:c3:6d:f9:
c7:82:bd:97:ad:60:e0:7c:09:52:c7:58:03:7e:8b:
ec:3f:3b:bf:8e:42:89:4a:3b:df:c0:3b:bd:ef:db:
2a:4d:7c:0c:d2:7d:31:54:e0:b2:15:93:af:c3:a4:
36:67:2f:29:f5:df:74:23:58:d2:68:d2:8b:32:ef:
98:c3:e6:94:3d:87:38:1f:f9:8f:6f:81:38:0e:d0:
09:77:9d:de:b3:5e:81:b1:8d:6f:9e:96:23:cb:d3:
93:38:3f:d1:3f:17:7a:ff:d4:93:77:61:ab:5c:d3:
c1:ca:81:48:fe:46:6b:14:40:3c:de:67:6f:c0:5e:
37:82:5e:eb:93:3e:e2:8f:ea:bd:fe:1d:49:bd:a8:
e2:03:e3:4a:6b:f8:10:85:5e:af:cc:d7:29:be:10:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:3C:52:A2:34:B8:7B:D4:CB:A5:19:BD:24:B1:44:B7:C4:21:FE
X509v3 Authority Key Identifier:
keyid:90:64:B6:08:54:92:23:92:8C:69:E7:DD:3F:C1:25:8D:A7:A4:CB:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGS2CFSSI5KMaefdP8Eljaeky6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/kGS2CFSSI5KMaefdP8Eljaeky6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/kGS2CFSSI5KMaefdP8Eljaeky6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a8:7f:b6:13:de:fb:fa:67:8c:62:a1:86:ac:c6:c1:d5:ee:
fe:af:7c:7f:94:fb:bd:ba:7b:db:8e:11:1a:d9:3d:dc:6b:fe:
0a:0c:7d:9c:6a:c2:ee:23:df:0d:59:5a:43:b7:a4:ff:e2:43:
f9:b8:e4:ac:ca:9b:f2:f8:73:cc:16:84:62:f2:f3:66:a0:ed:
6e:aa:24:cb:10:7f:38:c8:1c:c5:da:d1:44:11:2e:57:0c:b7:
ab:f4:47:a2:29:a2:ab:4c:8f:16:6d:ca:33:f3:62:29:03:75:
40:a5:f9:e7:b0:72:bb:fe:b5:31:8f:29:b9:38:1c:cc:e9:b2:
13:85:4b:b2:20:37:d3:d1:e3:79:9e:17:28:fa:57:18:a1:94:
cb:9c:c5:16:fd:53:c0:56:06:35:45:d0:06:45:1f:d2:cd:e2:
63:7a:73:ff:49:9e:5b:f1:0b:23:60:9a:81:4a:d8:2c:11:45:
9b:d6:f9:86:88:b8:97:25:e8:56:b7:b2:4a:d2:dc:0f:cc:ca:
81:8c:4f:ab:d4:ad:11:f7:11:c0:2d:97:aa:81:7e:84:d1:82:
1b:1d:f1:bc:86:db:da:af:d2:70:7a:10:e2:a5:e9:d0:6a:3b:
de:f2:d3:30:04:3f:35:05:f9:57:8f:41:c0:c6:08:82:25:08:
2b:4f:c7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:23 2024 by rpki-client on console.sobornost.net