Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.mft
File: pcrmoB2FSr35JW3MJClhfVXwO9k.mft (raw, json)
Hash identifier: k+zRHpw1W3hk0ZR5J3ykmG79+XjXUlqTOngvGmjADWs=
Subject key identifier: 83:27:F6:C7:08:E2:45:FA:37:BA:01:BC:44:7C:ED:46:B4:24:F4:5C
Authority key identifier: A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
Certificate issuer: /CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Certificate serial: 018CED3D9A7A2F2A651A314EC90BF3214BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.mft
Manifest number: 0813
Signing time: Tue 09 Jan 2024 08:01:26 +0000
Manifest this update: Tue 09 Jan 2024 08:01:26 +0000
Manifest next update: Wed 10 Jan 2024 08:01:26 +0000
Files and hashes: 1: W-mdYXyGyNG56mn9a6N3pMEBwMY.roa (hash: ZHcNO2c/fN/AnSX7blHMQMDMfSdNie9N27X+awey9kI=)
2: pcrmoB2FSr35JW3MJClhfVXwO9k.crl (hash: AEsmuzy+DiiLs/Ho30knbMUjADtzr4+qOJ/+RZK9gGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:3d:9a:7a:2f:2a:65:1a:31:4e:c9:0b:f3:21:4b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Validity
Not Before: Jan 9 08:01:26 2024 GMT
Not After : Jan 10 08:01:26 2024 GMT
Subject: CN=8327f6c708e245fa37ba01bc447ced46b424f45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:09:dd:84:2d:b5:3f:3f:92:c5:3b:bd:0b:
eb:76:4a:0e:15:34:58:4b:7d:d5:0a:f4:81:f8:84:
6e:68:33:b0:61:3a:01:12:86:76:b9:af:7a:bb:32:
5f:c1:06:53:2e:a7:b6:b4:58:8d:c7:94:83:9a:d2:
d6:ce:b9:af:aa:81:6e:eb:c8:16:80:07:0a:d4:ac:
ec:94:c2:8d:65:e9:0e:53:fb:6a:af:e7:24:b5:cc:
c9:c7:b2:9e:36:37:19:b7:fc:0b:02:a7:11:2c:69:
32:09:bc:2e:bb:eb:57:50:36:3c:68:47:a1:2c:f4:
44:9c:e7:7e:7d:3e:42:f4:e6:be:81:62:e2:11:e7:
b4:bd:58:5a:8e:8d:99:4b:07:60:fe:06:03:9a:52:
62:6a:3b:7d:8f:fb:ba:91:65:ae:14:c7:4f:a7:ee:
c0:1c:68:24:25:1a:27:7d:4a:72:f1:eb:28:59:80:
6c:e4:13:30:1f:80:bc:d8:3e:16:79:41:97:e4:a4:
b7:06:90:71:9d:77:1c:eb:04:d9:45:96:ef:8b:a3:
6d:ef:8d:7d:96:33:8f:8a:c7:b0:c9:b5:b2:1f:c1:
32:3f:b7:c8:29:a9:0d:56:67:29:8a:80:13:97:d8:
de:76:e9:e6:25:94:8e:87:7e:27:82:90:44:f7:7f:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:27:F6:C7:08:E2:45:FA:37:BA:01:BC:44:7C:ED:46:B4:24:F4:5C
X509v3 Authority Key Identifier:
keyid:A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f1:81:5c:31:4b:6d:c4:f0:b5:d5:05:e1:5d:e4:6d:e0:cc:
3b:05:73:41:c5:7a:93:9a:e2:09:a7:f1:a1:9d:ed:b8:9b:66:
2c:d5:cd:26:15:69:e9:5f:05:05:22:f4:66:7f:16:0d:f3:10:
bd:13:43:33:96:2e:32:43:68:02:98:47:f1:0b:35:4c:86:f1:
53:19:58:a7:03:0b:12:de:df:f4:13:3d:05:33:02:62:9a:64:
b0:ef:6f:e7:99:fc:d6:83:79:28:02:ec:b3:d5:62:52:30:f9:
90:03:d3:48:ea:af:f6:35:58:56:59:7f:c6:3b:4e:67:08:d0:
f3:cb:06:c0:ac:f4:07:07:8b:c3:7f:e6:9f:90:20:d0:e4:24:
81:4d:16:6d:68:bd:f9:fe:0f:64:1a:2b:db:d8:43:d8:79:26:
85:f3:f9:6d:8a:7d:3c:e3:b1:53:e1:ab:4a:56:3b:51:a8:39:
5e:57:06:97:c7:8a:19:17:a0:72:7d:9d:24:f3:14:44:6f:16:
47:cf:2f:fb:30:43:97:52:c7:10:5d:43:47:ef:c2:7e:d8:57:
13:45:97:07:2a:f7:bd:cf:d1:87:2b:32:dd:ce:22:41:70:cb:
e9:77:84:6d:d9:7b:b6:99:f9:a2:89:bd:eb:25:0f:d8:0a:76:
2f:f9:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:28 2024 by rpki-client on console.sobornost.net