Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/dbf4da-d489-4bec-b228-8d529304a26e/1/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.mft
File: CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.mft (raw, json)
Hash identifier: h4vid0qdYtMGoEFsYUMFoq2jPCeMONZnnB7AhnUIYhY=
Subject key identifier: 6D:8E:E1:C0:72:28:86:02:C0:41:C9:33:F8:D5:64:CF:AE:F7:8F:1E
Authority key identifier: 09:9E:D9:C6:93:7F:D1:A2:84:33:A4:4E:EC:3A:D0:0C:4F:4D:CB:6E
Certificate issuer: /CN=099ed9c6937fd1a28433a44eec3ad00c4f4dcb6e
Certificate serial: 018CED741C559DE4B014B02CF3CAD0BA0F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/dbf4da-d489-4bec-b228-8d529304a26e/1/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.mft
Manifest number: 0286
Signing time: Tue 09 Jan 2024 09:00:58 +0000
Manifest this update: Tue 09 Jan 2024 09:00:58 +0000
Manifest next update: Wed 10 Jan 2024 09:00:58 +0000
Files and hashes: 1: CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.crl (hash: QvIU66Dgj8EC1ifnfJchZSmudQpLoLDEZ2aQYbH1GWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:74:1c:55:9d:e4:b0:14:b0:2c:f3:ca:d0:ba:0f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099ed9c6937fd1a28433a44eec3ad00c4f4dcb6e
Validity
Not Before: Jan 9 09:00:58 2024 GMT
Not After : Jan 10 09:00:58 2024 GMT
Subject: CN=6d8ee1c072288602c041c933f8d564cfaef78f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:a1:9e:fa:74:75:47:8c:de:2c:c0:a0:d6:
a7:8a:4a:c7:43:c1:7c:0c:ec:0c:1e:7c:1f:bc:98:
53:e8:a8:c6:03:7f:92:ca:c9:ec:9a:ce:98:00:f0:
d2:22:3f:3e:8e:c9:b5:79:e5:84:79:b6:3c:ad:38:
f2:03:db:af:6d:87:ea:2d:44:06:c5:b7:a0:04:8a:
4c:7e:d0:97:b6:aa:ad:8f:55:a9:3f:11:41:33:6c:
00:11:dc:45:ef:ea:a0:2a:2f:ad:22:1e:30:e9:1b:
e8:c4:9b:6d:46:c1:0c:85:b7:76:27:61:c7:39:b2:
80:30:97:7f:59:8c:47:dc:7c:e5:6b:fb:fa:34:4b:
8e:f3:d8:9f:67:84:67:de:f5:40:f3:24:17:c3:57:
ce:9a:f0:4b:96:d1:30:91:e2:66:2c:b4:8b:b0:73:
16:02:10:50:aa:c5:2e:74:3e:f8:f2:a8:af:6f:09:
94:bf:e7:74:af:47:9d:45:75:e5:fb:6a:4c:09:8d:
78:e1:36:23:da:97:da:e6:a1:fa:c3:e9:71:90:21:
3f:d4:cb:a9:c1:c4:f4:db:09:36:4d:8f:53:a0:31:
0f:52:db:26:d3:a2:6d:30:83:61:35:98:3c:27:44:
1d:50:1d:3e:77:b6:d8:5b:65:66:ec:d6:cd:45:19:
d9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8E:E1:C0:72:28:86:02:C0:41:C9:33:F8:D5:64:CF:AE:F7:8F:1E
X509v3 Authority Key Identifier:
keyid:09:9E:D9:C6:93:7F:D1:A2:84:33:A4:4E:EC:3A:D0:0C:4F:4D:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/dbf4da-d489-4bec-b228-8d529304a26e/1/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/dbf4da-d489-4bec-b228-8d529304a26e/1/CZ7ZxpN_0aKEM6RO7DrQDE9Ny24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9c:50:81:af:91:2b:70:cb:b5:bd:c8:0d:3e:f4:01:8f:e3:
fe:b4:4c:16:37:6f:16:66:a6:69:2f:d8:6c:2e:8b:dd:a6:d0:
f7:7b:88:f3:a3:da:5f:0e:01:2f:e4:dd:06:e6:27:96:1d:47:
6e:f8:42:41:c3:08:f9:7f:e7:8a:5a:6a:3b:13:a8:dc:18:cc:
08:50:15:d5:72:4b:c7:8d:a6:0b:60:9f:04:7a:44:a6:71:1d:
f7:06:fe:92:fb:aa:2e:3b:3a:f4:d3:91:59:d2:5f:3d:cb:4e:
e1:7e:72:53:f8:af:53:8c:da:3e:fb:e2:7a:4a:f0:a0:e9:f3:
4e:23:f9:c8:78:9f:93:1c:13:8e:66:4d:53:0e:71:f8:45:16:
80:4c:ff:83:69:d2:b3:7b:85:1a:f1:bd:9e:3e:16:c7:f3:45:
3f:14:22:fb:7a:40:22:5d:08:c0:94:df:3d:ed:27:37:cf:44:
2b:81:d0:01:72:62:24:a1:09:96:bc:32:9b:23:b5:23:00:04:
78:b3:02:1c:46:89:a7:72:c5:db:9d:e3:71:02:49:74:28:54:
d4:a7:d1:92:a0:d6:70:a2:1a:4a:ec:f9:a3:ec:f8:e6:37:ea:
be:4d:f0:65:72:f1:44:e8:44:2c:b8:ef:1e:ab:3c:34:87:e5:
69:ca:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:43 2024 by rpki-client on console.sobornost.net