Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
File: C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft (raw, json)
Hash identifier: OW7KuUQPqp1h8f/SrYMpNauJQUXP1g1Uquh/OQdlFwA=
Subject key identifier: 70:15:B1:E3:57:E0:ED:4D:29:3C:E6:43:67:86:DB:D8:52:6D:DD:A0
Authority key identifier: 0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
Certificate issuer: /CN=0bac8a3206e367b80b8ca689220f098d188491ba
Certificate serial: 01948DE2D82689D5FE98BCEBA0EDF9BF50B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
Manifest number: 13A4
Signing time: Wed 22 Jan 2025 12:00:41 +0000
Manifest this update: Wed 22 Jan 2025 12:00:41 +0000
Manifest next update: Thu 23 Jan 2025 12:00:41 +0000
Files and hashes: 1: C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl (hash: XYtFC7tPgRhk0ztcb6mJxYDscYjMpL4uaibrVH4wV0I=)
2: f5UfFSDlOg-m-uL2DNAR_tMDSg8.roa (hash: /83b/LfsXl5zV/MG30U3LspgV+eRL7MbbHPb/CymUic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:e2:d8:26:89:d5:fe:98:bc:eb:a0:ed:f9:bf:50:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac8a3206e367b80b8ca689220f098d188491ba
Validity
Not Before: Jan 22 12:00:41 2025 GMT
Not After : Jan 23 12:00:41 2025 GMT
Subject: CN=7015b1e357e0ed4d293ce6436786dbd8526ddda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:99:45:8e:86:42:2c:2d:06:4b:d3:9d:7d:
d5:94:7b:96:31:0f:a7:94:c6:49:c3:b5:37:09:85:
0a:b0:8c:3c:ea:27:71:27:94:90:2b:cf:1f:7c:03:
c2:06:a9:71:e5:13:27:c7:7b:b0:bb:9f:a3:c5:52:
0c:7c:d2:37:eb:ff:82:2e:ec:17:3b:43:4b:33:cf:
23:75:fb:d0:25:17:35:50:1d:0c:72:fe:5b:11:01:
48:9f:fe:9a:52:73:dd:6f:19:5a:62:81:75:7d:67:
44:68:b5:48:24:0f:1e:e3:d1:cc:f0:02:db:b8:f7:
ae:2d:75:56:78:3b:1a:51:9c:c5:8c:a7:34:bb:05:
7e:8b:f3:09:30:bc:a1:e0:74:08:89:14:5f:66:8d:
9d:7d:9f:0d:1d:3f:40:f3:da:41:ba:cf:f8:09:7b:
33:38:0f:e0:54:81:86:7c:c5:8d:83:dd:54:0d:d3:
aa:4e:b1:38:5d:56:58:79:0e:82:bf:6d:d4:99:e2:
81:ad:54:a9:5b:d3:a3:aa:84:24:d7:4b:a7:c1:a0:
da:9e:1e:40:3f:96:50:7e:a8:3d:61:97:24:63:36:
4c:6e:c0:7a:0b:b9:67:ab:3f:62:d1:43:3f:22:a3:
75:7d:05:e3:00:ed:a2:0f:69:11:ad:fd:65:bd:5c:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:15:B1:E3:57:E0:ED:4D:29:3C:E6:43:67:86:DB:D8:52:6D:DD:A0
X509v3 Authority Key Identifier:
keyid:0B:AC:8A:32:06:E3:67:B8:0B:8C:A6:89:22:0F:09:8D:18:84:91:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/030074-ac39-4491-9db9-803db6d2ad70/1/C6yKMgbjZ7gLjKaJIg8JjRiEkbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d0:8e:fa:2f:d1:bb:21:19:2f:0f:58:c4:a9:a3:11:36:77:
0b:08:43:7a:67:fb:3d:f2:0c:e8:e3:90:9a:ce:b4:de:1c:2d:
33:71:13:56:af:f1:15:65:7a:94:2a:74:7d:62:35:d4:1a:3f:
29:0a:9d:d3:f4:d4:eb:0c:5e:3c:50:c4:e4:38:3c:af:43:34:
73:e9:61:7f:73:56:54:95:d9:23:de:27:18:59:9d:f5:da:dc:
05:98:e8:e3:d4:33:86:25:fe:50:9d:ab:a4:89:32:86:a9:06:
e1:3f:e3:69:67:6c:d9:54:a0:71:d7:7a:98:6f:7b:91:1c:ed:
aa:53:52:9d:9b:3a:61:e5:79:8f:a4:1d:5a:80:12:bf:4e:19:
30:be:26:93:a6:94:e3:e0:68:a3:01:40:cf:30:29:84:4c:9d:
67:c9:b9:61:bb:71:0e:54:ba:d1:cd:fe:b4:1c:64:b8:80:8c:
7d:de:53:2c:b1:58:84:c6:b9:3b:9b:e5:6e:71:f7:25:c8:bb:
c6:89:85:be:f9:af:74:bb:a8:31:f1:1f:29:ed:40:ec:6b:a6:
15:80:40:6d:36:04:9f:14:bb:a4:7c:03:f1:31:42:f9:ab:95:
b4:15:aa:eb:7d:d5:50:18:bf:ce:79:9c:7d:1c:2a:22:30:d3:
63:2a:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:53 2025 by rpki-client on console.sobornost.net