Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.mft
File: cRmcF9OFFUCG47cD3USTIt3etIM.mft (raw, json)
Hash identifier: Caa/fFuVNSulRONQuqOH4fbsPjW2If4EBfBQ8ToCUPo=
Subject key identifier: DB:2E:74:72:F9:69:90:17:CA:E0:36:71:35:76:DD:09:A9:8F:EA:90
Authority key identifier: 71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
Certificate issuer: /CN=71199c17d385154086e3b703dd449322dddeb483
Certificate serial: 018CECCF994A94C1E411DF7761AB4D7483F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.mft
Manifest number: 0811
Signing time: Tue 09 Jan 2024 06:01:17 +0000
Manifest this update: Tue 09 Jan 2024 06:01:17 +0000
Manifest next update: Wed 10 Jan 2024 06:01:17 +0000
Files and hashes: 1: ahe3f0Jmn6dE8tYFMd0tlRhkrFk.roa (hash: xauK40L4nu/zQtQTXI5Z9NTnR9J6UgJm7J5Rt12DPYU=)
2: cRmcF9OFFUCG47cD3USTIt3etIM.crl (hash: iCk/AfBWo130611/EpKxAgeqz2AS6woda9IecrgHtqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ec:cf:99:4a:94:c1:e4:11:df:77:61:ab:4d:74:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71199c17d385154086e3b703dd449322dddeb483
Validity
Not Before: Jan 9 06:01:17 2024 GMT
Not After : Jan 10 06:01:17 2024 GMT
Subject: CN=db2e7472f9699017cae036713576dd09a98fea90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:e6:5a:47:b9:72:7c:ae:ab:df:00:13:62:
1b:69:c5:18:3a:f8:cc:6f:cd:d5:47:62:51:46:62:
cc:3a:6d:cb:25:79:1a:15:e5:bf:6b:d4:e9:68:79:
97:10:cb:0a:79:41:0e:9c:22:38:11:03:9b:54:3e:
9b:dc:e7:1b:54:ab:03:68:5e:d2:1a:19:1e:53:5b:
b0:c6:23:bf:d7:9b:49:ce:6b:22:ce:0f:4f:79:f5:
92:1c:50:54:5a:b5:82:2d:f8:e4:8a:d8:ae:de:42:
9e:6a:51:74:cd:f2:ad:e1:d0:4f:61:4c:7f:5c:5a:
ba:09:4e:2d:e3:2a:a5:b3:47:52:fc:2a:e4:23:50:
01:f6:e5:aa:5b:65:c3:28:ad:d6:d0:46:20:db:60:
bd:26:c4:76:fb:c9:36:00:b5:8a:52:2f:12:f2:92:
97:85:90:39:a4:9f:02:fb:44:52:47:41:39:c9:4b:
a9:98:ae:2a:e7:d3:f6:6d:16:12:70:07:c9:25:a3:
10:c0:4f:bd:df:bb:2d:24:43:5f:0b:98:f8:ac:6b:
c2:1e:40:1b:41:40:e9:31:2b:9e:df:27:0c:ce:1d:
a3:9e:eb:91:61:f8:48:c5:39:86:c2:ac:c7:c7:cc:
42:c7:d9:c5:91:a1:4a:62:a2:f2:1e:0a:24:52:62:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:74:72:F9:69:90:17:CA:E0:36:71:35:76:DD:09:A9:8F:EA:90
X509v3 Authority Key Identifier:
keyid:71:19:9C:17:D3:85:15:40:86:E3:B7:03:DD:44:93:22:DD:DE:B4:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRmcF9OFFUCG47cD3USTIt3etIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6af3fc-33d2-4e63-af9e-3d1719576253/1/cRmcF9OFFUCG47cD3USTIt3etIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:05:b8:fd:07:a6:c9:a3:72:89:24:ec:62:2b:d0:6f:00:22:
34:6c:af:53:af:8d:a4:73:a9:e6:d0:eb:7b:92:a4:ba:b0:72:
b1:d1:de:c0:48:ae:72:2c:0d:d0:98:77:10:a5:dd:fa:14:6b:
fa:f6:fd:eb:bc:94:a4:68:7a:c5:06:c7:d8:66:4c:92:c1:dd:
36:35:f3:b2:f0:f6:40:78:ec:17:a1:fd:0c:cc:e2:96:3e:7d:
52:b7:2c:29:7a:67:0e:36:3d:93:16:ce:ec:d0:13:ca:10:b8:
6e:ea:9a:e3:1f:f6:1f:af:52:cb:47:18:27:38:e7:11:bc:3b:
76:08:6e:53:15:89:a3:c0:cc:33:e1:43:ae:82:f9:b3:4e:ea:
40:d2:5e:21:8c:44:68:9f:a1:c1:35:57:c1:60:77:f2:91:55:
40:ae:b3:d2:fa:5e:0e:82:50:ba:e1:8a:95:96:61:2c:28:e0:
a5:5b:17:35:62:42:91:80:35:29:9e:49:5c:2f:e5:b6:9b:7b:
ef:b7:25:e5:af:19:02:0d:c7:52:7c:2b:11:29:6a:a9:fe:83:
34:d5:ac:30:49:c3:51:26:bc:f4:80:df:19:4f:fa:82:a2:1c:
95:53:54:5b:a0:25:ef:44:db:87:a2:6c:d0:3b:29:b2:fb:7b:
1a:f7:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:51 2024 by rpki-client on console.sobornost.net