Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.mft
File: rUpcc2GJbAcAnCYQB16vIpL4B3g.mft (raw, json)
Hash identifier: QMUAUd4SrxXvhxdD/D5SIQBdzpBGX7BnNpcPn6EFHlY=
Subject key identifier: 19:42:D3:8B:D0:8A:0C:98:F6:DF:44:0B:42:F3:03:4A:4F:C5:0D:DF
Authority key identifier: AD:4A:5C:73:61:89:6C:07:00:9C:26:10:07:5E:AF:22:92:F8:07:78
Certificate issuer: /CN=ad4a5c7361896c07009c2610075eaf2292f80778
Certificate serial: 0193463A008865A91DA5B3962875081BFD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUpcc2GJbAcAnCYQB16vIpL4B3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.mft
Manifest number: 24
Signing time: Tue 19 Nov 2024 21:00:26 +0000
Manifest this update: Tue 19 Nov 2024 21:00:26 +0000
Manifest next update: Wed 20 Nov 2024 21:00:26 +0000
Files and hashes: 1: 0sahQlpEQz2u8NxoFfiNI9LNXm8.roa (hash: CwMF2HjyXu6vJqCVmcuJVtyqUougWMCx/iDVdDQbEGA=)
2: rUpcc2GJbAcAnCYQB16vIpL4B3g.crl (hash: KJ/IoTNWoxl0LNiZQUnTh62mrsauDF0edDLxX4Bv6UU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:46:3a:00:88:65:a9:1d:a5:b3:96:28:75:08:1b:fd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4a5c7361896c07009c2610075eaf2292f80778
Validity
Not Before: Nov 19 21:00:26 2024 GMT
Not After : Nov 20 21:00:26 2024 GMT
Subject: CN=1942d38bd08a0c98f6df440b42f3034a4fc50ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:c2:60:29:ad:06:b6:7d:9a:07:2c:c0:da:
40:28:ba:7c:1f:35:e7:c1:5b:33:38:ba:20:df:ca:
e3:7f:69:17:f9:8e:d6:cf:75:cc:b4:87:66:57:4c:
66:c6:21:4c:08:b3:d7:77:7c:7e:b2:04:df:56:77:
19:ab:69:69:ba:bf:54:39:5f:75:77:6d:f9:cf:0c:
0d:2a:10:01:a2:e8:64:a8:9e:5a:10:44:d5:02:76:
4e:e3:cd:45:a2:f4:31:bb:72:2d:5b:d2:20:3c:2f:
b7:92:ea:34:e4:2f:5d:09:9a:a4:b5:a4:af:7c:97:
73:6e:7e:c9:db:f8:c9:80:ce:62:ed:87:7f:80:b2:
a2:2a:44:e2:60:4d:c9:53:df:b0:bd:45:08:c4:a9:
56:34:27:ad:bb:7c:e2:a7:46:7f:d5:12:d9:7b:1e:
2c:a7:9d:bd:2c:85:18:65:d8:03:76:4a:60:06:ff:
02:8e:50:87:5b:65:a8:35:66:d6:61:e6:5d:d4:06:
cf:92:84:e1:17:a8:f9:58:d8:c1:c3:92:43:4b:84:
6a:7b:da:58:75:0c:a7:2d:9b:c4:a9:15:88:16:77:
37:72:1e:19:5f:f5:56:82:d9:4f:cd:68:fe:df:e4:
82:a8:9f:8e:f4:db:93:78:a3:24:7c:7e:c8:49:d4:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:42:D3:8B:D0:8A:0C:98:F6:DF:44:0B:42:F3:03:4A:4F:C5:0D:DF
X509v3 Authority Key Identifier:
keyid:AD:4A:5C:73:61:89:6C:07:00:9C:26:10:07:5E:AF:22:92:F8:07:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUpcc2GJbAcAnCYQB16vIpL4B3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d3:af:f1:b6:94:7f:55:ea:01:23:45:58:04:08:6f:ba:28:
a7:eb:73:c1:c6:41:31:d7:dc:f4:52:42:0b:9a:05:f5:e9:97:
e6:1a:a6:54:b4:85:be:03:50:e6:1b:d9:ce:34:db:8f:6c:c3:
c4:c3:49:f6:5c:97:5f:b2:f5:c0:9c:56:20:30:0f:0d:05:c8:
35:70:50:eb:eb:ca:9c:c4:c8:63:ad:72:c4:71:5f:9b:92:75:
80:de:46:aa:73:a3:d5:5d:d2:43:4b:2e:64:66:41:13:04:cd:
f1:d8:4a:04:f3:0a:ee:e9:2f:ae:91:7c:d1:c8:26:60:0d:e6:
27:52:8e:c1:ba:35:49:ad:cc:c7:a1:7e:f5:53:67:67:0e:79:
5a:b4:aa:3d:c5:b8:8b:2e:0d:d5:67:d9:6a:15:db:4e:87:7a:
89:e5:31:55:5f:85:bf:b7:bb:b7:a8:6b:2e:0a:da:bb:07:2d:
49:d5:54:73:26:44:f9:2e:85:2e:06:88:fa:60:6d:47:8d:6c:
dc:0e:bd:3f:b1:a3:ab:83:11:f9:55:50:c4:d1:8e:23:70:9f:
e8:95:c3:6e:38:17:1c:0f:d0:0d:9a:45:b7:07:4e:d6:d6:ea:
1a:9a:fc:1a:7b:6a:37:60:4d:8a:28:8d:d2:e4:f2:73:f6:e2:
ac:57:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:15:57 2024 by rpki-client on console.sobornost.net