Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft
File: PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft (raw, json)
Hash identifier: gyAE1VMcyN8L6+PnXjdDVFf2qIFQvh3cowQeTG8Uu7Y=
Subject key identifier: 88:AA:54:C7:8E:55:89:E4:43:D8:5C:25:F8:4C:74:FD:28:CB:12:8F
Authority key identifier: 3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
Certificate issuer: /CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Certificate serial: 018CED3D32E0C368E22700B6337931EF9D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft
Manifest number: 080C
Signing time: Tue 09 Jan 2024 08:00:59 +0000
Manifest this update: Tue 09 Jan 2024 08:00:59 +0000
Manifest next update: Wed 10 Jan 2024 08:00:59 +0000
Files and hashes: 1: PsnKHX1VV7AYXqnO3gRUgOdiiSs.crl (hash: usvhZS3Yp9rtztapCTEIA1KrX3Q9UTVS2m3Q//SejS0=)
2: yza_t7-O6APvb2kMcASyuhEUeFk.roa (hash: tsarCqLSpAe3VW+go20D07uAXxYOwShijoOfF80vjoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:3d:32:e0:c3:68:e2:27:00:b6:33:79:31:ef:9d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Validity
Not Before: Jan 9 08:00:59 2024 GMT
Not After : Jan 10 08:00:59 2024 GMT
Subject: CN=88aa54c78e5589e443d85c25f84c74fd28cb128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:28:0a:b1:eb:ee:8a:f0:d6:a7:26:53:34:bb:
85:6f:b2:56:e8:7c:e4:71:e6:54:45:8c:9e:a3:0f:
f7:cb:f6:a5:42:85:49:ff:f2:90:c9:42:dd:8a:85:
a7:b5:f5:c6:ef:54:e2:bb:0d:10:79:ea:55:12:20:
fd:8e:d6:bb:6c:74:9a:90:41:9c:e3:e7:4f:e3:bc:
a9:c7:7b:72:e8:88:0b:1a:56:b9:9a:5a:b9:88:f8:
3b:b1:88:2d:94:f9:d3:b1:09:b0:78:c3:5c:03:57:
36:4e:12:78:b2:60:6a:c8:e6:13:c3:39:db:b2:b0:
7b:f3:39:ba:27:45:4d:93:90:95:66:2c:4c:15:50:
b5:a4:07:ef:e1:e1:3a:9d:82:3d:a1:5e:d5:82:0f:
49:e9:75:78:0d:ec:63:e4:8f:31:23:9c:dd:18:e0:
f6:14:99:bd:5b:13:8c:96:15:a8:b6:17:46:5c:35:
60:63:66:63:10:81:09:6a:06:09:62:6e:71:1c:dd:
53:90:d5:5c:b3:50:80:4b:e7:71:2f:6e:93:c7:81:
16:6c:fc:ea:4d:09:05:e8:16:5a:66:0a:dd:d3:d4:
b6:8b:a8:c5:81:d3:e6:b4:2b:21:c7:48:f2:1b:9e:
7d:61:eb:da:72:13:07:b0:4e:76:21:5d:b3:e9:42:
8b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AA:54:C7:8E:55:89:E4:43:D8:5C:25:F8:4C:74:FD:28:CB:12:8F
X509v3 Authority Key Identifier:
keyid:3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a9:45:34:aa:2f:9f:55:f4:da:97:f5:64:41:95:e5:df:bb:
4a:80:00:be:86:5a:a4:cc:97:3b:67:7c:1c:b6:bf:78:38:b3:
a9:f5:8d:6e:83:11:fd:69:a0:bc:7f:ec:65:43:ea:15:a7:8e:
9a:03:57:d0:86:af:f1:26:02:01:e6:44:95:07:0e:3c:6a:6b:
b3:8c:16:90:57:c5:63:b6:6e:24:11:b8:1c:b7:40:b8:6c:f6:
6e:0d:9b:68:d3:1a:66:3b:b0:31:f6:32:e1:eb:b8:c7:d5:5f:
29:59:14:1a:52:4c:58:9b:7c:8c:8e:0f:e9:f7:0e:43:f1:ba:
0f:b4:57:6f:9c:22:55:7e:0a:6d:d2:39:36:f1:f0:3a:5d:fb:
9d:42:93:87:ce:5a:1b:bb:f8:f2:5c:87:f1:00:96:da:19:45:
33:af:12:0c:30:4c:69:79:90:db:a8:17:1b:9e:17:53:8f:3e:
60:2f:4b:f9:83:db:6b:ef:0d:ab:74:2a:55:03:19:35:3e:25:
d2:d6:79:f4:47:24:8c:f9:cf:21:ef:50:61:4a:c2:e2:9c:b1:
20:32:a1:d4:b9:88:e2:21:9a:72:06:2d:a0:bb:6c:be:7f:1a:
93:25:e1:91:7c:42:7a:d4:fa:0f:60:a6:0c:0d:e1:5b:a8:2b:
e2:2d:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:53 2024 by rpki-client on console.sobornost.net