Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
File: Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft (raw, json)
Hash identifier: KksUChLjTP4d+4h+1/1QLbsbCifRaEs1I2bmYwlQyOk=
Subject key identifier: 21:9B:56:B4:6A:CD:90:12:5B:51:4F:22:B5:12:B9:91:7D:9E:A3:7B
Authority key identifier: 46:5E:78:A5:EC:57:23:1C:69:3D:65:45:44:61:8C:67:82:D6:19:0A
Certificate issuer: /CN=465e78a5ec57231c693d654544618c6782d6190a
Certificate serial: 01934717A62A7CDD4D3C9D55501C8CB67F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl54pexXIxxpPWVFRGGMZ4LWGQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
Manifest number: 1369
Signing time: Wed 20 Nov 2024 01:02:32 +0000
Manifest this update: Wed 20 Nov 2024 01:02:32 +0000
Manifest next update: Thu 21 Nov 2024 01:02:32 +0000
Files and hashes: 1: 4uY6lMAh_e52EUp62SENplOwcmA.roa (hash: xDQpk1WwxqQIUcd7x3MrZNbpR1nDBdFaNKGUejzB//4=)
2: Rl54pexXIxxpPWVFRGGMZ4LWGQo.crl (hash: 46efsEREU/+HakuwcmqmnsLgKoB5F3uZdH7Wtnq0AU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:17:a6:2a:7c:dd:4d:3c:9d:55:50:1c:8c:b6:7f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465e78a5ec57231c693d654544618c6782d6190a
Validity
Not Before: Nov 20 01:02:32 2024 GMT
Not After : Nov 21 01:02:32 2024 GMT
Subject: CN=219b56b46acd90125b514f22b512b9917d9ea37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:8e:85:59:69:57:18:06:cf:51:30:3f:bf:
32:c2:27:86:ce:cd:a9:79:0a:f6:5b:e7:43:91:e3:
53:4a:32:98:78:cb:bd:b8:5d:0a:4a:e6:54:ea:5c:
e7:d8:26:1b:a2:db:b8:f3:ef:5e:6b:8b:b6:b4:68:
27:76:f3:ae:97:ab:1d:4f:36:bf:2a:cd:75:6b:f8:
e7:1a:1d:48:a6:15:8d:3f:b3:bd:61:5e:46:e6:34:
87:74:4f:b6:e2:03:17:f6:57:e9:61:7b:aa:45:91:
c3:3b:81:7b:1f:39:b5:dd:99:48:dd:e3:0c:d6:bd:
b6:9d:62:e2:d8:30:fb:88:10:ea:3d:08:e5:33:f6:
5c:60:54:f6:34:28:2f:6e:34:92:00:32:51:a0:6a:
c1:6a:a6:1e:16:b5:46:2c:04:46:59:34:04:2c:55:
4f:93:a1:56:09:56:69:a2:e8:67:93:ad:98:f8:e9:
ee:22:64:26:e5:73:a2:c9:2d:cc:37:2c:69:22:ca:
7d:39:81:b3:f6:13:66:2b:41:91:6b:06:51:de:db:
dc:b2:71:b2:79:99:79:9f:08:0f:8f:6a:2a:af:21:
da:67:6b:63:1d:24:ff:16:ce:ae:f0:e8:c2:17:ac:
d4:2a:cd:67:3c:c4:9b:c8:79:50:3e:e2:b5:14:40:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:56:B4:6A:CD:90:12:5B:51:4F:22:B5:12:B9:91:7D:9E:A3:7B
X509v3 Authority Key Identifier:
keyid:46:5E:78:A5:EC:57:23:1C:69:3D:65:45:44:61:8C:67:82:D6:19:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl54pexXIxxpPWVFRGGMZ4LWGQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/12bd09-6917-4b10-8623-335c2a52a71a/1/Rl54pexXIxxpPWVFRGGMZ4LWGQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:83:47:83:0f:57:be:0a:47:23:08:20:32:7d:00:86:b6:94:
99:df:ec:88:f8:ab:9e:af:c5:97:f0:49:96:a3:c2:1c:44:8e:
d7:a9:8d:cc:e1:48:bf:42:cb:91:a2:aa:ae:a1:de:95:10:59:
0e:de:a7:55:a0:58:d5:51:f1:4e:ac:1d:0d:b8:69:a0:17:6f:
6a:28:96:f5:66:28:1e:b1:38:4a:cf:00:0b:91:05:b4:27:48:
55:9b:ad:08:64:aa:8e:ed:c2:54:9d:94:b2:6b:d7:f1:f1:65:
b2:5a:38:25:8c:72:2d:65:e5:25:86:d4:28:f2:b1:03:a0:56:
0a:d7:43:20:61:28:a1:7e:dc:ea:61:05:ca:c5:2c:df:78:d8:
63:7a:07:b8:d4:d0:e0:83:0e:12:73:91:23:fd:89:68:11:8f:
6a:bd:2b:75:f5:a4:f0:97:a8:fc:01:7d:d8:85:01:a0:e8:ac:
fe:43:50:17:ec:af:0c:74:c9:d8:2b:ec:2b:1a:e6:7e:ad:92:
88:46:75:6f:f3:f2:69:7e:1d:2e:f6:a8:10:e1:0f:9c:41:8d:
9d:dd:26:b4:e4:3a:31:56:83:42:3d:bb:db:09:31:e6:e9:a3:
70:f1:69:cc:10:40:cb:04:51:8b:3a:5d:3e:86:08:fc:5f:46:
b2:06:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:16:00 2024 by rpki-client on console.sobornost.net