Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
File: IgOiQWJTsPPH-8Knz9AvgkleLC0.mft (raw, json)
Hash identifier: SKgWgdQ6UkCyJpN0N9gqvkkOdXYnC2HewNJTPTrIcIA=
Subject key identifier: B2:95:F3:02:88:C7:AF:F6:0C:F4:97:68:E0:6C:D7:85:21:50:D3:A1
Authority key identifier: 22:03:A2:41:62:53:B0:F3:C7:FB:C2:A7:CF:D0:2F:82:49:5E:2C:2D
Certificate issuer: /CN=2203a2416253b0f3c7fbc2a7cfd02f82495e2c2d
Certificate serial: 01912B35EABAFF21BE85DDD09984C5E15533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgOiQWJTsPPH-8Knz9AvgkleLC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
Manifest number: 0EF9
Signing time: Wed 07 Aug 2024 05:00:39 +0000
Manifest this update: Wed 07 Aug 2024 05:00:39 +0000
Manifest next update: Thu 08 Aug 2024 05:00:39 +0000
Files and hashes: 1: IgOiQWJTsPPH-8Knz9AvgkleLC0.crl (hash: yUdQr9Us+mUNsUVVIhLMQTZytCPJqlUeq19xeKLsGr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2b:35:ea:ba:ff:21:be:85:dd:d0:99:84:c5:e1:55:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2203a2416253b0f3c7fbc2a7cfd02f82495e2c2d
Validity
Not Before: Aug 7 05:00:39 2024 GMT
Not After : Aug 8 05:00:39 2024 GMT
Subject: CN=b295f30288c7aff60cf49768e06cd7852150d3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:b6:07:b3:41:c7:2a:c5:0d:8d:3b:69:bf:
ff:08:ac:e1:51:79:b3:5d:42:bc:90:c4:af:00:fa:
e3:39:2c:20:10:bb:3f:45:a8:11:ca:01:64:ca:3e:
d3:c0:48:b7:fe:66:1e:13:d8:36:3c:ba:ca:5a:20:
00:a3:ac:2d:be:8f:03:a2:ff:29:27:b0:13:b6:dc:
4e:22:1c:56:3d:ab:d3:b1:cf:a7:95:99:b7:dc:ba:
a4:ec:63:90:2f:97:1a:50:6d:25:eb:b0:59:dc:77:
bc:b1:17:34:20:e0:22:2d:da:77:44:6d:ea:c5:85:
ee:fa:6d:87:5d:8b:c4:56:31:1a:46:fe:26:67:70:
cb:79:0b:35:d9:a5:af:f8:7f:c1:19:98:b7:2f:66:
d2:d4:2a:92:9f:f5:c9:8f:be:07:29:80:5a:46:7c:
8d:d4:1d:64:60:96:86:24:05:45:e8:0d:e4:74:42:
63:0f:df:a9:0e:0f:a6:c7:0a:9b:ab:38:74:70:22:
54:0a:42:e6:b8:c5:93:c5:9b:46:91:ec:14:fb:3f:
01:68:4c:b8:04:e0:18:0f:10:4d:28:d0:80:b2:9a:
a1:88:b9:79:a6:55:6f:c9:91:38:9c:28:f7:13:d6:
83:0a:c1:e3:10:76:68:65:c6:9c:2d:9f:87:07:ca:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:95:F3:02:88:C7:AF:F6:0C:F4:97:68:E0:6C:D7:85:21:50:D3:A1
X509v3 Authority Key Identifier:
keyid:22:03:A2:41:62:53:B0:F3:C7:FB:C2:A7:CF:D0:2F:82:49:5E:2C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgOiQWJTsPPH-8Knz9AvgkleLC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:17:a2:46:07:b9:ab:98:43:32:a0:1f:94:c9:10:23:b6:57:
d9:c4:2d:bf:d9:9e:bd:20:bc:42:b5:8e:ff:67:0b:b9:41:32:
5e:b7:a1:ac:28:7f:1e:f3:38:ed:33:d1:c7:d1:21:e9:95:b4:
97:d3:1e:f3:ac:8c:62:7d:11:f2:87:47:d6:ab:6d:1c:6b:bc:
47:6c:d5:88:ac:4a:cc:d2:19:5d:40:4d:6e:aa:3e:e1:12:11:
38:a1:80:3e:59:4f:67:a6:cb:22:a5:ff:28:0f:75:69:96:e8:
27:3a:9f:bc:5d:10:93:43:1e:de:a0:5e:bb:8e:bc:67:d8:67:
f0:14:20:56:19:ce:6b:d5:10:66:e2:c9:bb:a3:86:8e:61:f0:
1b:bb:fb:cb:d1:1c:06:8e:2c:e1:ef:61:37:9a:32:dd:3f:4c:
cb:a5:77:43:e9:d7:a6:99:55:3e:1d:01:d3:6c:e8:2c:40:37:
fc:1d:20:91:72:db:36:08:fb:c4:b6:96:fe:eb:a1:21:3f:29:
2e:bb:16:92:0a:93:bf:77:7d:a0:24:da:49:8b:8f:bd:db:57:
0e:e4:c6:dd:64:a9:5a:88:6c:58:4d:a4:1a:4b:8a:43:b9:bd:
7c:c3:cd:4e:2c:2f:60:fc:72:b1:5e:a6:a7:69:e9:9f:e3:0c:
2a:54:a8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 09:58:33 2024 by rpki-client on console.sobornost.net