Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
File: 1nSvl-7USr-_pNAi_3Xwd86qQOE.mft (raw, json)
Hash identifier: YqEG3Q5Gq58skTWLzzEyeXZ1wvLhaelFO9HfXLvW1Hk=
Subject key identifier: C8:9D:50:26:FB:CB:95:7E:72:A9:BC:26:D2:60:90:63:76:9A:12:0B
Authority key identifier: D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
Certificate issuer: /CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Certificate serial: 018CED3DCC0E1516A4D3593687B5A03BADF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
Manifest number: 0812
Signing time: Tue 09 Jan 2024 08:01:39 +0000
Manifest this update: Tue 09 Jan 2024 08:01:39 +0000
Manifest next update: Wed 10 Jan 2024 08:01:39 +0000
Files and hashes: 1: 1nSvl-7USr-_pNAi_3Xwd86qQOE.crl (hash: 481a2CifgYTaknF27/gPxLxaYXSnlkgSXSkK3OnWSjs=)
2: VBzXmyt77aFmVw6Bc6jYfwVsx_A.roa (hash: UBrj98k1B/+rhAR4mr19NtE2u26U/zi0zfW9C9mbyaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:3d:cc:0e:15:16:a4:d3:59:36:87:b5:a0:3b:ad:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Validity
Not Before: Jan 9 08:01:39 2024 GMT
Not After : Jan 10 08:01:39 2024 GMT
Subject: CN=c89d5026fbcb957e72a9bc26d2609063769a120b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:ac:4c:1a:01:ec:e6:73:cc:72:8f:8f:c3:
65:71:1a:3a:c1:f0:91:03:45:02:f8:a3:a0:3f:8f:
39:f6:62:66:74:dc:29:e8:41:7a:7b:68:f2:ae:b6:
11:bd:5a:62:7e:06:82:ac:e9:4e:58:49:48:62:cb:
8e:c0:f7:88:87:9f:be:7d:12:d2:ad:77:88:0c:a8:
7d:34:c7:16:a1:f8:47:fc:5e:59:5a:73:31:fb:68:
a0:0e:e0:27:aa:c5:cd:1d:67:d7:0b:01:aa:2e:60:
dc:dd:92:85:b5:9a:a5:c0:ed:20:00:c7:48:4d:dd:
2c:b1:f7:ea:ff:66:a6:62:94:5a:70:e2:73:e3:3a:
2b:e3:58:d1:56:d6:e7:31:a6:02:35:62:f1:89:07:
df:1a:a8:fb:ff:e7:54:c7:32:19:37:11:93:f5:15:
a3:2e:7e:8a:0a:81:f3:52:db:6e:43:f0:55:73:7c:
01:7e:46:d4:90:5d:25:1f:53:1a:39:8a:ed:69:a8:
b6:11:a4:b7:66:7a:23:f8:7c:5b:c2:a8:55:91:ae:
03:7d:fb:98:f0:e5:85:79:77:0b:7b:bd:8c:44:5a:
a9:39:68:59:54:e6:46:a4:43:6f:ee:0a:64:07:73:
bc:b2:16:91:55:27:ea:da:99:dd:53:73:3b:ff:37:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:50:26:FB:CB:95:7E:72:A9:BC:26:D2:60:90:63:76:9A:12:0B
X509v3 Authority Key Identifier:
keyid:D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:11:5d:f0:36:e1:ea:72:35:10:1a:b0:55:3a:6e:bf:d5:5d:
28:2e:20:0e:d2:60:e3:10:4d:ff:31:d8:8d:28:70:31:99:ae:
2c:fd:06:40:27:2e:f2:07:bd:c2:d0:36:d8:bb:7e:23:d5:f2:
cd:6f:1e:68:1d:d0:72:62:c3:a6:66:ca:78:f9:3e:86:5c:12:
f5:84:c9:2b:79:96:5d:31:6b:22:27:63:12:b9:fa:70:b8:22:
b8:45:29:ce:3d:63:75:14:ff:54:c9:5b:53:b6:22:fb:e5:08:
74:5f:60:c7:2f:a3:f2:a0:9f:26:83:40:a4:64:35:0d:e5:89:
60:26:02:b4:4f:a4:e7:bc:b5:66:3f:97:71:d6:da:29:3d:34:
20:6f:9e:79:a2:ad:4f:70:4e:06:65:bb:fa:42:66:6e:28:0f:
50:72:e4:00:00:35:7e:48:46:a8:79:1a:61:ff:c3:cc:3a:e9:
2f:63:60:59:19:44:12:7c:eb:98:90:6a:3f:59:33:f9:52:55:
65:3c:a5:76:35:f7:73:64:7b:d0:ed:c1:7e:d3:32:10:ee:8d:
4c:fd:45:08:ac:c7:ca:d2:03:30:5c:d8:5f:7f:ec:74:fa:d4:
cc:57:20:ce:dc:cd:50:8d:8b:30:f2:86:c8:dd:3f:d7:9e:e1:
ce:ad:c0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:06 2024 by rpki-client on console.sobornost.net