Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca795e-716d-4be0-9cd9-0a6a5041d0aa/1/LnZvfxuh2rmnBg0BLh5Akx78dIg.mft
File: LnZvfxuh2rmnBg0BLh5Akx78dIg.mft (raw, json)
Hash identifier: fl+2Lz/cGlxnorK2x7HulVQBsxyYboo8CD5+iQU4STk=
Subject key identifier: 74:CD:F1:49:2F:1F:56:97:38:8A:90:F7:B0:90:CC:9A:22:EA:86:3A
Authority key identifier: 2E:76:6F:7F:1B:A1:DA:B9:A7:06:0D:01:2E:1E:40:93:1E:FC:74:88
Certificate issuer: /CN=2e766f7f1ba1dab9a7060d012e1e40931efc7488
Certificate serial: 0187493DE1BB48E04F9F96615751E9269883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnZvfxuh2rmnBg0BLh5Akx78dIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca795e-716d-4be0-9cd9-0a6a5041d0aa/1/LnZvfxuh2rmnBg0BLh5Akx78dIg.mft
Manifest number: 0D0A
Signing time: Mon 03 Apr 2023 22:30:04 +0000
Manifest this update: Mon 03 Apr 2023 22:30:04 +0000
Manifest next update: Tue 04 Apr 2023 22:30:04 +0000
Files and hashes: 1: LnZvfxuh2rmnBg0BLh5Akx78dIg.crl (hash: rCb4ZfMY/a/1mGbKuIOTN8o2rDGaXxRDrx1+8YE5jSw=)
2: pBlChRm5yQvrB2OQudIiKupSooI.roa (hash: +ifbOBWmLNEac9fqKjvL8RlV0D1xTR/enuU2rsReAxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:49:3d:e1:bb:48:e0:4f:9f:96:61:57:51:e9:26:98:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e766f7f1ba1dab9a7060d012e1e40931efc7488
Validity
Not Before: Apr 3 22:30:04 2023 GMT
Not After : Apr 4 22:30:04 2023 GMT
Subject: CN=74cdf1492f1f5697388a90f7b090cc9a22ea863a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:75:64:ba:fa:ec:08:3b:a4:24:25:bf:a8:
fb:39:19:d2:d3:41:af:4b:86:6e:5a:b3:2a:c0:55:
e8:a3:d1:be:c2:d2:75:3c:1c:1f:b7:ca:3d:84:53:
0e:50:02:09:bc:38:45:06:a3:10:8a:46:b7:dc:3b:
29:5e:ef:d4:f8:7e:c2:21:0e:65:bd:9b:3c:b8:53:
15:0c:b7:18:c3:eb:aa:13:2b:e9:b7:db:9a:1d:ce:
e4:52:a7:fc:50:da:2d:70:01:5d:31:93:34:76:ab:
15:fa:5a:ee:5a:8c:27:d0:0e:62:78:c8:12:54:41:
95:48:42:94:6c:31:52:a0:81:93:2e:87:77:0c:05:
16:11:77:2b:7b:a5:c7:f7:24:21:c6:61:45:14:0c:
1f:e1:d4:94:4b:0e:4d:23:28:6f:c0:96:74:d4:e7:
8a:c9:2a:2e:bc:9e:27:4c:2f:53:48:ea:02:d7:d8:
bb:24:18:e1:b9:0e:04:08:97:fe:07:de:57:58:ec:
db:0f:e8:0c:7c:40:37:0a:c4:de:77:c8:d1:11:2a:
a0:f1:79:35:79:6e:7f:f6:f9:77:e7:13:a7:3a:30:
0e:dc:87:e0:4a:e8:cf:af:dd:8d:4e:24:32:1e:f3:
e9:c8:5b:29:4a:b2:46:2d:61:82:5e:6b:28:ee:f4:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CD:F1:49:2F:1F:56:97:38:8A:90:F7:B0:90:CC:9A:22:EA:86:3A
X509v3 Authority Key Identifier:
keyid:2E:76:6F:7F:1B:A1:DA:B9:A7:06:0D:01:2E:1E:40:93:1E:FC:74:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnZvfxuh2rmnBg0BLh5Akx78dIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca795e-716d-4be0-9cd9-0a6a5041d0aa/1/LnZvfxuh2rmnBg0BLh5Akx78dIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca795e-716d-4be0-9cd9-0a6a5041d0aa/1/LnZvfxuh2rmnBg0BLh5Akx78dIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:13:05:39:5b:b1:7f:0c:83:18:29:e5:7a:a5:8c:e7:ec:3f:
31:5f:f0:d4:10:f8:c6:86:b2:9b:bb:7b:a3:6e:04:04:fc:e9:
f5:37:4f:ac:cc:e7:70:05:6f:6f:f8:ab:03:a6:f9:2a:3f:33:
f6:59:eb:b2:64:b4:d3:c2:1d:20:6b:31:b0:f0:15:9f:28:d8:
10:f6:d2:52:7a:4a:c3:45:91:2c:4b:b1:7f:12:8a:8b:64:ba:
0d:ec:c9:99:27:a2:8f:76:18:95:f3:cd:54:cf:c1:c7:a2:0c:
ce:50:b2:ca:ba:92:19:bc:15:f0:7d:56:f3:05:9f:e4:da:19:
da:5b:2c:7c:52:3a:b6:10:27:f1:5a:d3:1a:b3:1e:16:2a:4f:
06:3c:79:9f:99:f9:d9:c4:ec:54:42:71:2e:40:d2:20:3b:8f:
17:ae:50:7f:64:16:50:34:1c:29:4a:eb:a9:58:77:b6:79:97:
07:1c:f4:ee:eb:6c:48:f3:43:d2:f1:fb:09:32:f2:1b:12:d0:
92:b4:78:67:a5:76:e6:55:36:70:fb:31:8b:34:37:58:55:23:
82:16:58:ff:0b:7c:fc:b7:cb:df:01:37:30:da:58:99:f3:ba:
20:2a:8c:48:61:6d:e9:0e:69:51:64:98:56:a0:aa:27:eb:61:
08:03:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:56 2023 by rpki-client on console.sobornost.net