Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
File: 7BG20O5rnsz-NOxQaidQeMOezLM.mft (raw, json)
Hash identifier: ohzH4W228YxZnMKrFgRV9IhY606L38U4uNZy+UDtKqY=
Subject key identifier: 60:96:A8:AF:2C:58:C8:3F:5B:49:13:CD:90:DD:57:A8:9A:C8:9B:69
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 018CED3D7645C7A847672CE775B03B59986E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
Manifest number: 1025
Signing time: Tue 09 Jan 2024 08:01:17 +0000
Manifest this update: Tue 09 Jan 2024 08:01:17 +0000
Manifest next update: Wed 10 Jan 2024 08:01:17 +0000
Files and hashes: 1: 7BG20O5rnsz-NOxQaidQeMOezLM.crl (hash: ONbbYlhirlMMuIfdShcrOv8H/Ydj/MjLLCOSu60Ks24=)
2: Nm7bo8qhFYYB7jtPEHG5biDCgcE.roa (hash: 8nqlY0sMN9P4OB4doJIQfoVpaKNWg8h+BCEU+ebVJ5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:3d:76:45:c7:a8:47:67:2c:e7:75:b0:3b:59:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Jan 9 08:01:17 2024 GMT
Not After : Jan 10 08:01:17 2024 GMT
Subject: CN=6096a8af2c58c83f5b4913cd90dd57a89ac89b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:40:4e:b8:de:33:b2:c4:41:63:80:b1:45:
65:25:b2:a5:f8:d2:26:21:67:ff:ed:24:8b:1b:92:
06:00:ec:ce:0d:cc:75:00:a6:b5:43:00:7a:b8:9b:
b6:cc:4d:9c:2a:25:24:2d:ba:e2:77:3c:fc:56:e4:
9f:22:7e:d2:87:de:f6:f5:01:42:c9:6e:ca:c2:85:
42:8b:99:d7:da:8c:28:c1:46:4f:c5:b3:92:cb:fd:
9e:5b:d8:c4:52:0e:85:84:ed:6d:83:25:f2:f8:e2:
6f:74:85:3e:98:c1:e4:88:13:24:33:e0:27:22:0e:
55:0a:8c:67:2a:90:02:cc:36:b1:5a:f4:c6:23:33:
83:7f:39:66:85:fd:4d:59:c0:6b:90:98:f6:db:3d:
37:82:90:c1:32:ec:3d:f9:a8:b7:30:59:4f:39:98:
44:05:bd:61:fe:78:59:0b:75:4e:17:b8:8e:56:64:
b7:81:7b:35:7e:a6:1b:02:6a:1d:f7:1b:fa:ce:20:
78:79:49:e0:17:14:79:ce:fc:b7:82:0f:1c:5b:56:
f5:eb:97:d0:46:bb:e2:fd:3b:45:bd:1f:e0:de:5a:
50:79:eb:21:6c:51:76:58:1f:ae:8e:33:d0:ef:b6:
91:37:9a:c8:66:9c:05:8c:31:91:39:6c:89:70:38:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:96:A8:AF:2C:58:C8:3F:5B:49:13:CD:90:DD:57:A8:9A:C8:9B:69
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3c:71:e8:d3:f0:cd:54:ed:da:c3:ed:0a:4f:f3:b9:5e:77:
db:04:23:95:48:d5:b6:37:a3:37:6e:fe:db:98:c5:d8:4a:85:
88:72:df:1b:17:3f:17:a4:e9:d9:57:4f:82:81:b6:f4:73:64:
5f:95:52:54:7a:2c:f6:20:0c:20:c8:10:36:a8:b4:dd:fc:fd:
f9:e0:b4:56:11:10:8b:81:2e:aa:c8:a5:f2:c3:2d:ee:d6:82:
8c:cb:d0:da:3f:8a:1a:39:b5:29:33:c7:19:21:e9:69:96:22:
24:1f:67:aa:0e:e8:c0:7e:e4:e3:b7:e1:98:2c:10:81:d4:c1:
df:db:a0:e2:b5:71:9d:3a:2c:9a:f2:29:ea:f5:43:c7:f4:3c:
71:70:6d:77:e2:5c:ae:5e:f8:ee:a8:3c:8c:1e:26:5e:fd:c1:
11:76:48:7d:03:f2:6c:ea:6f:6b:fb:c0:83:39:70:25:7d:2c:
64:47:1c:e1:c1:bb:35:33:e4:67:eb:a7:33:79:97:b1:24:c3:
40:bc:30:0d:50:04:92:2a:ff:63:6a:27:90:14:d9:c9:fd:8b:
58:2b:d4:2a:5a:c5:1f:75:0d:28:08:29:b4:c2:9c:9c:ec:14:
4e:9a:91:df:09:d8:ed:19:8e:9c:4e:6c:3d:63:30:9e:41:ad:
08:c4:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:07 2024 by rpki-client on console.sobornost.net