Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.mft
File: a4WJSoS6oOyg5u9EqZL8K6APUnc.mft (raw, json)
Hash identifier: Vg/ZTMRCsRWrjz6sYKaK2zZpmAJWd6GpnKAOHp0p9pU=
Subject key identifier: 64:B3:CF:5E:8F:38:D0:48:27:87:06:C5:0D:75:D4:9D:DE:74:14:70
Authority key identifier: 6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
Certificate issuer: /CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Certificate serial: 01934602FCC275B3B3E73D4F7D9D00D032A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.mft
Manifest number: 1371
Signing time: Tue 19 Nov 2024 20:00:21 +0000
Manifest this update: Tue 19 Nov 2024 20:00:21 +0000
Manifest next update: Wed 20 Nov 2024 20:00:21 +0000
Files and hashes: 1: CjDWHsxdvR8Zk6bd48GV6LkKCKo.roa (hash: L6ebY4sU08KNzCFkjr2wDQT+RZQQZa1NEjrxijwLThs=)
2: a4WJSoS6oOyg5u9EqZL8K6APUnc.crl (hash: wDnQUWvs0Umhjo+MxJ4rIBCbyxHFX8KvbAEAyjQn9+U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:46:02:fc:c2:75:b3:b3:e7:3d:4f:7d:9d:00:d0:32:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b85894a84baa0eca0e6ef44a992fc2ba00f5277
Validity
Not Before: Nov 19 20:00:21 2024 GMT
Not After : Nov 20 20:00:21 2024 GMT
Subject: CN=64b3cf5e8f38d048278706c50d75d49dde741470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:9e:b2:e0:b9:d1:52:b7:f5:bb:c7:57:d6:
87:00:03:d2:09:a3:87:fa:c9:4a:e9:de:20:c3:39:
d2:8e:8c:87:fa:6c:4b:ce:d2:cb:e8:93:7f:16:05:
9f:da:66:89:7c:95:1f:2e:24:85:10:ae:43:03:0a:
6f:ea:01:18:f2:56:09:f0:70:cb:a4:ca:63:70:f6:
85:14:b0:92:14:41:9b:9a:1b:1d:2e:89:50:c6:47:
c3:a1:8e:86:fa:43:c9:70:9d:5a:fd:be:fc:57:c1:
fd:27:4a:9f:a1:ab:87:0e:4c:ad:60:8d:63:c8:91:
64:55:ee:db:4a:86:37:75:a9:0a:5b:3a:e5:59:85:
80:71:d9:c4:89:c1:30:3b:6e:af:07:fd:9a:71:61:
21:79:23:33:cb:1d:4c:29:34:28:26:b8:88:31:b3:
aa:f7:3c:51:02:b6:07:5a:5b:79:7a:71:72:d8:c3:
bb:8c:71:d4:41:d1:14:c1:54:86:29:3d:69:fc:db:
fd:71:ca:d0:50:fd:fb:fc:1f:69:3d:11:c6:66:70:
54:f0:3c:c7:a4:07:a5:34:04:e3:76:9e:0a:68:13:
b1:68:56:51:08:5d:af:70:b3:d9:cd:a1:73:1b:3d:
c7:da:79:d1:63:af:da:43:ed:15:23:0d:a4:0f:f2:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:CF:5E:8F:38:D0:48:27:87:06:C5:0D:75:D4:9D:DE:74:14:70
X509v3 Authority Key Identifier:
keyid:6B:85:89:4A:84:BA:A0:EC:A0:E6:EF:44:A9:92:FC:2B:A0:0F:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4WJSoS6oOyg5u9EqZL8K6APUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f5c020-e1d7-4fe9-83c0-a3be63b8572f/1/a4WJSoS6oOyg5u9EqZL8K6APUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:c5:0a:83:9a:dc:8a:17:af:c9:93:f5:c7:19:60:07:58:d7:
c0:bd:df:b6:c0:7d:cf:41:b6:c2:a9:91:b4:cd:3a:86:1c:70:
b5:32:1e:58:3e:f8:2f:90:a6:d8:5f:49:5c:90:d6:59:fb:a9:
ce:84:fd:b1:09:b4:0c:6c:fb:8b:6c:64:17:00:7f:68:cb:9c:
30:46:78:50:96:34:f2:3d:a7:62:e2:b4:8c:3b:f2:f0:dd:e4:
94:c0:a4:73:4e:a4:b7:6b:d3:bf:ac:49:01:cd:83:bb:c0:f2:
a9:78:c2:71:4a:cd:39:11:9f:c7:7a:88:fb:37:d5:81:b6:58:
71:e6:86:7e:c0:b1:4f:7a:a5:b6:94:05:75:73:1c:62:1b:da:
2b:f0:a7:2e:2e:15:a6:d7:85:3a:86:6c:3f:a5:87:bc:e2:54:
f4:2f:df:9c:41:68:4c:2f:12:d0:2e:5b:8b:5b:c7:ec:ff:c3:
0f:d5:0f:c8:21:19:d2:91:35:5c:b0:15:dd:2b:68:f5:0d:9f:
64:56:21:da:73:49:ba:48:72:8b:2e:39:bf:53:49:72:86:18:
48:b9:00:d0:b1:9f:4e:1a:4e:8c:ba:4a:cd:35:c9:c4:a7:4d:
a4:25:05:3f:97:58:33:90:d8:15:73:e9:a5:65:7e:43:eb:35:
63:0f:6a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:17:21 2024 by rpki-client on console.sobornost.net