Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/295db1-65a2-4cc7-94b1-73e90d0d4922/1/CfIVD6wsfBlrwrCyXtRU9YUFdiM.mft
File: CfIVD6wsfBlrwrCyXtRU9YUFdiM.mft (raw, json)
Hash identifier: l4og++g6s9fMyiKBpsJJjAJ0mXYYVzYWypl80EB7wMg=
Subject key identifier: AC:DF:66:84:2E:97:99:3C:6F:53:BE:A8:89:1E:E1:99:8B:FC:07:88
Authority key identifier: 09:F2:15:0F:AC:2C:7C:19:6B:C2:B0:B2:5E:D4:54:F5:85:05:76:23
Certificate issuer: /CN=09f2150fac2c7c196bc2b0b25ed454f585057623
Certificate serial: 192DAE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfIVD6wsfBlrwrCyXtRU9YUFdiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/295db1-65a2-4cc7-94b1-73e90d0d4922/1/CfIVD6wsfBlrwrCyXtRU9YUFdiM.mft
Manifest number: 08A8
Signing time: Fri 18 Mar 2022 08:32:23 +0000
Manifest this update: Fri 18 Mar 2022 08:32:23 +0000
Manifest next update: Sat 19 Mar 2022 08:32:23 +0000
Files and hashes: 1: CfIVD6wsfBlrwrCyXtRU9YUFdiM.crl (hash: Ln1C91vJDZTapk2BEtQuMJFPPkMMRHu4zivrG3b7o0c=)
2: Oqy4_BXOp4m4sxjG-SxTl6ClCFA.roa (hash: fZaJfsnlTsQZFiksxzuIr/QsTumWt+6w6Gcda6wkKrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422424221 (0x192dae9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f2150fac2c7c196bc2b0b25ed454f585057623
Validity
Not Before: Mar 18 08:32:23 2022 GMT
Not After : Mar 19 08:32:23 2022 GMT
Subject: CN=acdf66842e97993c6f53bea8891ee1998bfc0788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:74:2c:25:46:52:65:c5:32:d8:20:43:de:
13:b3:cb:06:7b:bd:be:c8:59:1e:0a:2b:a8:c3:a7:
a3:66:ac:ce:04:99:84:87:bc:2f:b9:5c:20:44:42:
b1:b6:d1:36:70:13:5a:21:08:bd:3f:d9:f7:64:ba:
a3:e2:10:1a:4e:2e:d4:58:65:a7:0e:4f:5e:e5:e1:
c6:9f:d7:74:01:8a:df:a5:df:78:cb:b2:e3:d6:83:
14:ee:e2:fe:e1:02:24:6c:de:37:ca:47:90:2f:42:
74:1e:96:a9:28:a1:c7:4b:f6:e0:20:7b:10:79:9d:
7c:d4:e1:18:2e:7e:0e:1d:9d:6b:03:c4:e5:3a:42:
5e:33:c1:6a:a1:3b:49:f6:ef:f4:19:d2:20:71:2c:
9d:70:f2:ed:e9:02:71:e2:65:90:b5:43:f4:c6:71:
43:0a:b2:a7:51:86:ce:b9:a0:94:8f:15:1d:47:77:
c9:14:48:85:04:96:fd:ac:a8:a4:ef:4e:53:61:62:
eb:64:28:19:ec:e4:2a:9a:84:e2:6c:b7:bc:2c:30:
d0:1e:9d:55:56:48:ee:a6:80:7d:9a:e6:45:4d:c6:
2a:6b:95:3f:27:77:94:b0:82:cd:4f:c7:dc:80:45:
86:84:75:c6:a9:f8:85:56:e5:57:0f:8b:f5:01:af:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DF:66:84:2E:97:99:3C:6F:53:BE:A8:89:1E:E1:99:8B:FC:07:88
X509v3 Authority Key Identifier:
keyid:09:F2:15:0F:AC:2C:7C:19:6B:C2:B0:B2:5E:D4:54:F5:85:05:76:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfIVD6wsfBlrwrCyXtRU9YUFdiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/295db1-65a2-4cc7-94b1-73e90d0d4922/1/CfIVD6wsfBlrwrCyXtRU9YUFdiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/295db1-65a2-4cc7-94b1-73e90d0d4922/1/CfIVD6wsfBlrwrCyXtRU9YUFdiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:26:33:ff:be:b2:2c:84:ab:f8:09:0a:f3:e4:5e:86:7f:
30:21:24:53:13:91:0f:e6:30:ba:a8:cb:2e:b4:8d:c1:41:6c:
88:ee:65:a0:f1:d5:2a:6d:b3:e7:78:88:89:d1:d6:5b:fc:af:
ae:20:f2:be:d4:45:ab:1a:f6:41:42:b5:d7:1e:c4:d9:16:c6:
30:25:e7:1e:b9:52:a0:de:6c:c8:b3:c7:3a:7c:9f:ce:5c:c2:
80:b0:3a:79:e6:f0:1f:e6:a3:07:d7:c4:3f:fc:b8:8a:b4:13:
75:6d:77:ab:1f:71:35:fb:33:00:fc:dd:b4:87:28:98:11:62:
83:6e:9d:0a:35:5a:a2:3a:41:67:ea:05:3f:9d:01:63:05:c2:
6a:2a:ba:69:f8:5d:9c:db:c2:85:a1:26:15:d7:0a:dd:d6:ee:
7a:4d:45:b0:32:0f:57:76:54:a4:05:74:2b:a2:15:8b:71:72:
a5:f7:58:21:e8:54:c1:c7:09:28:6b:4a:2f:5e:4a:ae:95:a4:
64:77:5a:9f:eb:cc:db:7b:6d:ca:2b:fc:a0:39:ed:23:c8:fd:
28:3a:71:3b:34:7d:c1:4a:45:6d:e7:5c:12:ad:c4:e2:46:32:
6f:d1:bf:93:ab:42:ef:13:85:eb:1f:b7:b4:27:8b:03:6c:58:
a5:00:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:33 2023 by rpki-client on console.sobornost.net