Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.mft
File: dybr_w8tdL-iFgD_c_4maR_HMak.mft (raw, json)
Hash identifier: lArO4N1CmXcaijEdqcbFup8LT0oA0Ixw4VgqjEGIqwk=
Subject key identifier: F3:9D:94:48:FD:5B:00:8C:5C:89:99:7F:5C:92:EF:73:CB:2C:B4:2E
Authority key identifier: 77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
Certificate issuer: /CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Certificate serial: 018CEE86B96B210F70BF442E0F50AB43AAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.mft
Manifest number: 08A1
Signing time: Tue 09 Jan 2024 14:00:55 +0000
Manifest this update: Tue 09 Jan 2024 14:00:55 +0000
Manifest next update: Wed 10 Jan 2024 14:00:55 +0000
Files and hashes: 1: W4Sz1s6M7qbBw59z7z3fvq3P2BI.roa (hash: 9d4ZZfi9W0qvKI3DkkPNtQkgyol4pF0O40/L2H+IXbI=)
2: dybr_w8tdL-iFgD_c_4maR_HMak.crl (hash: 1bRn8RGfqVSIDPg5UFsfrxee1wBqGEK1CCd+TdSu58k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:86:b9:6b:21:0f:70:bf:44:2e:0f:50:ab:43:aa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7726ebff0f2d74bfa21600ff73fe26691fc731a9
Validity
Not Before: Jan 9 14:00:55 2024 GMT
Not After : Jan 10 14:00:55 2024 GMT
Subject: CN=f39d9448fd5b008c5c89997f5c92ef73cb2cb42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:10:fd:40:9e:83:b8:24:58:5e:71:88:86:
f4:dc:56:8c:00:dd:9f:e4:a2:5e:81:b7:5e:d7:e7:
1d:d5:d5:fc:d2:dd:70:21:23:6d:be:ae:dd:92:0f:
ed:42:de:01:ac:85:cb:19:47:37:90:67:1c:a3:6c:
ff:e1:d6:dd:f8:9d:61:00:1f:2f:f3:7c:ec:70:6e:
cf:9f:00:7e:40:04:d4:db:d9:d8:14:7d:eb:fd:86:
19:3f:d8:7b:58:cb:c8:bc:7a:cb:fd:e3:4b:79:26:
14:fc:48:71:eb:b6:0b:47:07:ff:bc:9f:fb:73:aa:
19:f8:32:f3:e8:ef:5a:b3:52:55:74:69:c2:5e:82:
a3:dc:5b:81:58:4a:81:03:02:45:be:3e:62:16:8a:
58:5b:ff:08:a4:2c:94:7f:60:60:e4:8a:e7:bc:82:
fa:2b:37:5c:07:30:fc:06:58:f1:25:9b:94:5d:c0:
aa:9c:d8:46:f2:3c:fa:e2:23:1c:04:8b:dc:26:57:
22:c2:8b:10:d7:57:95:cc:df:f9:0c:3a:ba:07:bf:
3a:c3:ac:e9:d8:55:8e:6c:65:69:df:7d:71:22:17:
e2:33:56:94:3d:3b:40:17:57:db:3f:1c:48:e5:c0:
ea:ab:b8:86:b6:90:3b:35:c4:51:6d:80:7a:c3:3c:
e4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:94:48:FD:5B:00:8C:5C:89:99:7F:5C:92:EF:73:CB:2C:B4:2E
X509v3 Authority Key Identifier:
keyid:77:26:EB:FF:0F:2D:74:BF:A2:16:00:FF:73:FE:26:69:1F:C7:31:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dybr_w8tdL-iFgD_c_4maR_HMak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7137e6-28bf-4fc6-9d0a-832e8aaa206f/1/dybr_w8tdL-iFgD_c_4maR_HMak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:94:9a:d7:68:07:b7:2d:30:26:0e:2f:fc:f9:26:6b:88:02:
ae:ae:77:1b:6a:5b:a2:e3:52:27:86:62:8c:05:6b:f8:b3:68:
58:41:22:ab:94:c4:fa:29:8d:17:e7:6d:ee:90:05:7a:1d:d5:
4b:9a:0f:70:3d:f6:27:a2:4d:d2:bd:5b:32:76:d0:df:e5:15:
0e:5b:49:50:3d:21:61:c3:f2:35:31:91:ee:52:70:a8:0b:1d:
3b:72:05:bd:12:45:80:c4:64:6d:ee:43:e4:82:01:df:bd:e7:
0a:fd:59:a8:42:b3:49:71:f2:1f:31:ee:f2:31:db:2a:06:c5:
80:1a:ce:07:29:4d:e3:7d:6b:c0:97:ae:d3:bc:58:98:e0:67:
9a:ca:f6:8f:6c:d1:71:f1:a6:5c:af:54:f7:60:42:fa:d1:76:
bb:5e:58:8e:86:2e:9b:0f:da:4b:e6:d6:e9:86:7b:61:27:cf:
04:a2:ac:21:91:f9:56:32:37:51:88:fe:b3:3e:18:17:69:6e:
87:84:e9:16:6b:50:21:65:9a:b1:bb:87:30:ec:97:a4:e0:ec:
da:fe:0c:b7:90:6f:79:c3:76:cb:34:5f:70:89:09:b8:af:f3:
5a:4d:4f:9f:0d:4a:6e:27:82:c0:88:c4:2d:44:a0:73:84:35:
5e:f4:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:27 2024 by rpki-client on console.sobornost.net