Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.mft
File: eHBUsWeqmIQc3CxLorhhOauYjn0.mft (raw, json)
Hash identifier: rKFsBb0LpN4J+rhbngAhqg+HnwO+DOwz+1f0I3bXkVY=
Subject key identifier: 46:DA:25:A1:EF:FF:FC:D6:08:7B:15:71:AD:4A:83:51:DA:2F:1A:9C
Authority key identifier: 78:70:54:B1:67:AA:98:84:1C:DC:2C:4B:A2:B8:61:39:AB:98:8E:7D
Certificate issuer: /CN=787054b167aa98841cdc2c4ba2b86139ab988e7d
Certificate serial: 0192AE857D926151F53C023AF2AFA3543020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHBUsWeqmIQc3CxLorhhOauYjn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.mft
Manifest number: 1041
Signing time: Mon 21 Oct 2024 10:00:36 +0000
Manifest this update: Mon 21 Oct 2024 10:00:36 +0000
Manifest next update: Tue 22 Oct 2024 10:00:36 +0000
Files and hashes: 1: 2KQvHEjDwPVipXRixpb-69LSYjI.roa (hash: umFh++hMqtfUkinUjOsedL2JD00xG5j8sp7QqKC3S5U=)
2: eHBUsWeqmIQc3CxLorhhOauYjn0.crl (hash: 3WT2CjcI5cYD0GgG8I8nQ+9bHYrcsjelq+ET/Hzn58I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:85:7d:92:61:51:f5:3c:02:3a:f2:af:a3:54:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787054b167aa98841cdc2c4ba2b86139ab988e7d
Validity
Not Before: Oct 21 10:00:36 2024 GMT
Not After : Oct 22 10:00:36 2024 GMT
Subject: CN=46da25a1effffcd6087b1571ad4a8351da2f1a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:17:35:95:7f:2c:83:5a:6f:43:58:0f:c0:
c8:03:09:24:95:a7:a1:91:42:de:ec:87:cf:c0:d4:
6c:9c:d7:c3:b7:98:91:d7:d8:23:37:68:53:ac:46:
9a:e9:cb:03:d1:00:91:e2:f5:a4:3b:5e:79:d2:96:
3f:fd:3e:79:e0:77:c4:4f:3c:29:98:d9:67:13:6d:
c6:eb:85:a4:c8:cc:ef:09:9b:fa:c0:ea:a9:cc:e6:
94:b6:91:a7:c6:f3:8c:48:a9:f0:55:bb:66:c6:12:
8c:7b:e8:c6:bd:5a:af:92:6a:9e:55:4a:16:02:40:
77:13:73:e8:3e:4a:dd:da:2d:0b:5d:68:55:2a:08:
61:c5:3c:99:28:fe:e6:3b:f1:d8:1b:e9:44:b4:71:
c5:41:68:ab:6e:12:53:66:80:98:21:e3:f4:58:87:
46:6d:99:93:00:7a:07:e2:40:7b:71:1a:2a:e5:a7:
38:7b:3a:64:35:33:43:58:5b:90:cb:b1:cd:8a:20:
ef:df:e9:82:bb:6a:b7:88:90:d6:46:50:f6:8b:d4:
48:67:57:6f:96:f8:38:c3:50:7d:75:3e:64:76:b2:
a8:4c:6b:9c:02:18:57:7b:43:11:13:a3:d8:1d:e8:
90:57:03:68:e7:53:8f:de:56:3c:72:22:9b:72:8b:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DA:25:A1:EF:FF:FC:D6:08:7B:15:71:AD:4A:83:51:DA:2F:1A:9C
X509v3 Authority Key Identifier:
keyid:78:70:54:B1:67:AA:98:84:1C:DC:2C:4B:A2:B8:61:39:AB:98:8E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHBUsWeqmIQc3CxLorhhOauYjn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ffa703-b462-4022-9e1e-6d704cda0eb9/1/eHBUsWeqmIQc3CxLorhhOauYjn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:33:88:34:80:61:b5:86:6d:6d:07:90:b1:8c:f2:56:50:3b:
63:6c:6a:aa:d2:a8:16:ac:d5:0e:1b:10:26:05:3c:54:d6:a4:
82:02:a1:5a:0a:a4:ab:df:79:20:56:75:b9:c3:d0:d6:2c:8b:
19:4c:c9:84:f7:2f:6c:80:31:2b:58:16:c8:0b:a3:98:8d:f2:
9c:a3:65:e3:84:50:62:de:34:07:74:b9:95:17:b1:d3:68:e8:
be:ab:7d:46:13:89:89:da:63:a9:23:0c:32:7e:2d:69:7d:87:
36:c4:30:58:de:99:7b:46:8a:93:f2:38:a4:8b:79:86:a5:7b:
7b:61:5f:4c:70:20:df:12:64:bb:db:7c:d2:7d:55:6b:fd:dc:
00:38:f6:ef:47:a7:d6:e2:42:c7:1d:ab:01:69:59:de:d3:7f:
90:f7:dc:e4:17:cf:7d:d8:88:21:8c:cd:f4:65:10:19:6f:c9:
b3:66:11:03:2a:c7:f3:f4:44:72:67:7f:ee:2c:b6:f0:fb:9a:
38:69:54:08:6f:54:86:ad:36:4d:21:0c:d0:77:7b:61:7e:04:
b6:40:00:c2:79:e7:68:0d:c9:d2:9f:6c:db:d3:05:6c:bf:85:
3a:ee:d8:a2:33:bf:23:87:21:7d:bf:38:a1:a1:d7:b9:64:c3:
29:c0:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:21:34 2024 by rpki-client on console.sobornost.net