Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/be443e-3ef0-4e96-b94b-d693fecd9efe/1/x343ozEj9IxbkB5rmb3DkNu3AUw.mft
File: x343ozEj9IxbkB5rmb3DkNu3AUw.mft (raw, json)
Hash identifier: T4QEs/FeVHSLxpm4Lu0ODTqnZfj5YMYX5DKCZ9zDkok=
Subject key identifier: C0:F5:79:61:A4:89:66:33:EC:B5:89:94:0B:38:D8:7A:E3:A9:97:7C
Authority key identifier: C7:7E:37:A3:31:23:F4:8C:5B:90:1E:6B:99:BD:C3:90:DB:B7:01:4C
Certificate issuer: /CN=c77e37a33123f48c5b901e6b99bdc390dbb7014c
Certificate serial: 018CD7233E0FACFD5C6B8A318C99201B06C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x343ozEj9IxbkB5rmb3DkNu3AUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/be443e-3ef0-4e96-b94b-d693fecd9efe/1/x343ozEj9IxbkB5rmb3DkNu3AUw.mft
Manifest number: 100F
Signing time: Fri 05 Jan 2024 01:01:00 +0000
Manifest this update: Fri 05 Jan 2024 01:01:00 +0000
Manifest next update: Sat 06 Jan 2024 01:01:00 +0000
Files and hashes: 1: x343ozEj9IxbkB5rmb3DkNu3AUw.crl (hash: G+AGcJyjS7Oii3sbeVm2PdLMZN01tknt7WhQZZOQg/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d7:23:3e:0f:ac:fd:5c:6b:8a:31:8c:99:20:1b:06:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77e37a33123f48c5b901e6b99bdc390dbb7014c
Validity
Not Before: Jan 5 01:01:00 2024 GMT
Not After : Jan 6 01:01:00 2024 GMT
Subject: CN=c0f57961a4896633ecb589940b38d87ae3a9977c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:c8:ba:b0:bb:cb:d8:3b:85:4e:86:68:c0:
07:66:99:d9:f0:f3:b8:94:56:c6:da:5c:d9:4d:c2:
3b:2e:07:ca:7d:97:a2:f1:77:37:36:f9:8c:69:c4:
f4:85:19:03:ad:41:da:2b:69:6e:d2:f0:09:85:6b:
ad:ae:67:90:6a:e1:48:dc:9b:29:cc:ae:8c:5a:f9:
cf:af:e1:12:54:3d:51:a9:52:33:02:90:27:9b:69:
be:77:5c:fa:a5:76:76:9b:f5:76:2e:06:70:9c:83:
57:04:30:69:a4:4b:44:26:87:ce:97:ef:f1:73:6d:
d6:fe:bf:32:51:a9:20:84:92:0d:e9:ba:b4:b3:7d:
7f:c1:94:ed:01:43:bd:ad:ce:51:07:7c:50:ef:f4:
9c:5f:66:bf:79:ed:c6:54:78:c6:b7:d6:a2:cb:49:
41:99:58:12:4b:23:5c:56:b3:c5:7f:70:06:9c:13:
0d:1e:01:a5:79:82:a0:0c:02:94:a9:4c:e3:3b:a3:
e3:3d:bf:e4:b9:98:63:16:3b:fe:0b:74:06:4f:b5:
86:ca:bb:ee:9b:12:96:51:1e:51:95:76:60:e0:4c:
90:8b:1d:e0:0c:8a:0e:c5:27:b5:5e:33:f0:c0:66:
2c:cb:b2:8d:f5:2a:a0:52:b6:bc:1d:db:c3:b8:9b:
db:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F5:79:61:A4:89:66:33:EC:B5:89:94:0B:38:D8:7A:E3:A9:97:7C
X509v3 Authority Key Identifier:
keyid:C7:7E:37:A3:31:23:F4:8C:5B:90:1E:6B:99:BD:C3:90:DB:B7:01:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x343ozEj9IxbkB5rmb3DkNu3AUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/be443e-3ef0-4e96-b94b-d693fecd9efe/1/x343ozEj9IxbkB5rmb3DkNu3AUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/be443e-3ef0-4e96-b94b-d693fecd9efe/1/x343ozEj9IxbkB5rmb3DkNu3AUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:dd:46:a3:05:46:a7:ce:f0:04:5c:96:6f:22:11:f8:25:8d:
42:aa:bd:68:e6:0d:09:7b:92:ae:de:14:4d:d6:a6:75:92:a9:
4b:55:1d:3e:6e:d2:9c:b0:b1:38:69:68:5c:03:fb:12:45:98:
c9:33:04:2a:23:14:e9:45:df:23:a9:e2:24:ec:fb:5e:01:ab:
0e:2c:3d:5a:fd:83:e6:01:82:3c:d8:27:e2:11:cf:29:e7:3d:
63:97:a2:60:b7:9e:26:39:a1:7e:02:6f:4d:98:9c:64:88:24:
0a:fb:9e:32:9f:40:1f:b2:0b:33:7c:b1:49:53:82:81:43:d3:
40:89:5a:c8:cc:b1:d3:0d:f2:63:0f:9b:46:a4:b4:ff:0e:c8:
98:9d:de:e8:f8:7a:e9:6b:a5:7a:fc:71:40:bd:1a:93:4e:ca:
d8:1a:50:93:27:02:4d:22:dd:22:40:68:83:fa:f0:c3:88:e2:
e8:53:41:04:14:39:75:47:eb:a8:e5:29:5e:70:68:44:12:53:
d6:3b:63:94:26:41:e4:cb:5d:09:43:b1:e3:d7:0a:df:a4:87:
52:8f:40:94:4a:66:3b:7c:6a:f1:d3:5e:43:22:89:53:b5:ad:
28:87:d4:ac:e0:80:45:d5:84:95:85:a8:09:01:1a:6d:48:fc:
12:16:6c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 14:35:23 2024 by rpki-client on console.sobornost.net