Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.mft
File: or9t5YmAH-48IdrbfkgPxcWPzo8.mft (raw, json)
Hash identifier: /SHprwCzS8IqRS8LwcPo5PqMKwD6S1shrNkwyzTTmV0=
Subject key identifier: E6:83:C3:37:76:19:5A:02:06:60:F4:8D:24:A7:51:F5:4E:8B:31:C9
Authority key identifier: A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
Certificate issuer: /CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
Certificate serial: 018BCCA237117C406D5A6A52F80C6CCDFE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.mft
Manifest number: 07EB
Signing time: Tue 14 Nov 2023 07:01:04 +0000
Manifest this update: Tue 14 Nov 2023 07:01:04 +0000
Manifest next update: Wed 15 Nov 2023 07:01:04 +0000
Files and hashes: 1: GZu4yn4ESi88WYOU1FX-mSHFLG4.roa (hash: p7JbmuWeFq8+tXy9HvJctse+MK620Dfw+5qu8j3wKmc=)
2: or9t5YmAH-48IdrbfkgPxcWPzo8.crl (hash: VW+qDaD7nfeR6fY5wak7N2tLezSnK4PDj2d8Sryo3Ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:a2:37:11:7c:40:6d:5a:6a:52:f8:0c:6c:cd:fe:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2bf6de589801fee3c21dadb7e480fc5c58fce8f
Validity
Not Before: Nov 14 07:01:04 2023 GMT
Not After : Nov 15 07:01:04 2023 GMT
Subject: CN=e683c33776195a020660f48d24a751f54e8b31c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:ee:dc:01:d2:d8:22:17:fd:ce:13:2a:c4:
47:03:94:c7:de:be:a2:f1:08:2b:f7:f6:06:a1:25:
71:84:a9:15:77:90:63:40:51:8f:81:d4:52:c0:53:
c4:5a:1e:e8:b8:57:61:64:ef:ae:f9:ba:69:5e:e1:
a7:53:30:2b:a9:7b:76:f6:31:b7:72:13:39:14:8b:
e4:8d:a3:73:7b:3a:20:ce:cc:96:90:22:e6:28:98:
38:ed:b5:56:2a:5b:e5:f9:e6:a6:2a:b3:b8:3a:72:
f3:22:36:2b:55:bc:77:36:a6:73:13:02:a7:e0:dd:
76:b6:38:1e:55:95:ce:4b:43:64:05:73:2b:63:f6:
2f:8f:fc:49:0b:97:f4:20:1d:49:3c:ad:f3:23:56:
23:1f:54:9a:4f:71:e2:2c:ef:78:29:c2:43:93:62:
12:b0:4f:fc:4c:b6:d2:d2:e5:d6:14:41:85:b8:f3:
d6:49:69:84:ff:07:d0:2f:89:15:db:fb:bf:b0:ea:
9d:18:95:3f:fc:59:8b:9b:71:80:21:ae:cd:5c:fb:
b6:78:b3:31:89:53:eb:bb:3d:f5:a0:8c:75:a0:ab:
f3:e8:3e:32:c0:7f:c3:3c:40:99:30:34:de:89:95:
cc:14:17:7a:b7:6b:6a:0b:b9:2c:4f:ef:e5:1f:cc:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:83:C3:37:76:19:5A:02:06:60:F4:8D:24:A7:51:F5:4E:8B:31:C9
X509v3 Authority Key Identifier:
keyid:A2:BF:6D:E5:89:80:1F:EE:3C:21:DA:DB:7E:48:0F:C5:C5:8F:CE:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/or9t5YmAH-48IdrbfkgPxcWPzo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2be87f-282c-4127-bf68-561407a83e35/1/or9t5YmAH-48IdrbfkgPxcWPzo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:eb:8b:f3:6e:d1:66:85:cb:57:f9:fd:ac:d3:f4:68:1c:32:
de:6c:07:29:10:1c:e0:ee:b1:3d:87:3b:1d:1f:44:3c:e9:da:
7b:42:76:fa:c5:ab:3f:40:9d:c8:ab:ff:ab:c6:9c:24:6a:01:
90:7a:61:17:18:ea:fa:66:89:be:a9:b0:fa:14:14:ee:12:26:
5d:75:b6:50:53:7f:81:a5:d5:37:65:0b:69:63:31:24:ff:dd:
95:e2:fb:69:b1:63:fb:54:51:04:aa:e4:82:00:ef:7b:28:d0:
54:08:b7:1a:4e:46:d5:b5:0f:a0:14:66:c7:f5:34:3e:16:7e:
33:d3:b3:4d:c1:e7:df:0f:52:b6:fe:e4:aa:3d:aa:b3:88:f8:
0f:ed:cf:30:11:ce:df:72:1c:8a:b3:51:93:ae:f0:0b:90:96:
6a:98:54:aa:0f:27:82:fa:66:f4:d1:f2:87:32:01:78:ac:ab:
ec:e5:7a:9a:55:b3:f9:00:c1:54:bd:a6:ca:76:2b:9e:31:86:
f1:61:c1:98:e3:42:3a:22:2e:46:52:52:1d:a5:e5:d3:cb:d4:
d9:18:84:1c:51:b3:f5:b3:ca:8f:ce:b5:89:0f:7c:13:b9:9a:
43:20:90:fa:6c:64:30:b6:9b:f0:d2:95:b7:71:47:6a:59:96:
4d:46:e3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net