Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/tA-XFvpjPjdirWLFQSzgC2cB2Lc.mft
File: tA-XFvpjPjdirWLFQSzgC2cB2Lc.mft (raw, json)
Hash identifier: vyfYQeCW/UcqALeS4MbcSi3GbbWrznJiyBEKiaBW9Us=
Subject key identifier: C8:2B:CA:03:B0:B5:58:EA:15:FA:CB:F7:56:06:11:5B:A0:FE:22:23
Authority key identifier: B4:0F:97:16:FA:63:3E:37:62:AD:62:C5:41:2C:E0:0B:67:01:D8:B7
Certificate issuer: /CN=b40f9716fa633e3762ad62c5412ce00b6701d8b7
Certificate serial: 018ACAB63618BCCBD8F24EA7EFF4BB9C7CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA-XFvpjPjdirWLFQSzgC2cB2Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/tA-XFvpjPjdirWLFQSzgC2cB2Lc.mft
Manifest number: 086C
Signing time: Mon 25 Sep 2023 05:00:53 +0000
Manifest this update: Mon 25 Sep 2023 05:00:53 +0000
Manifest next update: Tue 26 Sep 2023 05:00:53 +0000
Files and hashes: 1: tA-XFvpjPjdirWLFQSzgC2cB2Lc.crl (hash: KilJdvyx60rxuG1ampFPcFO8Qytx4lnoWSTZtblsSas=)
2: zSfvDioWYqJpld5iL76tNM-GO1g.roa (hash: QK2K0YwBk1298h2nUtFdtL2b3g2U82jT9eKRALa1lT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:b6:36:18:bc:cb:d8:f2:4e:a7:ef:f4:bb:9c:7c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40f9716fa633e3762ad62c5412ce00b6701d8b7
Validity
Not Before: Sep 25 05:00:53 2023 GMT
Not After : Sep 26 05:00:53 2023 GMT
Subject: CN=c82bca03b0b558ea15facbf75606115ba0fe2223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8b:24:cd:be:eb:64:47:0a:76:68:ff:3c:c4:
4b:fb:e8:ff:65:50:ef:4d:26:d0:e2:7b:ec:09:3d:
56:ce:05:3a:2c:7f:40:a1:82:51:9e:3f:94:b2:66:
00:79:c3:14:75:5d:7f:41:48:4c:17:80:0c:3d:f3:
71:77:ad:aa:ef:bd:43:64:3c:82:2b:8f:94:05:16:
ac:b0:2c:6e:88:2d:3c:fa:a0:52:21:60:e3:47:e8:
03:1a:d7:23:3f:2e:6c:af:ab:9d:ce:f8:6b:ac:8b:
1a:22:d2:71:9d:7f:e6:7b:58:ca:ad:d5:86:74:34:
d2:0c:27:79:43:aa:c9:b4:25:f4:86:b5:ec:26:77:
b1:d7:cd:3a:79:7e:3a:64:7a:13:c8:dc:2f:05:0a:
0b:38:36:b2:8a:eb:78:81:f4:92:4f:c1:9d:46:a5:
29:d3:3f:76:28:e5:0f:de:fa:5e:c1:21:a3:51:31:
4f:51:e5:d0:c0:39:01:9f:92:79:fa:73:39:c8:33:
53:1b:31:14:90:24:09:37:d2:1c:7e:dd:b5:1b:8b:
71:74:60:b5:93:5f:79:b1:79:50:da:5f:8c:8c:1a:
93:4f:3b:ec:82:8d:ad:2a:fe:a8:05:cf:50:06:d1:
b7:1d:df:12:a1:a1:2d:b4:53:ff:ac:e2:ba:1e:19:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2B:CA:03:B0:B5:58:EA:15:FA:CB:F7:56:06:11:5B:A0:FE:22:23
X509v3 Authority Key Identifier:
keyid:B4:0F:97:16:FA:63:3E:37:62:AD:62:C5:41:2C:E0:0B:67:01:D8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA-XFvpjPjdirWLFQSzgC2cB2Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/tA-XFvpjPjdirWLFQSzgC2cB2Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c81451-9f4d-4ffe-bb2e-52011d5ddf64/1/tA-XFvpjPjdirWLFQSzgC2cB2Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bc:78:db:e1:6f:3e:66:6e:61:b2:ff:f0:a7:77:e0:03:df:
75:c0:c3:1e:1e:f2:0d:96:5a:e8:e5:6d:4b:0c:a7:fc:a0:da:
ee:0e:03:92:cb:8c:e3:55:92:ec:92:d2:77:5e:f9:5b:e1:09:
d6:c3:6f:f6:46:9d:33:ac:9c:ce:21:bf:29:2b:b1:c9:81:d0:
7c:66:57:f6:43:23:76:9f:9c:f4:09:f6:1d:38:3d:40:90:04:
90:73:37:38:4f:0e:6a:6f:c2:9d:8e:bb:1b:fa:90:6f:fe:42:
32:61:d8:d4:53:38:cd:a3:3b:46:24:75:9b:68:f4:b7:f1:55:
95:01:2c:51:c9:a7:92:46:8c:60:d7:9e:fb:2b:68:28:14:ea:
f4:0b:03:3a:e3:61:ba:7b:0f:2b:b0:33:dc:ff:ea:e5:65:0e:
ff:73:65:56:f3:a6:1c:f4:cf:b5:e8:bc:a5:3a:9a:34:a0:44:
df:70:67:35:52:56:12:f6:ba:9d:02:f8:27:1c:50:10:59:3c:
27:a9:c8:02:e0:83:ec:8d:bd:f2:03:8d:75:85:d1:1a:eb:57:
09:68:7e:6a:50:7f:3c:c1:c5:e1:60:12:66:f1:be:4d:21:7d:
42:4a:2b:9c:2c:20:3d:74:fb:8b:a9:09:c8:f1:7f:b3:e0:8b:
62:8a:88:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net