Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.mft
File: hUnZLi3ZemFSRNVJyj9cxhWTLDw.mft (raw, json)
Hash identifier: CJDl8uJ3agG59TNNLxXqmH8619ox/zDOfP3NvTsXo9E=
Subject key identifier: 9C:D8:4A:8A:8F:8D:B0:A5:D7:B0:5B:69:74:37:E9:A1:2B:F0:5D:DB
Authority key identifier: 85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
Certificate issuer: /CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Certificate serial: 018CEDAB46CF8B31B343FEC4811B754D0B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.mft
Manifest number: 080D
Signing time: Tue 09 Jan 2024 10:01:14 +0000
Manifest this update: Tue 09 Jan 2024 10:01:14 +0000
Manifest next update: Wed 10 Jan 2024 10:01:14 +0000
Files and hashes: 1: GAwAhnhEUeBA2rEZ0olLS0vcp6k.roa (hash: LE2d9xMGdkNoX72UoIfKNzK76cxen8GPilrDVX6EJWc=)
2: hUnZLi3ZemFSRNVJyj9cxhWTLDw.crl (hash: 0waSm14/d0oKUTTOkGFI/dz1CmwUl5L023E+AOilkDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:ab:46:cf:8b:31:b3:43:fe:c4:81:1b:75:4d:0b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8549d92e2dd97a615244d549ca3f5cc615932c3c
Validity
Not Before: Jan 9 10:01:14 2024 GMT
Not After : Jan 10 10:01:14 2024 GMT
Subject: CN=9cd84a8a8f8db0a5d7b05b697437e9a12bf05ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:96:da:e8:bf:cc:3e:f7:ce:00:b7:37:01:
a2:95:03:e1:6b:94:5c:7b:1b:4f:43:74:f2:a5:8d:
ff:31:8a:79:21:d3:23:54:ba:11:15:36:97:5d:75:
99:d9:86:1f:fb:cf:a4:90:4d:ef:ed:4e:0f:6c:dc:
74:38:94:38:1f:20:1b:54:d3:5a:49:f8:e6:32:22:
90:55:b0:50:fd:85:c9:0f:15:bb:07:a0:ac:cd:16:
98:b8:2f:b1:58:2b:56:79:6d:07:eb:32:f4:74:ce:
a7:74:46:81:1a:00:08:67:d3:b6:7a:f7:3a:91:fd:
9f:07:48:af:3f:9b:82:2b:cd:c9:82:52:02:bc:27:
08:49:60:99:e2:ff:f6:94:0b:b9:73:f5:f4:b7:a2:
09:5b:28:83:e5:1a:2e:7e:92:ec:ca:c8:07:0d:2a:
8e:19:e8:00:2d:37:bb:90:a8:fa:ef:32:1d:ad:52:
7c:51:fa:48:56:bd:7d:42:d2:96:8f:53:bb:f8:70:
62:c3:3b:48:ca:b4:f0:07:f6:e8:c6:76:9a:21:b5:
f0:be:ec:c9:89:b0:3d:94:c8:f2:6f:82:69:ee:9b:
9c:6c:79:7e:20:3e:4b:e8:bb:74:39:e4:e8:d1:fd:
2c:23:f8:24:d6:8c:86:35:82:dc:9d:ee:92:56:04:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D8:4A:8A:8F:8D:B0:A5:D7:B0:5B:69:74:37:E9:A1:2B:F0:5D:DB
X509v3 Authority Key Identifier:
keyid:85:49:D9:2E:2D:D9:7A:61:52:44:D5:49:CA:3F:5C:C6:15:93:2C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUnZLi3ZemFSRNVJyj9cxhWTLDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c8d61b-e7d0-4568-976c-8e1ca85631d0/1/hUnZLi3ZemFSRNVJyj9cxhWTLDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c7:dc:2b:08:24:72:1b:70:f7:ff:f6:a5:43:27:f8:b4:5e:
51:16:94:3b:c4:ea:f5:7b:ff:63:f7:03:c1:c2:74:36:6d:b2:
0c:ef:2a:54:c6:0d:37:be:0e:96:be:e0:49:ed:ab:ac:0e:51:
a3:03:25:34:4c:7e:f6:25:c8:f3:8c:d9:77:82:84:ee:19:db:
00:4a:2c:3e:ba:58:2b:18:bc:fe:73:e9:58:0f:70:13:9c:f4:
5e:cc:4a:6e:43:7d:74:36:e8:2d:f4:fa:7d:1f:e7:37:64:7a:
e4:d4:51:74:dd:f3:31:04:4f:5b:e6:2c:d6:31:b1:02:8d:2e:
35:a7:04:79:0f:d7:20:7d:86:e6:74:0e:7b:1c:80:ba:ca:1f:
d8:c6:d2:e0:61:c2:1e:ee:71:4c:49:73:d2:f8:9c:fe:bb:43:
00:9d:fb:b8:fa:5f:52:3e:5a:5f:d9:54:71:39:8d:e8:07:10:
6c:bd:51:f4:8f:62:bb:b8:7a:da:cb:30:32:80:22:f8:b3:b9:
2a:5f:5e:62:3f:fa:15:98:ef:91:2b:20:ac:2e:a5:7e:4b:7a:
a2:4c:94:53:df:6e:c0:cf:83:97:35:8f:3f:ae:f8:a2:b8:db:
77:e7:74:1a:98:ef:25:9c:5f:af:ba:c9:39:37:5c:e9:55:fc:
c3:85:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:41 2024 by rpki-client on console.sobornost.net