Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.mft
File: 0JB4V5jOxnafF83XXL-q8vyGXOY.mft (raw, json)
Hash identifier: JurSkwe75TLaPLl2Ui7HEwhH9kUuwhtwOZ/7LBrI2+w=
Subject key identifier: 48:A9:6F:C3:11:A3:FC:0F:13:6D:29:C7:E6:0C:E6:59:72:90:15:B3
Authority key identifier: D0:90:78:57:98:CE:C6:76:9F:17:CD:D7:5C:BF:AA:F2:FC:86:5C:E6
Certificate issuer: /CN=d090785798cec6769f17cdd75cbfaaf2fc865ce6
Certificate serial: 018FE5EAFAEB4926BC7428A0772F72EC1225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JB4V5jOxnafF83XXL-q8vyGXOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.mft
Manifest number: 11A8
Signing time: Wed 05 Jun 2024 01:02:13 +0000
Manifest this update: Wed 05 Jun 2024 01:02:13 +0000
Manifest next update: Thu 06 Jun 2024 01:02:13 +0000
Files and hashes: 1: 0JB4V5jOxnafF83XXL-q8vyGXOY.crl (hash: 2f0WRJYaiLmnljYaCPTn3T0GJsXRRv1/2MBTPIi1+zQ=)
2: SW7S7ENjk2XhNxzMSYkKNasvO_Y.roa (hash: tk06mqNFbwv2K0yWHbdVofsS7zLFbIqcL7o3Zrs1m08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e5:ea:fa:eb:49:26:bc:74:28:a0:77:2f:72:ec:12:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d090785798cec6769f17cdd75cbfaaf2fc865ce6
Validity
Not Before: Jun 5 01:02:13 2024 GMT
Not After : Jun 6 01:02:13 2024 GMT
Subject: CN=48a96fc311a3fc0f136d29c7e60ce659729015b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:c4:4a:44:b0:a8:12:bd:c6:a2:91:c6:00:
13:15:72:1e:0d:78:a1:2f:eb:78:b4:a2:85:dd:dc:
61:96:87:16:39:cf:9c:3b:79:12:70:a4:40:a8:03:
43:1c:1f:3f:52:42:ba:9d:1e:72:a7:1e:d1:c4:75:
83:63:33:c4:2b:d4:49:b0:54:a0:6e:df:e4:19:73:
67:8a:f7:11:63:83:09:02:c2:d6:87:3c:ad:75:6c:
ae:0d:37:e0:d8:d5:9a:a2:2e:75:3d:46:74:be:27:
e2:76:1c:2d:fe:c5:43:00:07:5a:5b:67:21:b7:9e:
81:a0:9f:eb:c0:1d:71:e2:11:b5:a3:64:27:48:35:
f7:a7:15:85:1c:f0:51:51:6d:bf:f1:52:8f:a9:05:
e9:f3:10:a5:35:09:e0:10:0c:49:a5:40:72:f0:fd:
05:6a:be:7d:3f:dd:32:54:1c:1f:30:37:91:65:45:
c4:b8:f9:d3:20:20:82:d4:d6:4d:72:5d:76:c4:9c:
dd:57:5c:87:12:66:db:d5:92:29:92:da:fb:d6:aa:
eb:2b:75:0c:85:3e:0e:e6:39:33:38:fd:e3:f9:19:
07:ae:57:52:1e:ac:8f:01:dc:17:e4:19:bf:80:58:
60:58:fa:0b:18:a2:32:4b:40:9c:8f:50:74:d9:f6:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A9:6F:C3:11:A3:FC:0F:13:6D:29:C7:E6:0C:E6:59:72:90:15:B3
X509v3 Authority Key Identifier:
keyid:D0:90:78:57:98:CE:C6:76:9F:17:CD:D7:5C:BF:AA:F2:FC:86:5C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JB4V5jOxnafF83XXL-q8vyGXOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/2709c7-8297-43cf-8d89-7a4a8546f9f7/1/0JB4V5jOxnafF83XXL-q8vyGXOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a6:ea:1d:6d:81:56:db:59:1a:02:d6:da:3e:cb:fb:dc:1a:
ae:74:3f:eb:83:33:99:62:d8:41:0b:fe:f7:52:d0:53:5f:4a:
93:71:9e:f6:e9:1a:19:af:ca:0a:26:33:12:37:8b:28:2c:f7:
3a:ec:9f:ba:b8:2b:93:27:0d:c1:f4:55:40:1a:0a:8b:62:57:
f7:91:a6:e7:b8:43:57:1f:3a:f0:1e:8d:f0:bb:07:f5:0d:ba:
98:08:a8:09:82:fc:38:4b:4d:8b:ec:1e:52:1c:c5:fb:1a:3f:
ef:02:b6:7d:da:2d:6b:ff:74:6d:fd:3e:5c:6e:ad:fc:6a:93:
67:e7:a7:bd:2f:ff:90:e2:23:f1:5a:c7:c7:50:60:5b:b0:43:
ed:cb:4e:66:bb:e1:32:78:bc:4b:63:37:b1:8b:c7:67:16:b8:
ba:6d:34:d3:44:3a:6f:c7:d2:c2:45:a4:cf:ec:4c:4a:e6:2f:
7a:49:60:62:6f:41:d5:53:51:33:d1:76:30:2e:f8:a1:b8:8f:
1d:c1:e2:fa:41:37:32:af:1c:c3:05:4c:69:be:60:e6:2e:d8:
fd:4e:d2:00:28:bf:68:3e:be:88:f4:a6:ba:77:3d:50:0a:41:
e7:a4:91:af:e1:95:3d:3e:63:5d:9e:22:0b:4e:a5:a9:ce:ea:
15:fb:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:55 2024 by rpki-client on console.sobornost.net