Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
File: NNTev4f2fLtEI3OBfn1i91ilms0.mft (raw, json)
Hash identifier: 5dFSTpy3f4EMUxaSwWStBgSEhl3cKh0Sl1uFYTpB10M=
Subject key identifier: AC:6D:18:79:8A:C4:5E:98:43:61:1D:EE:08:66:A3:B8:EE:EC:35:FB
Authority key identifier: 34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
Certificate issuer: /CN=34d4debf87f67cbb442373817e7d62f758a59acd
Certificate serial: 018CEE4FDB64AD345310322F0BF487AB8480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
Manifest number: 080D
Signing time: Tue 09 Jan 2024 13:01:00 +0000
Manifest this update: Tue 09 Jan 2024 13:01:00 +0000
Manifest next update: Wed 10 Jan 2024 13:01:00 +0000
Files and hashes: 1: MyGPkACskWy7-5CvBoEuOKTBknU.roa (hash: py4bK8mc0WK/SG3BQK9xOE8sXhHJUWNhnU33XYtYB9I=)
2: NNTev4f2fLtEI3OBfn1i91ilms0.crl (hash: F5bQ/bqUQgX7KyE6fTUttpQNdSMZ+5Fh29BrRbFgtUE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:4f:db:64:ad:34:53:10:32:2f:0b:f4:87:ab:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d4debf87f67cbb442373817e7d62f758a59acd
Validity
Not Before: Jan 9 13:01:00 2024 GMT
Not After : Jan 10 13:01:00 2024 GMT
Subject: CN=ac6d18798ac45e9843611dee0866a3b8eeec35fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:e2:20:fa:b9:ae:6f:d3:d4:4b:8d:db:0a:
e8:f9:4d:1d:9e:cc:6a:e5:ee:8f:25:b7:e6:2f:78:
6c:36:73:bd:90:dd:e7:e1:c1:eb:88:0c:a2:48:ec:
90:33:28:02:f6:96:8c:02:d0:ce:54:6d:74:61:55:
8d:6d:da:0a:c3:15:37:ae:8f:b9:a8:76:0e:16:e0:
fc:ce:e7:64:3e:75:ca:a0:dc:30:9a:20:cb:dc:1a:
9d:37:33:07:51:07:53:d3:dc:1c:0c:c8:54:73:5a:
40:57:4d:3f:d3:26:33:e9:56:63:94:88:a5:63:fd:
37:2d:29:7a:7a:58:d3:dd:5d:71:32:d8:f9:9a:ff:
11:da:72:5e:bc:ec:ae:59:9d:98:f3:ba:00:91:a4:
4a:bd:4b:13:b6:7e:1a:52:41:25:4f:b1:29:49:f0:
8f:b5:7c:9a:56:5a:12:ce:2a:c2:06:bc:23:21:11:
cf:36:a8:f7:5d:e5:2a:45:15:47:aa:11:19:1b:c6:
af:a8:bc:94:df:91:02:44:07:65:c1:33:4f:79:eb:
43:d6:48:25:60:7a:aa:e2:34:7a:c4:c8:fc:da:41:
64:80:8d:9b:a9:14:d4:d3:d2:60:76:0a:76:e9:39:
79:9e:8f:1d:82:33:18:1a:5b:ba:f3:24:48:2a:de:
38:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:18:79:8A:C4:5E:98:43:61:1D:EE:08:66:A3:B8:EE:EC:35:FB
X509v3 Authority Key Identifier:
keyid:34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f0:9b:90:ab:dc:7d:9a:15:36:b8:ed:ad:6d:34:2a:92:d6:
fb:3c:8d:12:9d:7f:4c:07:4f:75:67:a4:d9:e6:a4:f8:75:a4:
64:dc:85:65:4a:17:d4:fd:6e:ae:f9:5c:da:a2:10:97:ed:5c:
c2:b3:b1:71:53:fe:5c:af:ea:68:6f:20:7d:50:73:57:a5:73:
b1:9d:23:23:8f:18:f5:09:32:d9:89:5b:1d:de:99:9e:de:95:
ba:dd:b3:1b:6e:d0:a1:ee:e7:4c:0e:42:4b:ba:2e:ed:c3:6f:
f4:d5:de:f7:05:4c:41:31:71:8e:b1:2e:2d:f2:d3:fd:14:6d:
70:c4:c8:a1:b4:09:8a:3a:f1:aa:91:7c:37:61:e0:fc:d7:ad:
6c:f7:6c:d6:d7:b4:41:6d:47:9c:e5:fe:ab:3b:8d:2c:be:ba:
4b:2b:23:42:48:49:6b:5c:95:07:24:1f:62:1c:a6:ca:77:96:
86:ed:b3:26:4d:d2:07:1e:f5:31:7c:e5:9a:ef:2f:31:54:b7:
3d:c2:2a:e0:25:67:b6:c1:5f:8d:fe:68:e5:15:1d:4c:6e:07:
38:48:04:47:00:b8:23:b9:a9:76:3a:8d:21:c1:dd:f4:f3:a7:
6d:fe:ec:6c:61:06:c2:89:b7:57:f4:b5:37:b6:a8:12:01:88:
f3:ef:ab:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:45 2024 by rpki-client on console.sobornost.net