Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.mft
File: 37M6rDTClpjzL2oAkpMdL-Ipgxc.mft (raw, json)
Hash identifier: xULmer9sHMMOUhy8GFL4I/980otL0q9EF7YG/J3z9f4=
Subject key identifier: A1:4E:7C:FD:F8:90:12:51:2E:F4:36:EC:D6:C8:16:99:E2:20:68:19
Authority key identifier: DF:B3:3A:AC:34:C2:96:98:F3:2F:6A:00:92:93:1D:2F:E2:29:83:17
Certificate issuer: /CN=dfb33aac34c29698f32f6a0092931d2fe2298317
Certificate serial: 0192AE87980C41CFAEAF366A6B722E8ECBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37M6rDTClpjzL2oAkpMdL-Ipgxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.mft
Manifest number: 1318
Signing time: Mon 21 Oct 2024 10:02:54 +0000
Manifest this update: Mon 21 Oct 2024 10:02:54 +0000
Manifest next update: Tue 22 Oct 2024 10:02:54 +0000
Files and hashes: 1: 37M6rDTClpjzL2oAkpMdL-Ipgxc.crl (hash: pTO8N41Z75/thg+KaQWFQB/ezr7v7axGsL+/9dqhll4=)
2: wIShcJxugqdSi-FrYf1a9XCbgVY.roa (hash: qYaYsBJ0SDRaC86PjhB7vgbxHkPkAV2+87CVLBF8O4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:87:98:0c:41:cf:ae:af:36:6a:6b:72:2e:8e:cb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb33aac34c29698f32f6a0092931d2fe2298317
Validity
Not Before: Oct 21 10:02:54 2024 GMT
Not After : Oct 22 10:02:54 2024 GMT
Subject: CN=a14e7cfdf89012512ef436ecd6c81699e2206819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:a1:73:3c:36:1f:a9:8c:16:24:2d:de:f1:
9f:5b:64:b8:c6:67:27:54:aa:3d:3b:5e:a5:e5:c5:
fb:c6:fe:ed:03:69:c0:6d:04:cf:40:1c:97:09:04:
d0:6c:7e:b0:cc:b0:9f:ae:6a:03:bf:c0:31:73:83:
70:48:f4:5b:56:be:b4:6b:ba:b7:cc:2a:09:2e:35:
ef:26:3f:8b:b4:58:ff:54:e1:91:ee:0d:8e:9b:c2:
2e:ed:e7:7e:8c:ad:53:f9:78:f8:b1:23:30:7c:41:
5c:d8:c3:48:da:3f:5e:1e:2c:e7:5b:ee:00:95:5c:
e4:81:46:65:46:ba:fb:6a:8f:95:35:d4:de:a6:5a:
85:6e:13:46:e1:65:e1:f7:d8:84:9a:02:e4:6f:d9:
0c:47:09:79:a1:28:d1:69:0f:dd:50:da:09:a2:49:
e4:c8:e8:fb:28:9e:a9:3c:6e:8a:40:a8:35:c5:a8:
d1:3e:39:82:cc:ca:f0:b1:d1:79:a2:79:48:22:32:
c8:3e:4e:30:04:2a:77:6a:3e:fd:8e:10:76:0f:11:
75:a8:50:4b:9f:4d:b3:c4:2b:3d:67:a5:80:0e:a4:
40:40:e9:cc:97:0d:f3:02:0a:c2:57:32:c0:eb:85:
53:8d:6e:88:4f:37:76:f6:b9:53:55:30:e4:60:ce:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:7C:FD:F8:90:12:51:2E:F4:36:EC:D6:C8:16:99:E2:20:68:19
X509v3 Authority Key Identifier:
keyid:DF:B3:3A:AC:34:C2:96:98:F3:2F:6A:00:92:93:1D:2F:E2:29:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37M6rDTClpjzL2oAkpMdL-Ipgxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb52a4-0473-4a65-b826-5f82fbf95540/1/37M6rDTClpjzL2oAkpMdL-Ipgxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c8:c8:60:ce:e8:92:4c:4c:81:4c:09:e9:fb:21:07:16:c6:
70:d2:32:e0:5b:d3:b4:20:6f:5e:7b:f8:ff:f4:c5:a4:94:91:
03:11:6c:80:fe:8a:fa:0e:1b:ec:8e:86:32:87:a1:51:96:68:
6b:4d:66:b0:59:60:d2:1e:18:04:6d:4d:02:20:8d:79:b6:dc:
78:ec:e4:0b:41:45:08:ac:fc:77:0d:26:85:a9:cc:10:2a:09:
7f:2e:dd:23:79:4d:2d:d8:78:d2:37:6e:78:8c:0c:c8:80:b2:
49:5d:49:80:96:fc:11:19:ea:5c:59:33:aa:5b:fe:fc:28:c7:
a6:c8:7e:ad:39:6a:1e:a3:50:44:ad:d2:c9:f6:2b:67:a9:47:
28:ae:4f:3f:83:fe:91:1e:19:ce:7c:38:0b:d7:70:c6:35:a8:
69:1a:58:6a:45:d2:95:3d:a1:17:28:2c:c0:12:4e:f1:df:e5:
20:5d:ba:4f:02:aa:3d:d3:4c:fd:71:55:77:49:b8:11:58:75:
a3:ae:23:46:66:7f:a3:c6:b8:f9:0e:ea:dd:1c:db:50:c4:e3:
d9:61:c0:8d:4e:56:09:b3:e7:e4:a6:69:74:ad:98:41:05:8a:
60:37:cc:8a:df:39:ef:36:08:b2:56:97:89:f5:1e:40:24:df:
a6:19:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:21:58 2024 by rpki-client on console.sobornost.net