Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
File: CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft (raw, json)
Hash identifier: gykg2ivpz7cnK8G35Jq3prBePFjv2T443VBrK7SmwtY=
Subject key identifier: E4:C2:98:6F:5F:04:FA:17:75:25:C2:E4:80:D7:DB:76:3C:A3:9A:11
Authority key identifier: 08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
Certificate issuer: /CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Certificate serial: 019345CC7F2B7631CA031B04FC1C887D8677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
Manifest number: 0B87
Signing time: Tue 19 Nov 2024 19:00:50 +0000
Manifest this update: Tue 19 Nov 2024 19:00:50 +0000
Manifest next update: Wed 20 Nov 2024 19:00:50 +0000
Files and hashes: 1: CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl (hash: i53TDOfz4RTHRwWdkigvKdOf07XgA4F7nzJ8oKmhKf0=)
2: KmQLXSMs_5aM5clCGXYUAIZuDaU.roa (hash: e463FBGgJ6GdCX1aWMV0J724CoCighITo++ybgu3xC8=)
3: Tnv9tm27_aRw7gIu_4dLSm7uZTQ.roa (hash: ws+faqUn44taqtfl9OSJtYMKTJrksdnBu2trOoYcgVw=)
4: aU6VQGsUIKK43zEV9OBVpSYOHxo.roa (hash: qhiKoRYVSj7bpwccZvcm3wYiP3VCymqnt6CJF1KXABQ=)
5: l_ScJkwYKewxtYg8QlHHPgeYeOM.roa (hash: 8hyiyuVYFwIu+zr/PLLYY+h3cIS9CApRVhFEhVP2IkI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:cc:7f:2b:76:31:ca:03:1b:04:fc:1c:88:7d:86:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Validity
Not Before: Nov 19 19:00:50 2024 GMT
Not After : Nov 20 19:00:50 2024 GMT
Subject: CN=e4c2986f5f04fa177525c2e480d7db763ca39a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:6c:18:66:89:96:c6:61:35:b1:91:d6:2a:
8d:42:a5:0b:ee:bf:91:cc:4b:5a:e0:76:33:45:5b:
f5:f7:58:5d:14:db:22:95:9c:01:71:3e:d3:d9:f4:
7e:68:b3:32:b8:16:50:88:50:43:4d:80:4b:bd:f6:
65:3c:ed:53:b8:22:eb:a6:9c:a8:87:89:fe:2d:51:
0a:3d:1f:ac:e0:47:dd:a3:e4:8d:ae:7f:89:48:48:
5b:57:03:5a:13:95:91:71:f7:e7:25:94:1f:25:eb:
27:85:b1:aa:37:03:5b:3a:20:5c:dc:40:3b:f1:d5:
4d:48:4f:1a:98:d8:d1:83:85:80:ce:31:37:ec:f9:
f0:17:fb:12:a5:39:eb:1c:f8:f4:bd:e2:e4:98:31:
05:dc:8e:38:39:8d:8a:6e:00:15:8e:78:00:9a:e2:
5d:29:81:1e:11:36:21:a8:37:e7:c8:0f:45:5b:50:
42:6f:fb:72:24:0b:08:11:2a:d6:03:9d:4d:f9:9a:
2f:2f:2d:7a:88:26:e5:43:e0:cb:1d:3c:d2:56:31:
56:ae:f4:30:6a:b6:75:ce:78:ff:50:8a:c5:35:b7:
f7:70:43:19:66:c6:ef:a8:c6:d9:5a:f4:e8:c1:00:
0b:31:49:60:ee:4e:30:ef:9c:95:09:e4:03:4f:25:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C2:98:6F:5F:04:FA:17:75:25:C2:E4:80:D7:DB:76:3C:A3:9A:11
X509v3 Authority Key Identifier:
keyid:08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:58:61:0b:63:73:cd:79:e2:e2:4f:e6:f2:8c:c3:32:88:a0:
dc:ef:7f:69:81:0a:a8:04:98:6b:3c:02:c3:6f:a7:bc:d0:5e:
ee:23:cf:f5:00:d7:42:e1:ad:38:fb:c3:0c:f2:e5:af:0a:73:
e3:5b:51:61:c9:03:00:53:47:3d:48:d1:10:87:e2:07:77:1c:
6e:b1:46:8a:76:d0:b2:28:14:b0:c1:47:c3:91:f4:39:d1:6d:
69:64:8a:35:45:41:cc:11:6b:1c:14:f8:ff:ea:bb:c9:48:0f:
a5:26:e0:91:5e:b1:be:13:ee:31:08:22:51:d8:db:7d:ee:11:
3c:1f:50:32:f3:d2:dd:f1:ea:43:40:6e:95:5b:5e:cb:6f:da:
9e:bd:41:4e:fc:5c:13:7f:18:08:3f:cb:3f:80:1a:c8:e3:78:
c6:2b:af:80:ce:00:13:42:22:68:ff:ff:c5:25:77:9d:cc:43:
4b:41:77:cc:6f:a5:d2:25:3a:51:fb:fd:62:6b:e3:a2:ed:cb:
0d:56:34:b8:0f:a5:e0:72:89:09:57:48:f6:12:6b:42:74:52:
c2:85:7c:9f:2d:60:c6:3e:31:d2:98:a9:35:eb:96:12:df:55:
8f:b7:b1:44:5b:a1:fb:f4:3d:2a:d7:6e:0f:4a:d7:8e:a0:71:
c8:4d:1c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:21:01 2024 by rpki-client on console.sobornost.net