Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/KIeYp1TW2irKGPYX9j09XxQpe4E.mft
File: KIeYp1TW2irKGPYX9j09XxQpe4E.mft (raw, json)
Hash identifier: mbgXP+Ecktxn6xMSo4jUVoS3dbBkneVpqtp6xFpmhJs=
Subject key identifier: 9F:4F:4C:4D:B1:05:98:8D:D1:96:8C:6B:F9:29:CC:B2:77:87:A5:8C
Authority key identifier: 28:87:98:A7:54:D6:DA:2A:CA:18:F6:17:F6:3D:3D:5F:14:29:7B:81
Certificate issuer: /CN=288798a754d6da2aca18f617f63d3d5f14297b81
Certificate serial: 018889E6F0D3FE989B20262D18F6647FFB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIeYp1TW2irKGPYX9j09XxQpe4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/KIeYp1TW2irKGPYX9j09XxQpe4E.mft
Manifest number: 0D55
Signing time: Mon 05 Jun 2023 04:53:13 +0000
Manifest this update: Mon 05 Jun 2023 04:53:13 +0000
Manifest next update: Tue 06 Jun 2023 04:53:13 +0000
Files and hashes: 1: KIeYp1TW2irKGPYX9j09XxQpe4E.crl (hash: ELJgy/3ly7PwmwQnhjjNWKyVKrZHNR0AdIQpiiScmPw=)
2: c-cxabvkncfHM1d3e_5gw1zhNBk.roa (hash: GlJKHsiHBRTiIicOoOv2fILc30hBbKojulBFxTxPrkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:89:e6:f0:d3:fe:98:9b:20:26:2d:18:f6:64:7f:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=288798a754d6da2aca18f617f63d3d5f14297b81
Validity
Not Before: Jun 5 04:53:13 2023 GMT
Not After : Jun 6 04:53:13 2023 GMT
Subject: CN=9f4f4c4db105988dd1968c6bf929ccb27787a58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b2:d4:0b:a8:89:57:d0:ee:ac:4a:d2:3f:29:
9f:f0:0c:3d:4f:90:cf:20:c9:b4:9d:cb:c9:f7:6f:
00:cd:df:9a:11:04:a1:6e:f5:62:b1:65:af:d5:46:
56:92:a1:c2:ea:78:04:a6:98:77:78:9f:eb:54:26:
62:a7:51:45:2e:e2:d2:ac:7f:b7:2f:ad:ce:73:65:
c1:cd:22:6c:53:6e:46:a1:92:5f:4d:cb:8a:e2:aa:
6c:27:53:52:e9:d5:0e:45:d2:32:ca:56:40:b5:e3:
8f:4b:b1:56:84:db:76:45:83:2d:08:02:45:a8:64:
dd:cc:cf:77:31:d8:67:fc:00:28:23:cc:3d:35:0c:
4f:d8:63:24:6e:16:25:48:8f:63:f4:a2:5a:32:10:
85:75:16:62:fc:bd:e5:f5:43:ed:dc:ba:25:20:e0:
d8:2b:bc:79:a8:f8:64:66:0b:3e:8f:fd:fd:49:61:
49:0b:71:41:a8:1b:a0:52:f7:4c:92:ec:5d:c5:b7:
e9:80:8a:ad:86:f1:11:ad:44:16:41:94:71:7e:ac:
88:1e:48:6e:2e:97:75:18:52:fa:ba:80:c5:97:e9:
47:be:66:f7:74:68:70:05:cc:1e:fb:79:0c:7e:8a:
fa:a0:59:55:8c:4c:69:f4:bf:6f:16:76:a6:76:98:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4F:4C:4D:B1:05:98:8D:D1:96:8C:6B:F9:29:CC:B2:77:87:A5:8C
X509v3 Authority Key Identifier:
keyid:28:87:98:A7:54:D6:DA:2A:CA:18:F6:17:F6:3D:3D:5F:14:29:7B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIeYp1TW2irKGPYX9j09XxQpe4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/KIeYp1TW2irKGPYX9j09XxQpe4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f69c5-a386-4fa5-8215-8906bd3bc90b/1/KIeYp1TW2irKGPYX9j09XxQpe4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:54:a2:a3:96:dc:ad:1d:4e:cc:cc:9c:f4:c5:5d:0f:08:f3:
48:0a:08:cf:42:b1:8d:7e:54:29:ba:50:e8:16:bd:55:f5:67:
d3:39:e9:52:3d:50:7f:dc:59:5c:a9:c5:6f:89:45:f7:6f:79:
b4:ec:aa:02:be:b6:84:cc:c9:54:c8:4e:13:43:68:a8:65:0b:
c7:70:d8:8d:6c:44:cf:da:cf:97:31:ca:17:49:05:25:06:16:
53:4e:d9:db:81:62:20:55:45:76:57:ea:5b:42:37:23:88:0c:
75:22:35:b4:61:2c:63:37:72:df:02:42:d6:d9:2b:27:ad:db:
5c:da:c7:d0:25:e9:be:25:38:50:10:3a:35:56:81:4c:92:e6:
e5:0d:70:83:b5:ae:9b:df:3f:a9:f1:10:7a:52:b5:49:a2:2c:
ae:51:26:4a:c5:28:13:4b:e7:e1:d4:95:24:74:3c:ba:a9:75:
7c:6d:05:cf:42:1e:3c:2a:d6:0c:fb:26:87:16:8f:c5:57:d0:
7f:0a:8a:9b:84:4c:f5:79:7c:3b:6d:8b:f2:92:27:48:82:f8:
70:b9:f7:a2:21:e0:0e:ce:66:7f:e5:dc:a9:64:be:e1:5c:bc:
6e:97:77:a5:05:7b:93:51:89:e4:2c:56:07:a5:9e:c9:c9:bc:
d7:ae:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net