Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
File: L9lxonxvwsZi8GXdi_qLihMsHq4.mft (raw, json)
Hash identifier: IAmurxjf0Z2Bq8IUUw/I2lxngwWg0JUQ+Ikaov0Ws30=
Subject key identifier: CA:77:22:BD:29:10:F4:68:4B:23:29:EA:9A:0D:60:09:44:55:FE:10
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Certificate issuer: /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial: 01948F63AAC742FE59741534C3109C5E64E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
Manifest number: 0C07
Signing time: Wed 22 Jan 2025 19:01:01 +0000
Manifest this update: Wed 22 Jan 2025 19:01:01 +0000
Manifest next update: Thu 23 Jan 2025 19:01:01 +0000
Files and hashes: 1: 5v-fOTRGTF9c8U7b6nzKzrj_Y0Y.roa (hash: VZnp6fYvw/+BPHQQcr7mdLl9tbfRb+FY6UHV9H/juh0=)
2: DW0TBajIRaJNjehdF_P6lFN1E-I.roa (hash: mI7ifTl+PSXtmyQehKoi7R5vAkxLOpMKlijli+a8Hsw=)
3: L9lxonxvwsZi8GXdi_qLihMsHq4.crl (hash: 3VHQdPQIfiAPoWFoTkN9qdQVGnvj8MfDJZgWpiJmoP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:63:aa:c7:42:fe:59:74:15:34:c3:10:9c:5e:64:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Validity
Not Before: Jan 22 19:01:01 2025 GMT
Not After : Jan 23 19:01:01 2025 GMT
Subject: CN=ca7722bd2910f4684b2329ea9a0d60094455fe10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:3f:b4:34:7a:4b:d6:b9:e1:80:cf:18:d4:
07:f3:61:7c:6b:3a:e1:ff:c1:86:5d:c6:4c:a0:d1:
c9:c5:42:34:50:28:9d:9d:2f:36:37:7b:69:0d:1d:
fc:85:12:09:55:f1:76:9a:90:e6:b8:48:7f:91:58:
d5:ed:f9:78:98:2e:8c:ae:c8:7a:ee:16:20:c7:50:
a9:03:4c:67:6b:70:23:fb:66:6c:6d:ae:7b:da:7f:
0e:75:e6:53:11:6a:8e:40:5a:2e:a0:9d:bb:df:ba:
b4:41:12:c1:e8:b8:56:8d:28:6f:9e:b7:d1:2a:3b:
fb:da:f5:b9:cb:24:e4:a9:f2:6a:8b:42:11:f3:b0:
9d:8d:12:62:74:2a:46:d0:1a:43:5f:2f:0e:33:7f:
9b:e4:b3:28:15:8b:40:1a:c5:df:21:00:87:14:de:
38:2f:dc:59:48:f9:22:3b:57:40:fe:3a:a7:a8:7c:
d2:18:a4:b5:2b:f2:95:f7:ff:7c:36:cb:3f:9a:35:
a8:45:52:b7:c9:d4:e6:8f:0a:9b:3f:df:1e:62:72:
c8:1c:f7:e2:71:46:45:3c:fd:a3:ab:91:9e:a1:db:
ee:ec:36:c8:3f:a3:b7:3d:e6:0e:66:84:93:67:72:
31:9e:c9:16:6d:6c:b1:83:5e:12:1b:ce:c1:d2:48:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:77:22:BD:29:10:F4:68:4B:23:29:EA:9A:0D:60:09:44:55:FE:10
X509v3 Authority Key Identifier:
keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:57:b2:63:60:21:cc:c4:77:98:4e:6d:b4:e7:e9:86:d0:d4:
5e:de:38:e4:1c:67:90:68:6b:06:77:ca:47:e7:f9:68:da:f3:
8b:80:b2:04:66:9e:d1:e8:ec:3d:33:05:a9:b1:7d:f5:61:b1:
88:67:03:1c:92:cb:f2:64:78:a9:dd:aa:e3:0a:c6:78:84:81:
70:e9:d4:8c:90:5f:f0:f6:82:67:5f:d3:a2:a1:8d:9a:93:be:
ec:d4:5c:95:41:1f:95:7b:57:0e:d5:cf:86:b7:47:d9:1d:c2:
b9:c8:4f:56:95:f8:3d:e5:ef:bd:70:61:3b:ba:d6:fd:be:5d:
fc:1a:fb:c8:50:37:11:08:5b:c5:63:f1:d0:9d:64:04:fb:e6:
5b:d0:b4:67:d3:0a:dd:b1:b1:71:8f:d7:e7:cc:97:c2:a9:8a:
0d:59:38:29:f1:fc:50:55:d5:22:95:b9:8e:b4:a1:e6:53:bd:
32:ee:b4:be:69:52:61:b3:17:5e:83:3c:f5:65:1d:bf:f2:68:
e9:ef:22:71:6c:0f:ae:4d:ea:79:8b:cd:43:3c:95:a3:19:90:
f2:5d:03:7d:45:8e:9a:9f:19:d6:78:a6:26:78:71:34:ee:53:
64:dc:31:d0:f3:a5:e3:36:5e:0a:60:3e:9c:f2:af:99:b6:04:
1e:cc:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:42 2025 by rpki-client on console.sobornost.net