Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1e2218-0cbe-4612-8441-baa4c10c214c/1/cO9OCMkhbhBnneUGcH3_MKBCFaM.mft
File: cO9OCMkhbhBnneUGcH3_MKBCFaM.mft (raw, json)
Hash identifier: VOPzPAs7/lF80XnXARaq9h6yaF4J2/t7fAMcQJauKFQ=
Subject key identifier: AD:67:DA:56:72:41:AF:36:23:66:CC:98:98:3E:4C:A0:F0:63:2B:32
Authority key identifier: 70:EF:4E:08:C9:21:6E:10:67:9D:E5:06:70:7D:FF:30:A0:42:15:A3
Certificate issuer: /CN=70ef4e08c9216e10679de506707dff30a04215a3
Certificate serial: 018CED069478A6D038DB8C1C3E2007263D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO9OCMkhbhBnneUGcH3_MKBCFaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e2218-0cbe-4612-8441-baa4c10c214c/1/cO9OCMkhbhBnneUGcH3_MKBCFaM.mft
Manifest number: 0C3A
Signing time: Tue 09 Jan 2024 07:01:20 +0000
Manifest this update: Tue 09 Jan 2024 07:01:20 +0000
Manifest next update: Wed 10 Jan 2024 07:01:20 +0000
Files and hashes: 1: cO9OCMkhbhBnneUGcH3_MKBCFaM.crl (hash: LQO76rH3dy+TBWuUO9AQnjtTvjYHyrpElccqgUtbQjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:06:94:78:a6:d0:38:db:8c:1c:3e:20:07:26:3d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ef4e08c9216e10679de506707dff30a04215a3
Validity
Not Before: Jan 9 07:01:20 2024 GMT
Not After : Jan 10 07:01:20 2024 GMT
Subject: CN=ad67da567241af362366cc98983e4ca0f0632b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:f2:89:fc:a2:7d:1f:df:52:cb:fe:00:ed:
c1:7b:1e:48:ab:5f:b7:ea:2b:07:33:89:eb:cb:6b:
81:6d:b0:72:dc:d2:e4:f9:42:8f:98:02:c5:a5:a4:
0b:dd:b4:e0:cb:db:cb:1f:9f:38:32:63:84:67:92:
0f:f2:0c:55:9e:bc:b3:52:61:1e:ec:c7:aa:49:cc:
ee:56:eb:6b:e0:df:ac:dd:d8:63:e0:48:9a:38:23:
51:a5:56:8f:61:34:14:7f:95:06:24:6e:20:33:b1:
3d:4c:43:14:65:8b:c4:0c:1d:5b:c2:05:d7:62:05:
17:66:ef:c3:f1:66:4c:e0:db:d1:1f:ff:9e:da:6f:
f7:50:68:2e:b9:01:6c:c0:38:ee:09:31:46:02:e1:
af:63:86:3c:d6:2b:f3:70:ef:fd:a0:1c:3c:7d:ce:
03:96:6a:b5:04:13:ff:86:44:ba:f6:ed:77:81:ad:
41:6c:a4:53:db:3a:74:f0:ea:79:82:f9:c2:36:17:
21:1f:58:ce:92:8f:44:e8:ed:12:c6:ab:f2:3f:7f:
0b:ac:74:70:ce:f3:91:ae:d8:ff:87:8f:8a:64:58:
22:fa:8b:f2:81:5e:8b:dc:57:ed:f4:72:8c:53:a8:
7e:7d:64:64:26:fd:cb:5c:a1:99:94:a0:d8:a1:42:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:67:DA:56:72:41:AF:36:23:66:CC:98:98:3E:4C:A0:F0:63:2B:32
X509v3 Authority Key Identifier:
keyid:70:EF:4E:08:C9:21:6E:10:67:9D:E5:06:70:7D:FF:30:A0:42:15:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO9OCMkhbhBnneUGcH3_MKBCFaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e2218-0cbe-4612-8441-baa4c10c214c/1/cO9OCMkhbhBnneUGcH3_MKBCFaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e2218-0cbe-4612-8441-baa4c10c214c/1/cO9OCMkhbhBnneUGcH3_MKBCFaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b0:92:ce:8b:78:e9:2f:b7:3f:de:83:2a:0c:cd:5e:f6:c0:
21:2b:e0:88:a7:76:37:9b:63:b4:ab:48:87:23:99:0f:7a:91:
8d:2a:02:e6:2d:fe:1b:81:cd:75:09:81:b7:fa:4d:6b:64:ab:
3c:96:0c:35:ec:56:41:f3:5b:a8:50:0b:05:aa:d8:c7:ca:b7:
ff:86:7f:6b:19:6e:5f:cd:53:60:2c:e7:1d:b7:bd:ed:79:88:
43:37:e3:f4:2a:26:a7:80:f4:ea:c1:60:46:13:88:f8:8f:28:
fe:f0:99:fc:60:d5:d6:f2:3f:f3:ec:5f:25:ed:3d:32:05:31:
40:89:e9:b8:ba:38:f0:a0:6d:2a:aa:23:26:cb:02:3c:ef:7e:
17:6d:c7:b7:18:d5:b9:30:58:63:fc:9d:1c:54:d4:25:09:8a:
b8:6c:a5:9b:a8:b8:26:f4:16:dc:dc:3b:46:df:90:6e:4e:67:
69:ea:84:a8:33:84:a3:ca:c8:af:c7:54:fc:ed:82:68:21:f0:
96:5a:e0:3e:1a:88:86:cd:a8:1e:9e:01:64:16:4c:4d:ac:27:
d0:b0:1c:73:3a:a3:62:5f:ba:8f:2e:b6:33:52:57:71:49:6f:
a1:66:a8:7a:b2:6a:33:b1:41:f1:76:b5:9a:1b:4e:e1:04:1d:
47:92:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:10 2024 by rpki-client on console.sobornost.net