Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.mft
File: X_KDEQZhpZ2_Il0DOArMCDhHTlY.mft (raw, json)
Hash identifier: el+wwHBA89T6ZFiWWmVlFNAmWRoHofhVSfnHtwu7Yks=
Subject key identifier: C4:46:CF:A8:AF:0B:FD:62:BB:0C:65:DA:B9:7E:55:3A:9B:3A:83:1F
Authority key identifier: 5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
Certificate issuer: /CN=5ff283110661a59dbf225d03380acc0838474e56
Certificate serial: 018F11E8B4E2CD83CB2C8F5C16ECB7139166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.mft
Manifest number: 113C
Signing time: Wed 24 Apr 2024 21:00:14 +0000
Manifest this update: Wed 24 Apr 2024 21:00:14 +0000
Manifest next update: Thu 25 Apr 2024 21:00:14 +0000
Files and hashes: 1: X_KDEQZhpZ2_Il0DOArMCDhHTlY.crl (hash: u02iD+QgIgvKUmAMOfHzGkkx/8xTOM1DWtNRE5QiyAc=)
2: wpzhLYSLIiyTZU1eCqovEDJW3Ag.roa (hash: x8HiFUyE2v/sxJXzYPO50zd8RB5dMWw/e0ed+eq7knw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:11:e8:b4:e2:cd:83:cb:2c:8f:5c:16:ec:b7:13:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff283110661a59dbf225d03380acc0838474e56
Validity
Not Before: Apr 24 21:00:14 2024 GMT
Not After : Apr 25 21:00:14 2024 GMT
Subject: CN=c446cfa8af0bfd62bb0c65dab97e553a9b3a831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:ff:d1:88:cd:11:82:b9:f2:00:ff:22:30:
9a:41:24:32:ef:fc:18:0a:e8:83:a5:46:72:07:9d:
d3:3b:76:1c:eb:89:3a:d3:95:ee:2a:ce:04:dc:cd:
4c:3f:e6:80:2b:13:42:65:c4:15:5c:23:fa:73:ec:
4b:09:42:f5:eb:43:3c:e5:e5:28:9f:4b:32:8e:e6:
dc:08:00:3d:11:bb:b8:f4:79:04:0f:ad:0a:f2:d0:
c2:4f:75:e7:09:9c:9c:27:d6:7f:4c:67:2b:46:4d:
d1:09:72:5e:16:9e:9e:16:85:61:5a:d6:9c:2d:52:
0e:d1:13:55:d5:83:b3:65:7a:be:91:98:5d:b6:4e:
66:71:78:9d:3b:df:df:eb:b6:0f:64:dc:95:9a:47:
15:a5:00:97:45:d8:74:fc:81:b6:25:8f:9f:f5:a4:
63:3f:de:26:44:56:47:53:0e:ae:c5:e6:77:29:d7:
0c:f9:0a:ca:c8:a4:52:20:45:92:2b:6b:15:43:6d:
b9:4a:37:cc:40:f4:b3:c1:8d:6e:66:a4:19:98:36:
5f:e6:03:92:86:e3:e7:34:81:ea:3c:59:6a:87:9a:
d5:84:67:14:16:95:22:e8:0e:73:12:43:54:22:e7:
5d:4c:8f:35:95:88:bd:b6:ed:65:13:fa:5d:24:09:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:CF:A8:AF:0B:FD:62:BB:0C:65:DA:B9:7E:55:3A:9B:3A:83:1F
X509v3 Authority Key Identifier:
keyid:5F:F2:83:11:06:61:A5:9D:BF:22:5D:03:38:0A:CC:08:38:47:4E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_KDEQZhpZ2_Il0DOArMCDhHTlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/13b666-3e39-4cec-987d-fa0296c27463/1/X_KDEQZhpZ2_Il0DOArMCDhHTlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ea:82:b9:1a:b1:f6:db:c2:b3:dd:17:4a:81:08:77:6c:af:
6d:cb:30:c1:79:88:fd:40:ed:e4:dc:60:8e:77:47:09:da:4d:
f4:9a:a8:39:5a:04:da:ed:7f:c9:ba:b6:4f:ac:27:60:7e:f8:
18:b5:62:03:bb:a3:64:f8:d3:0a:61:fb:61:0f:52:7c:7f:0b:
4b:fe:6c:f0:01:e6:a7:04:7f:9d:9c:4f:3b:a4:02:47:60:5e:
a7:d0:9c:bd:80:17:a5:2a:84:33:c5:3b:a0:fc:7d:71:4d:2d:
9f:e5:35:74:ff:ab:19:ea:1c:25:8f:b9:ed:78:f1:8e:b5:e1:
6e:3a:38:86:37:5f:f3:ea:f6:2b:35:6b:da:51:c9:df:38:00:
64:19:70:fd:cf:b2:c9:47:aa:d5:48:cf:b8:19:d1:0d:ee:05:
a9:eb:d4:e2:c4:6c:aa:c1:1b:fa:aa:bc:21:b8:a9:19:21:cc:
97:a3:c8:87:8c:7a:89:f6:ed:5e:76:05:9c:70:1e:9d:d4:a8:
5e:06:c4:30:01:47:91:a7:4a:d5:25:ff:51:de:39:26:80:d0:
7b:74:1d:d0:42:92:a3:fc:b1:f0:28:a3:69:32:3f:a4:cd:c8:
7f:66:e0:07:11:a7:fb:7e:1f:f1:89:96:d1:e6:9e:a6:d6:e3:
a4:63:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 07:41:56 2024 by rpki-client on console.sobornost.net