Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft
File: AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft (raw, json)
Hash identifier: bRzmtUkjX7JHWjqsdr0XEWCu3ia//6OKgwgIf/zDpgU=
Subject key identifier: 05:20:29:95:52:24:8B:B0:2E:6C:99:FC:47:19:09:7A:B9:A7:C0:13
Authority key identifier: 01:A2:0A:BC:10:C4:68:CB:99:43:BD:03:7E:CF:8C:3E:24:EF:A2:01
Certificate issuer: /CN=01a20abc10c468cb9943bd037ecf8c3e24efa201
Certificate serial: 0192AF9850035C978CA554B4D7CD423CD8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft
Manifest number: 038F
Signing time: Mon 21 Oct 2024 15:00:47 +0000
Manifest this update: Mon 21 Oct 2024 15:00:47 +0000
Manifest next update: Tue 22 Oct 2024 15:00:47 +0000
Files and hashes: 1: AaIKvBDEaMuZQ70Dfs-MPiTvogE.crl (hash: d/z1pzy0eWhEaaiv4m4L/1Cr/MrsSOhFw0RrkjGakOE=)
2: IYG8wvO-1A_NtaxskPdlenW1wZk.roa (hash: 8rvKBhvEa4X4HQE+pZ344hM0V3t5/4wO9ILlR5Vy2s8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:98:50:03:5c:97:8c:a5:54:b4:d7:cd:42:3c:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a20abc10c468cb9943bd037ecf8c3e24efa201
Validity
Not Before: Oct 21 15:00:47 2024 GMT
Not After : Oct 22 15:00:47 2024 GMT
Subject: CN=0520299552248bb02e6c99fc4719097ab9a7c013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:1e:0f:bb:eb:09:83:7f:ff:4e:a3:88:7c:
7a:00:01:3d:75:2f:d4:65:a1:eb:09:c3:66:ac:b2:
31:d1:f8:67:5c:23:12:97:0f:bc:a6:f4:ba:23:09:
9d:67:6f:ad:1a:29:6f:7c:4d:c5:70:ea:53:24:3a:
88:22:ae:60:ec:3b:01:e8:61:bd:24:b5:f7:8b:e0:
1c:03:ef:79:b8:7b:6c:5e:d6:19:93:d1:0a:e1:1a:
48:ef:e9:c9:98:bf:1e:9b:e2:12:51:62:d6:95:4d:
1f:79:5b:f7:2e:0f:9b:e3:f2:d2:e6:8a:b8:06:28:
d4:51:02:9e:7b:83:c8:d3:a1:a1:ba:8a:a1:50:7f:
15:b2:a7:0e:6e:4d:d7:75:8f:6e:1b:21:0e:a5:d6:
fb:c3:0c:23:98:d9:08:69:ac:03:96:11:05:9c:40:
6a:c8:f3:68:53:db:1c:a1:92:4f:8a:6b:dc:47:65:
cc:c9:6d:48:f7:9d:a3:b2:8c:cb:c1:32:c8:bf:1d:
79:82:7e:15:ca:82:27:2e:d0:5c:c9:d3:14:52:ab:
72:11:9f:f2:02:2e:b2:8a:16:7a:90:c6:c8:31:a5:
0a:b9:90:03:da:e5:e2:51:05:ab:df:70:74:6d:cb:
7f:81:c1:30:2a:44:b5:97:69:8c:69:b0:fb:b7:43:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:29:95:52:24:8B:B0:2E:6C:99:FC:47:19:09:7A:B9:A7:C0:13
X509v3 Authority Key Identifier:
keyid:01:A2:0A:BC:10:C4:68:CB:99:43:BD:03:7E:CF:8C:3E:24:EF:A2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b2:01:9f:59:b3:1a:13:73:0b:79:14:d8:e8:49:ec:d0:63:
34:e1:d4:8e:b0:d0:c4:aa:f5:26:d6:aa:6f:75:74:3d:6e:62:
15:86:c3:ef:21:e9:44:31:52:5d:0f:09:c1:5d:3a:09:a5:f7:
ec:e0:88:d5:f6:22:84:78:75:ba:d4:23:e3:e3:36:ce:0b:85:
b1:03:0b:81:74:53:7f:1c:2f:5e:01:c5:8e:95:79:98:78:91:
35:c0:c9:18:f0:37:87:d8:6e:69:99:d5:93:a5:d2:0e:e7:7b:
35:39:e0:0d:c0:e5:df:76:84:83:f2:88:a9:45:ee:3c:36:46:
ed:7a:47:22:3f:e4:7f:6f:a3:58:dc:a6:e0:cc:e8:30:4d:7b:
05:37:49:bc:bf:ce:c7:dd:0c:9f:62:89:81:0d:47:0a:a0:16:
e0:20:d3:0e:2f:c9:35:67:66:b5:ec:55:48:f9:84:26:24:49:
05:d9:0d:11:81:10:56:28:b5:91:de:88:fa:fd:d3:a2:0d:35:
4a:0a:7a:9a:88:03:f1:f2:a8:00:38:c3:81:98:41:4e:d5:27:
d4:19:a6:73:52:08:2a:dd:77:6b:d3:b3:d0:e0:44:25:a6:4e:
8f:72:91:7c:39:ce:2d:ed:a5:18:74:6b:a1:4b:c9:03:ae:4c:
e4:ca:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:42 2024 by rpki-client on console.sobornost.net