Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
File: TK8PdjWpbv9bc_IW2P53zE4qCo4.mft (raw, json)
Hash identifier: iHgBzrjLg/6wlIMa39opCBtKYIGRiVF9XtRvZKyh8tI=
Subject key identifier: D2:B0:3C:FC:9C:13:0E:43:FF:BF:3B:01:CF:60:F5:3D:A9:A2:28:CE
Authority key identifier: 4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
Certificate issuer: /CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
Certificate serial: 0191B377F5E6169729EAF0D302EE9D783BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
Manifest number: 1297
Signing time: Mon 02 Sep 2024 16:01:08 +0000
Manifest this update: Mon 02 Sep 2024 16:01:08 +0000
Manifest next update: Tue 03 Sep 2024 16:01:08 +0000
Files and hashes: 1: TK8PdjWpbv9bc_IW2P53zE4qCo4.crl (hash: NQPoE3BL8sbXrrRjofF7fUy6suvOYkDgQfj9/o3l70c=)
2: uajxMGGWx4MGmHew-WmC7J6FOj8.roa (hash: HNTeR/DKXB6ff19WPa5OESRqXraW7+ds1xJeftGClJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:77:f5:e6:16:97:29:ea:f0:d3:02:ee:9d:78:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
Validity
Not Before: Sep 2 16:01:08 2024 GMT
Not After : Sep 3 16:01:08 2024 GMT
Subject: CN=d2b03cfc9c130e43ffbf3b01cf60f53da9a228ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:84:1d:02:09:8b:e5:ee:99:07:94:d7:0c:
ec:7c:b1:d1:9c:42:3c:92:d5:06:3f:80:25:08:80:
cf:82:d8:06:f9:44:ac:ff:6b:d1:76:43:cb:3e:d1:
ea:71:3f:71:9a:ba:b2:1e:52:5f:f5:e2:cd:a0:fe:
92:6b:14:78:d4:58:1e:90:cc:40:11:dd:a8:a4:24:
94:8d:9c:5b:91:8f:11:b3:e3:92:27:87:e2:aa:57:
4f:7d:33:46:cd:ca:a5:2d:0f:ab:e6:43:c6:d8:73:
cd:75:30:e4:f1:7f:47:fc:de:d1:f7:e3:be:6c:76:
c2:0b:1b:2e:84:25:de:61:2c:d3:5b:10:24:06:34:
58:12:b8:12:c8:4f:fa:d3:a0:de:88:11:6a:17:d8:
e4:85:75:e1:74:bc:65:47:c0:0f:4a:29:24:89:d6:
84:fc:4c:2a:8c:ce:2c:70:d6:a7:29:77:3b:66:46:
d3:61:e0:26:6b:b2:38:a9:e2:25:96:8d:71:cf:f0:
06:f1:b7:65:ea:b9:35:54:f1:c4:25:03:ab:af:7c:
fb:36:7e:f7:88:2d:2c:b9:94:dc:6c:95:c4:64:eb:
41:89:49:99:e5:ec:8f:fe:d5:88:e3:11:ee:ff:7d:
5a:d3:d3:99:2d:e2:47:76:3e:7f:1c:29:13:df:fc:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:3C:FC:9C:13:0E:43:FF:BF:3B:01:CF:60:F5:3D:A9:A2:28:CE
X509v3 Authority Key Identifier:
keyid:4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ab:ad:b5:a3:1a:5d:f0:b6:7f:da:23:19:6d:4d:d2:93:47:
7c:bc:ed:c0:3d:e3:5f:64:a7:ef:98:56:66:80:71:98:8a:0f:
4d:a9:d6:53:7e:a0:b2:ac:7a:ac:cc:4f:cd:d5:2c:6a:8b:c5:
7c:12:d6:a1:47:5e:80:f1:b0:32:19:15:38:45:fd:61:8a:b1:
e9:64:c4:2b:99:1b:2a:65:e6:d3:6c:59:f8:50:80:cb:c3:e8:
1f:15:ae:26:e3:78:1c:70:52:49:50:81:db:4f:07:0f:97:47:
59:92:19:c6:90:d6:d4:05:bd:a0:5d:03:17:d2:ae:aa:31:39:
31:ed:60:ec:6d:71:71:ad:1a:50:db:0a:1d:64:96:dd:a7:30:
d0:8b:b3:ec:c1:40:ec:99:59:e4:be:65:87:b7:1c:cc:5b:84:
26:9a:9c:e5:11:f9:9c:32:80:41:40:a4:f0:eb:34:cd:ef:21:
dd:c8:76:b8:f2:ee:70:76:b8:f7:6b:28:2d:83:b3:d0:4f:3a:
52:35:23:6f:43:00:2f:40:51:6c:4f:81:22:8e:67:be:ec:05:
85:9f:3f:19:0d:23:3b:ec:84:12:3a:6d:9b:47:65:c5:3c:8d:
37:9e:0f:a6:fb:ea:b8:3c:fb:42:30:4e:47:73:a0:a8:89:c2:
d9:20:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:12:13 2024 by rpki-client on console.sobornost.net