Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/pexi9U5aOy9PiHuq8lKl9XG4WJE.mft
File: pexi9U5aOy9PiHuq8lKl9XG4WJE.mft (raw, json)
Hash identifier: hPSDfiqgXc78DWYWh9JtzPpruFwDz2KIZprFkLaSRoQ=
Subject key identifier: 40:69:A9:0C:93:22:42:29:F0:C7:87:DE:5D:8B:A6:07:F2:4C:A7:3B
Authority key identifier: A5:EC:62:F5:4E:5A:3B:2F:4F:88:7B:AA:F2:52:A5:F5:71:B8:58:91
Certificate issuer: /CN=a5ec62f54e5a3b2f4f887baaf252a5f571b85891
Certificate serial: 018B8F43C7E659CB277B47482720365CB148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pexi9U5aOy9PiHuq8lKl9XG4WJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/pexi9U5aOy9PiHuq8lKl9XG4WJE.mft
Manifest number: 0855
Signing time: Thu 02 Nov 2023 09:01:05 +0000
Manifest this update: Thu 02 Nov 2023 09:01:05 +0000
Manifest next update: Fri 03 Nov 2023 09:01:05 +0000
Files and hashes: 1: Zqq1qG3pO3-o9iMGyU11ZwWceEs.roa (hash: o9zt9tTLERTrAMJ2lHSkEao/cZz4wp6PPxPQgj3soC4=)
2: pexi9U5aOy9PiHuq8lKl9XG4WJE.crl (hash: e/Gpc8ON4uUGUoxxbry8iqykEd1lX1vSqg0SyS9sjgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:c7:e6:59:cb:27:7b:47:48:27:20:36:5c:b1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec62f54e5a3b2f4f887baaf252a5f571b85891
Validity
Not Before: Nov 2 09:01:05 2023 GMT
Not After : Nov 3 09:01:05 2023 GMT
Subject: CN=4069a90c93224229f0c787de5d8ba607f24ca73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:2f:51:87:5f:c0:71:9d:49:22:46:a3:e1:
eb:c0:86:e0:cf:7e:80:1f:d0:c6:fa:41:d6:23:26:
9c:51:e9:7d:91:74:89:2a:99:41:c0:7e:a9:37:fa:
ff:55:96:71:b1:bb:1a:39:c6:2e:d2:9d:41:19:d0:
ed:ee:ac:55:04:c2:ef:be:2c:84:e1:2b:03:11:a8:
2f:92:ba:a7:53:a4:62:26:84:8d:76:28:44:64:a5:
e5:3b:27:c0:1a:4b:66:19:34:27:64:e1:76:77:f9:
eb:be:51:b6:ec:30:01:71:1a:79:58:6e:09:93:56:
e1:b7:88:79:c5:d8:ee:7c:ff:d4:f2:c7:12:7d:ab:
73:54:fa:77:10:61:4f:18:d2:44:48:6f:16:e2:16:
d9:5c:93:43:b8:f8:ce:04:da:3b:81:4d:56:95:4b:
39:4a:eb:b1:a7:c9:1a:d3:c0:bc:f5:fc:b3:f9:b6:
7c:57:f0:60:8c:39:56:e4:64:65:3a:15:1c:88:9c:
f7:01:e0:5a:5b:f6:dc:ec:81:b2:18:e9:dd:75:17:
63:4c:61:af:6c:d5:de:9e:32:13:f5:41:09:45:0f:
df:da:38:a5:dd:eb:19:2a:84:da:fa:1b:b7:8f:16:
88:9d:28:5c:26:cd:11:bf:22:ca:a6:34:b3:ed:b2:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:A9:0C:93:22:42:29:F0:C7:87:DE:5D:8B:A6:07:F2:4C:A7:3B
X509v3 Authority Key Identifier:
keyid:A5:EC:62:F5:4E:5A:3B:2F:4F:88:7B:AA:F2:52:A5:F5:71:B8:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pexi9U5aOy9PiHuq8lKl9XG4WJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/pexi9U5aOy9PiHuq8lKl9XG4WJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/pexi9U5aOy9PiHuq8lKl9XG4WJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3c:38:07:69:b5:c8:0c:b3:a9:d0:c0:2e:fb:f8:40:d1:7a:
c1:67:1c:41:15:9a:f6:20:14:8f:01:8b:29:cf:a4:05:79:1c:
4f:e9:bf:32:a9:3b:c3:7f:dc:c9:68:fd:2f:bc:45:fd:6a:e7:
af:8a:67:5e:c4:9e:dd:54:06:c8:5a:1c:17:dd:72:fd:8e:f9:
c7:9a:98:1f:14:a6:7b:46:5d:ad:02:38:9d:ab:26:02:71:74:
fa:3b:34:29:29:a2:36:5a:ce:1f:46:a6:76:87:4c:60:a1:cc:
e8:e1:5a:cc:f9:c0:68:6f:5a:1b:2a:33:7d:39:4c:94:c8:09:
2a:db:1a:cc:df:e7:12:4e:23:de:c4:6c:41:de:29:77:03:7f:
59:ce:29:a4:22:0d:5d:81:c0:0a:71:26:c3:80:78:6d:0b:00:
36:f2:13:22:8f:32:3d:0a:c9:2d:45:dc:bd:1b:7a:39:f1:17:
3c:14:d8:1b:70:72:7e:74:73:52:10:2f:41:51:11:86:20:15:
39:50:27:22:e6:cd:41:99:1a:61:7b:4a:2a:01:68:57:f6:c1:
ef:02:6a:e4:bf:3d:bb:00:4d:f5:a5:f7:2a:c3:0f:dc:a2:7f:
22:1b:3b:cc:cd:73:45:c6:c4:45:7e:61:76:49:5a:8e:d6:4d:
71:3b:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net