Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a22660-38ef-4768-af43-e94122087b3f/1/q_YKqZSjTNStPdumW5r00wqjTOc.mft
File: q_YKqZSjTNStPdumW5r00wqjTOc.mft (raw, json)
Hash identifier: BuUt52PReyW0t4XnDmLQ+3nO06bP5RjbP6wi6KBtdOg=
Subject key identifier: D3:98:87:0E:7F:41:3E:2D:7C:BB:AD:C4:37:FC:4D:69:A5:EB:57:2D
Authority key identifier: AB:F6:0A:A9:94:A3:4C:D4:AD:3D:DB:A6:5B:9A:F4:D3:0A:A3:4C:E7
Certificate issuer: /CN=abf60aa994a34cd4ad3ddba65b9af4d30aa34ce7
Certificate serial: 018EC24D8F06560FC8575598871C617BF0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_YKqZSjTNStPdumW5r00wqjTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a22660-38ef-4768-af43-e94122087b3f/1/q_YKqZSjTNStPdumW5r00wqjTOc.mft
Manifest number: 060E
Signing time: Tue 09 Apr 2024 10:00:46 +0000
Manifest this update: Tue 09 Apr 2024 10:00:46 +0000
Manifest next update: Wed 10 Apr 2024 10:00:46 +0000
Files and hashes: 1: lXobpKbb_8yCcCTdgTcQhH1jimw.roa (hash: nUIk93cqhV4hF3FKPgX+RIVOUgqscA8KjDf+1ZHzXA8=)
2: q_YKqZSjTNStPdumW5r00wqjTOc.crl (hash: HE9azi0BSkG9W58T5hH82KvGv5cv6GrHMFHwoGIwD2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:4d:8f:06:56:0f:c8:57:55:98:87:1c:61:7b:f0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf60aa994a34cd4ad3ddba65b9af4d30aa34ce7
Validity
Not Before: Apr 9 10:00:46 2024 GMT
Not After : Apr 10 10:00:46 2024 GMT
Subject: CN=d398870e7f413e2d7cbbadc437fc4d69a5eb572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4b:d8:0d:98:53:4c:3d:c4:8a:6a:89:48:cb:
3c:43:e2:52:a3:95:4f:0b:09:43:5c:44:76:0a:29:
96:58:c7:59:08:ef:34:75:93:10:aa:53:2c:6f:62:
cb:55:16:27:95:ac:44:d5:4a:f3:5d:85:7c:83:c0:
2b:d0:de:e6:d4:a2:bc:e2:ce:74:19:a3:fd:80:29:
62:8a:e3:a6:55:b8:a1:ad:1e:d1:25:a7:4f:46:e2:
b1:60:52:d3:e3:b7:21:c5:85:a8:11:0c:9d:97:55:
22:7f:00:2e:c7:e9:73:15:0f:44:bb:54:df:0d:f0:
61:c9:8c:56:f7:03:61:f9:8b:48:d6:d6:96:3a:37:
e6:61:bd:c9:5f:fc:cd:62:59:c0:4f:6c:df:16:42:
eb:b8:59:32:f8:22:2f:60:14:8d:f6:3d:a0:9c:cd:
06:a5:53:e9:01:5d:c9:33:89:d5:6e:1f:bc:a6:09:
4d:1b:b1:24:7d:15:99:37:e5:7f:4f:0f:28:75:39:
51:7e:a2:ef:1e:e1:c2:68:44:37:58:f7:f4:df:2b:
cb:13:14:ce:06:f1:bc:61:bd:e4:60:3d:67:ef:fa:
33:7d:cf:37:b0:a9:d7:32:95:5a:d4:f0:2e:1c:18:
a5:ae:f5:68:7b:ce:d3:54:75:74:f8:fa:21:79:01:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:98:87:0E:7F:41:3E:2D:7C:BB:AD:C4:37:FC:4D:69:A5:EB:57:2D
X509v3 Authority Key Identifier:
keyid:AB:F6:0A:A9:94:A3:4C:D4:AD:3D:DB:A6:5B:9A:F4:D3:0A:A3:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_YKqZSjTNStPdumW5r00wqjTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a22660-38ef-4768-af43-e94122087b3f/1/q_YKqZSjTNStPdumW5r00wqjTOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a22660-38ef-4768-af43-e94122087b3f/1/q_YKqZSjTNStPdumW5r00wqjTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:30:5f:88:13:fa:28:0f:6d:91:5a:56:c4:50:4f:86:a8:3c:
19:d9:bf:cd:4c:80:05:e8:42:a1:8f:9e:99:c4:56:cc:96:a6:
79:45:50:5a:fa:f2:f4:26:14:2b:84:84:77:74:0a:30:3c:e7:
0a:39:97:da:e9:ff:9d:1f:50:66:76:ee:5b:35:12:1e:e6:20:
9c:ef:b4:59:87:80:70:b6:d3:6c:48:be:64:03:27:9e:fb:dc:
f5:4d:ba:f0:5b:27:3c:ab:58:2e:de:78:2d:72:28:e9:a6:ce:
ae:64:fb:72:10:53:d4:8a:12:f5:6b:71:24:17:fa:c1:52:8d:
cf:44:00:2b:da:f0:7a:6c:df:21:e3:bc:85:91:fb:f0:9c:af:
9e:e3:be:93:24:93:cd:7a:41:1f:37:90:59:22:e2:6f:35:f7:
04:77:4b:df:65:e8:1e:be:bb:fe:36:e6:f4:2a:d5:10:c8:09:
ac:ed:92:dc:c6:92:25:6d:81:e7:52:55:aa:4d:56:cc:b1:07:
34:48:c2:18:2f:ee:c8:58:c5:4d:a7:33:d1:af:b7:34:e7:70:
85:0d:c6:5a:a5:f8:a4:fb:72:18:7f:17:fd:71:3f:66:09:70:
2b:b4:61:77:58:17:9d:fb:d7:04:32:52:1a:7c:5e:e5:17:03:
76:29:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 16:59:49 2024 by rpki-client on console.sobornost.net