Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
File: 1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft (raw, json)
Hash identifier: DE3q5+sVxusuxq/xKnh/KO8Xly6TlVNw9uJWuvMuUTU=
Subject key identifier: 30:DE:23:A9:81:75:B0:46:E0:3F:F0:CA:1A:99:C5:35:3F:4C:A5:19
Authority key identifier: D7:09:C9:02:1E:40:AF:92:A2:08:DE:35:02:4C:A7:06:63:D7:34:E4
Certificate issuer: /CN=d709c9021e40af92a208de35024ca70663d734e4
Certificate serial: 01934717B8B91E73C9F8DD352164E24B96D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
Manifest number: 136C
Signing time: Wed 20 Nov 2024 01:02:37 +0000
Manifest this update: Wed 20 Nov 2024 01:02:37 +0000
Manifest next update: Thu 21 Nov 2024 01:02:37 +0000
Files and hashes: 1: 1wnJAh5Ar5KiCN41AkynBmPXNOQ.crl (hash: 5KHO5dgB716EwqpJWWkg/sC4bn1zYgbOQqiMy+6Zlz8=)
2: s1WBsZmCvpxfAJ1vJJDtQuy-bt0.roa (hash: 37rRFx3/Lv4ZcyFAYCNrObPBAqt1uY6LJHANmBRt9VQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:17:b8:b9:1e:73:c9:f8:dd:35:21:64:e2:4b:96:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d709c9021e40af92a208de35024ca70663d734e4
Validity
Not Before: Nov 20 01:02:37 2024 GMT
Not After : Nov 21 01:02:37 2024 GMT
Subject: CN=30de23a98175b046e03ff0ca1a99c5353f4ca519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:15:de:dd:76:3f:c8:5e:43:fb:b4:74:ec:53:
3a:46:65:ea:16:2b:8f:63:0d:bb:b4:9f:12:6f:d3:
0a:b2:3d:45:64:08:ef:f1:07:40:f5:a4:04:38:01:
58:56:7d:ed:d9:2d:97:b6:20:91:35:94:30:59:65:
9f:72:e5:7f:35:94:4f:95:c7:dd:80:93:38:f5:42:
43:ea:9b:92:f7:9c:49:6d:c0:bb:40:29:2e:a4:70:
88:6f:4d:2c:08:d2:71:6d:ae:e4:89:dc:7c:d3:c4:
c5:33:93:6a:66:c6:7e:d7:09:1d:ee:db:6f:1a:94:
23:be:f4:f4:a1:55:d7:69:c8:51:1e:64:d8:1f:a8:
b7:53:e1:6a:b4:7f:48:d0:e8:89:40:1f:6a:99:f1:
69:42:7c:c8:81:99:e4:7c:d1:25:13:a5:ff:02:68:
40:e6:1d:0d:91:ce:02:ca:6c:16:9f:10:ab:59:49:
d9:d7:9b:f3:f6:1e:cb:d7:b8:3c:bd:1c:94:d3:cf:
f6:54:81:19:70:6d:cc:d4:7d:d0:11:3a:d9:6f:56:
80:f4:69:19:d1:65:52:cc:8e:39:43:9e:00:51:85:
ee:7c:4c:49:8e:c0:7c:5a:bb:ee:e4:17:49:4f:a2:
ef:1c:28:cb:b3:16:87:8a:03:10:f6:34:c5:e0:f2:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DE:23:A9:81:75:B0:46:E0:3F:F0:CA:1A:99:C5:35:3F:4C:A5:19
X509v3 Authority Key Identifier:
keyid:D7:09:C9:02:1E:40:AF:92:A2:08:DE:35:02:4C:A7:06:63:D7:34:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wnJAh5Ar5KiCN41AkynBmPXNOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f73cdb-8273-4f43-9f61-8aa7c4cb719f/1/1wnJAh5Ar5KiCN41AkynBmPXNOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1e:3d:c3:dc:2d:4d:28:5a:55:ac:02:ca:97:b2:fd:14:a8:
46:0b:f0:2f:93:26:81:f1:03:73:7d:41:c6:ab:12:85:e0:9d:
08:08:0a:f2:d1:8f:ae:de:6c:f1:4c:16:f1:04:cc:b7:d6:09:
f9:dd:9a:66:1e:b1:48:b7:f7:27:43:f3:e3:64:55:70:15:5c:
74:5a:c6:85:2e:17:be:81:69:52:ed:15:ea:cc:50:af:50:68:
d3:37:5f:02:e8:38:ff:2c:7c:44:3d:34:5c:98:82:7c:d8:d7:
fa:d5:8b:82:6f:0c:98:56:07:2a:35:36:29:c9:b6:58:03:bc:
12:53:d2:4e:b3:16:77:aa:0c:f7:18:57:b9:43:73:e6:d3:0b:
b4:22:12:37:87:4c:12:28:4e:02:f6:30:23:5c:57:62:58:da:
13:43:08:d6:b3:3a:7b:9d:3a:95:c7:ba:f9:57:d1:5e:fa:70:
40:50:c7:66:38:e0:d6:65:18:cf:e1:0f:dd:4f:f4:e9:d5:be:
d4:43:9d:5c:89:aa:2b:11:55:a6:66:8b:f4:00:98:09:fa:73:
a3:45:06:1a:55:06:32:bf:e4:0b:b4:39:e7:f8:f4:07:d8:87:
43:54:82:2f:a3:ab:61:82:9f:e2:80:5f:f4:28:46:f3:3f:43:
56:28:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:22:37 2024 by rpki-client on console.sobornost.net