Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.mft
File: EK0ZMK-er97hDnaGhJ1Br37zNDk.mft (raw, json)
Hash identifier: E7Io6CVORta9d4GzcyqrvPBJTi0fNvpbzS5iHSGuD2k=
Subject key identifier: 42:AF:B3:26:FD:53:69:4A:10:B8:2E:C1:5A:A2:E6:B5:66:DE:5A:CA
Authority key identifier: 10:AD:19:30:AF:9E:AF:DE:E1:0E:76:86:84:9D:41:AF:7E:F3:34:39
Certificate issuer: /CN=10ad1930af9eafdee10e7686849d41af7ef33439
Certificate serial: 018EE1D875A09BC37145FC3620F4B03331FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EK0ZMK-er97hDnaGhJ1Br37zNDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.mft
Manifest number: 0884
Signing time: Mon 15 Apr 2024 13:00:43 +0000
Manifest this update: Mon 15 Apr 2024 13:00:43 +0000
Manifest next update: Tue 16 Apr 2024 13:00:43 +0000
Files and hashes: 1: EK0ZMK-er97hDnaGhJ1Br37zNDk.crl (hash: 9I1wooSBkE8lVwPtJoAGTxnrNIm2w7BTTFqNOJvDgqI=)
2: NG0i1XxpYBJhct4pabwsroCEPJ4.roa (hash: 3tnJzVTS3//H9/eCWB+AS2W2Cit8Q4z7oPwfwKTMeNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:d8:75:a0:9b:c3:71:45:fc:36:20:f4:b0:33:31:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10ad1930af9eafdee10e7686849d41af7ef33439
Validity
Not Before: Apr 15 13:00:43 2024 GMT
Not After : Apr 16 13:00:43 2024 GMT
Subject: CN=42afb326fd53694a10b82ec15aa2e6b566de5aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:59:9c:90:73:a2:36:9b:f6:e9:65:01:36:
a8:90:cf:b2:18:cd:cf:aa:83:97:4a:2f:4e:4d:61:
29:f8:fb:84:3e:06:49:9d:82:fa:42:da:1a:d9:bc:
7a:3a:52:b0:d8:c7:ba:9f:62:05:35:a7:7b:69:b3:
75:b4:00:7e:d4:ef:d8:7a:6e:c1:06:93:ad:e2:64:
65:31:cf:e4:dd:72:e8:1a:43:d6:54:1a:6b:62:f2:
a9:ef:cc:21:0b:3a:a2:65:ca:35:54:5f:97:77:6c:
50:98:32:56:76:66:42:ca:ce:6a:d2:ff:08:21:60:
f2:57:d4:3a:e5:16:7a:79:5b:8e:bd:b7:94:a7:a9:
2b:d9:a7:05:7c:97:10:de:c6:d5:b9:d5:fb:88:1e:
ff:5b:e6:0f:94:1e:6f:b7:f6:20:32:7f:b2:63:cb:
09:82:ee:8b:b8:f6:39:74:e1:71:7a:ac:79:62:c9:
73:88:c3:94:95:40:84:d0:61:6a:2a:d4:e6:85:a4:
ea:69:f6:4a:c5:9c:9d:75:7f:0a:12:ad:06:96:eb:
ab:1b:5d:66:8d:13:aa:90:8f:ad:46:b6:d0:dd:a3:
78:a4:d4:3c:dc:8d:b3:f4:c3:b2:cc:4c:d5:2a:dc:
a1:30:76:7b:df:a1:3d:4c:2d:8e:70:30:52:cc:00:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AF:B3:26:FD:53:69:4A:10:B8:2E:C1:5A:A2:E6:B5:66:DE:5A:CA
X509v3 Authority Key Identifier:
keyid:10:AD:19:30:AF:9E:AF:DE:E1:0E:76:86:84:9D:41:AF:7E:F3:34:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK0ZMK-er97hDnaGhJ1Br37zNDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:14:ef:48:cd:d5:0c:c2:af:a4:b2:4d:09:ad:94:57:f1:a9:
a0:ab:06:1c:d7:b3:31:64:7f:c6:7d:80:77:28:ee:43:c0:0d:
07:55:f7:06:86:04:58:84:02:96:d0:7e:10:d2:40:e8:36:cf:
83:ac:84:bf:f2:d7:45:e2:c3:64:48:f4:28:8f:a6:03:e1:95:
1b:13:23:0c:86:89:f3:fd:35:d8:16:d3:cc:8b:82:7e:11:33:
27:14:f6:4e:09:e2:38:a4:df:50:4d:a9:7b:54:53:21:ce:09:
ea:e1:a9:c5:97:cb:20:0d:cf:bf:0b:78:3d:ba:a3:1d:6a:33:
a2:3f:ed:e7:b9:ae:a2:26:b3:cd:d9:a3:93:e4:ee:73:6a:f7:
11:10:a3:91:b3:ff:90:79:fa:ed:9c:27:64:dd:4f:d7:9a:3f:
ee:6c:58:85:80:7a:00:b3:5c:7f:44:44:43:a7:1a:6a:c0:46:
b7:d3:9a:dd:57:c2:93:d7:35:74:28:28:76:03:e3:f1:92:0b:
12:b9:95:35:e7:82:6b:d0:9b:86:9f:68:7b:a0:44:69:19:72:
7f:eb:a9:8c:46:e3:67:6c:df:46:83:1f:3e:c1:b8:3f:8d:6c:
84:f8:5c:f4:76:39:fd:97:63:cf:20:b9:7f:72:bb:f7:0a:e2:
8b:64:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 15:59:14 2024 by rpki-client on console.sobornost.net