Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
File: 0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft (raw, json)
Hash identifier: 0uKlpgB6n4hyXkxz0MtGYvvQReaoLxxBUu5+AlUeVsI=
Subject key identifier: E3:61:86:09:F1:BD:90:DA:7C:9A:EA:E8:D8:B7:D7:EF:AD:48:16:C9
Authority key identifier: D1:4F:74:7F:42:D6:F2:60:6F:80:8F:88:29:F4:3C:90:DD:48:CA:0B
Certificate issuer: /CN=d14f747f42d6f2606f808f8829f43c90dd48ca0b
Certificate serial: 0193FAE671C70867FD63A60AAAFB5C2F65DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
Manifest number: 0973
Signing time: Tue 24 Dec 2024 23:00:26 +0000
Manifest this update: Tue 24 Dec 2024 23:00:26 +0000
Manifest next update: Wed 25 Dec 2024 23:00:26 +0000
Files and hashes: 1: 0U90f0LW8mBvgI-IKfQ8kN1Iygs.crl (hash: Y7BQ15qnKvOKBHiPKHem/4CZCIg+dev8tlOLWxTz7MA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fa:e6:71:c7:08:67:fd:63:a6:0a:aa:fb:5c:2f:65:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14f747f42d6f2606f808f8829f43c90dd48ca0b
Validity
Not Before: Dec 24 23:00:26 2024 GMT
Not After : Dec 25 23:00:26 2024 GMT
Subject: CN=e3618609f1bd90da7c9aeae8d8b7d7efad4816c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:97:0a:53:ff:9d:32:50:34:06:e5:f4:b7:
44:ff:46:cb:19:fe:df:23:8d:16:7a:5d:9e:1e:00:
bd:8e:dc:85:85:c4:42:4a:b4:3e:52:4e:40:85:ad:
39:6f:c0:3f:35:33:25:48:17:c9:d8:c1:90:1b:90:
67:76:63:a8:f5:4a:21:49:9c:28:64:fb:14:a1:47:
a3:d2:c6:51:c0:be:1e:ed:c7:5a:3f:c9:18:7f:c0:
8d:24:77:d2:0a:df:98:9e:38:26:5f:16:12:67:90:
d9:17:28:87:de:79:71:28:0f:db:aa:1b:e5:87:d7:
b2:2d:5a:3d:50:69:af:54:1e:1d:68:4a:43:1a:10:
81:e8:f2:b8:52:af:e6:10:46:33:6a:7d:24:9f:1e:
d0:b8:0d:a1:6e:5c:5e:49:6a:d1:b3:ed:77:29:db:
06:5c:07:8c:05:09:92:fa:3e:1f:4d:65:1a:1b:78:
a6:21:56:f7:90:2d:a9:5a:fc:93:eb:8b:04:81:69:
3a:73:79:f5:cc:3b:e5:29:71:3d:2a:db:24:33:0b:
f6:6b:dd:e5:dc:02:d8:34:48:be:24:49:8d:30:1c:
a3:ab:a6:98:23:f5:88:f5:78:61:8d:f0:59:b1:d8:
c2:ea:e4:8c:5f:3d:e3:5f:f4:32:c6:36:59:58:e2:
ec:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:86:09:F1:BD:90:DA:7C:9A:EA:E8:D8:B7:D7:EF:AD:48:16:C9
X509v3 Authority Key Identifier:
keyid:D1:4F:74:7F:42:D6:F2:60:6F:80:8F:88:29:F4:3C:90:DD:48:CA:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0U90f0LW8mBvgI-IKfQ8kN1Iygs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7029b3-2ca8-4ba1-aa92-e6d472d3a825/1/0U90f0LW8mBvgI-IKfQ8kN1Iygs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fb:bb:d1:72:4b:9f:ff:5d:12:a4:e3:de:22:58:2e:53:6b:
b6:5e:32:7b:7b:7a:aa:21:f7:60:2c:40:b7:17:1e:8c:82:5f:
20:c2:5a:31:42:b4:cc:82:c2:4f:df:2c:05:d2:cd:34:d9:d2:
97:7e:6d:6d:5c:ae:e1:14:da:86:86:93:ce:42:31:1e:89:35:
15:b5:df:c9:f7:ec:ef:e5:36:ee:30:8b:8f:01:e9:57:35:ef:
07:2d:8d:68:7c:b7:63:67:01:10:8b:76:b9:27:0a:ef:1d:bc:
a3:c9:e0:05:7d:5c:55:0c:dc:67:a7:c5:92:02:bc:57:67:ba:
a2:fa:b5:2c:59:e9:51:81:7f:30:b1:4d:17:35:bb:12:20:12:
a0:c7:b6:b6:1a:ac:83:b9:eb:83:85:9b:f7:e8:29:74:57:b6:
3a:3a:f4:95:0f:77:05:b1:56:00:a7:97:8d:db:5c:d7:cb:82:
dd:ae:67:94:26:12:b6:21:4c:00:6a:7b:7a:64:7f:f9:52:1a:
fb:0a:4c:58:51:6f:43:0a:65:68:c1:03:91:2b:a5:bb:df:47:
b7:76:55:e1:4d:69:bf:4c:95:2c:76:9b:e0:f1:27:ba:07:e1:
cf:ea:5d:f1:94:9d:b3:54:a8:79:0a:bb:06:5a:c0:7d:61:4d:
f0:d5:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:33 2024 by rpki-client on console.sobornost.net