Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.mft
File: ss1PkikJW98xqnhqHlW5l3-OWwU.mft (raw, json)
Hash identifier: V/xAg1SKe4IerrLFGZA/lLttWrcJVH4IEuixzTh1+MA=
Subject key identifier: 18:C0:10:CB:B2:DE:91:50:DB:DA:AB:FC:1B:5E:49:70:A8:33:29:9A
Authority key identifier: B2:CD:4F:92:29:09:5B:DF:31:AA:78:6A:1E:55:B9:97:7F:8E:5B:05
Certificate issuer: /CN=b2cd4f9229095bdf31aa786a1e55b9977f8e5b05
Certificate serial: 01853F1F4FF6B1DAD9C696DBE8CE5BA8A089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss1PkikJW98xqnhqHlW5l3-OWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.mft
Manifest number: 0BDD
Signing time: Fri 23 Dec 2022 13:14:54 +0000
Manifest this update: Fri 23 Dec 2022 13:14:54 +0000
Manifest next update: Sat 24 Dec 2022 13:14:54 +0000
Files and hashes: 1: ss1PkikJW98xqnhqHlW5l3-OWwU.crl (hash: PauGfK6NSNe3K9Uu9WeKGgk6iFIivhzThHQDCXdXMPE=)
2: zGSlecf-Mb2Lr0ELUZBt4X9sJFY.roa (hash: Sjr+lts/NYtFDCyPAuJtXvgiw8roi7CT9iWlsop++Lk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:1f:4f:f6:b1:da:d9:c6:96:db:e8:ce:5b:a8:a0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd4f9229095bdf31aa786a1e55b9977f8e5b05
Validity
Not Before: Dec 23 13:14:54 2022 GMT
Not After : Dec 24 13:14:54 2022 GMT
Subject: CN=18c010cbb2de9150dbdaabfc1b5e4970a833299a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:1e:e5:53:a7:e3:70:30:8e:a5:7c:1d:c5:
ae:75:0c:49:2f:75:64:98:96:45:a4:ef:3e:1a:6b:
4a:9a:d5:8d:f8:e5:c1:16:b3:5f:50:e7:8b:5f:ad:
25:9c:ec:5f:4e:e4:0f:9e:ab:0f:19:d3:f3:cc:37:
67:1f:1a:0a:08:d5:d1:56:15:db:8b:b1:39:42:05:
a9:5f:3f:b2:c7:71:a6:55:de:79:4b:2a:78:0a:91:
48:16:9b:47:8c:b2:9d:ba:0e:bc:9d:87:dc:f2:70:
6b:ad:18:84:f0:58:54:80:d8:64:4c:30:de:93:3b:
44:5f:5b:67:48:1a:ae:95:3d:7b:69:fa:cb:6a:e2:
01:b9:88:7d:cc:e4:14:32:82:2e:4f:ad:10:22:e0:
9f:cc:5d:68:1e:ab:52:e5:3c:0d:bd:9a:33:7f:6b:
45:d1:b1:01:19:49:0f:41:2e:45:05:e1:70:09:4c:
90:03:ff:03:4c:8e:e8:6f:79:5f:e1:3f:b5:50:3f:
f7:53:36:2b:6b:0e:a2:ba:7e:9a:90:cf:4e:d3:16:
4d:1a:90:e1:41:9b:de:58:5c:64:25:a3:ad:fc:54:
9b:51:3f:de:f2:83:6d:19:51:46:04:5a:59:d1:e6:
3c:ed:e8:4f:ed:ef:97:32:47:50:b6:aa:ee:16:55:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C0:10:CB:B2:DE:91:50:DB:DA:AB:FC:1B:5E:49:70:A8:33:29:9A
X509v3 Authority Key Identifier:
keyid:B2:CD:4F:92:29:09:5B:DF:31:AA:78:6A:1E:55:B9:97:7F:8E:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss1PkikJW98xqnhqHlW5l3-OWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/15fadd-c60f-487c-975e-b0571d6921b4/1/ss1PkikJW98xqnhqHlW5l3-OWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:14:fb:c2:a6:1b:8a:98:86:66:e9:ec:85:93:95:50:d4:cf:
6f:09:76:06:fa:66:6f:f0:29:ab:5f:1e:e8:a9:b9:5b:cd:07:
36:49:a2:e5:ad:49:cb:80:0c:64:57:6a:53:5b:aa:aa:4c:83:
79:1b:43:b7:10:57:bb:1c:ad:63:10:10:7f:92:0c:e3:f4:ed:
57:b9:b4:1d:da:d5:1b:e6:2c:54:86:69:27:2a:75:61:e4:bd:
11:54:b3:22:33:40:d4:11:35:62:e0:8b:65:a0:e0:39:8f:d8:
49:d6:e6:ec:3a:eb:f6:31:65:4f:34:53:76:37:e3:59:e7:75:
28:d6:ad:51:6c:55:a2:8b:74:0c:27:89:8d:17:19:59:20:4e:
4e:a1:9c:48:3e:52:9e:06:65:50:90:eb:ab:e5:a8:50:c7:c4:
e5:a1:7f:46:e8:f2:2f:5f:2c:e3:ba:bf:d8:40:69:f6:2a:b4:
63:9a:6c:d7:96:79:67:0a:5e:ea:96:34:58:b8:f1:96:70:0c:
a1:d1:83:b1:de:7e:51:c3:4b:ec:81:0b:eb:4e:37:f4:54:97:
5f:2e:52:f0:99:99:a6:28:d8:e8:d6:29:b9:6c:5d:f9:6a:19:
99:2a:61:09:0d:35:2b:21:95:a0:c0:6e:ba:98:64:2c:2e:17:
4d:e7:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:57 2023 by rpki-client on console.sobornost.net