Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/kywI9yQRBtlM17yQKcPliLgCIVs.mft
File: kywI9yQRBtlM17yQKcPliLgCIVs.mft (raw, json)
Hash identifier: +To/musfebYxn7z0Xy8qzofh8wT9ptE4PrM1gMnvQl0=
Subject key identifier: 5B:AE:BA:6C:57:C9:30:08:E3:33:48:89:5C:B6:02:00:13:FC:21:F4
Authority key identifier: 93:2C:08:F7:24:11:06:D9:4C:D7:BC:90:29:C3:E5:88:B8:02:21:5B
Certificate issuer: /CN=932c08f7241106d94cd7bc9029c3e588b802215b
Certificate serial: 018AFA5946F9C6C228E47886E35B4859F8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kywI9yQRBtlM17yQKcPliLgCIVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/kywI9yQRBtlM17yQKcPliLgCIVs.mft
Manifest number: 0898
Signing time: Wed 04 Oct 2023 11:01:09 +0000
Manifest this update: Wed 04 Oct 2023 11:01:09 +0000
Manifest next update: Thu 05 Oct 2023 11:01:09 +0000
Files and hashes: 1: eLwMC4qrOpeI3zkSMgow96Leb5I.roa (hash: McyTMO2ZbmCdncILUxAYs6lQMcq5nZxd66a5LgOYB64=)
2: kywI9yQRBtlM17yQKcPliLgCIVs.crl (hash: VkJO6fio1l1vNbZnpoKzQqstVRg8xkZ8QmEYm8vu//Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:59:46:f9:c6:c2:28:e4:78:86:e3:5b:48:59:f8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932c08f7241106d94cd7bc9029c3e588b802215b
Validity
Not Before: Oct 4 11:01:09 2023 GMT
Not After : Oct 5 11:01:09 2023 GMT
Subject: CN=5baeba6c57c93008e33348895cb6020013fc21f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:80:06:02:e5:dd:3b:84:ca:18:ed:4c:e2:
22:17:e0:65:ad:86:6d:d3:b9:22:50:69:84:19:d6:
f1:69:53:4f:34:34:05:12:00:7c:6f:5e:f1:3c:f1:
21:bb:ac:2d:ab:fa:31:ce:c0:38:fa:d1:07:4b:38:
c5:25:94:27:b6:d1:2f:2e:20:4b:48:73:74:f2:b6:
48:ac:62:81:45:63:05:3f:44:df:88:f8:91:0d:49:
ab:e9:45:19:49:f2:c3:5f:23:aa:bc:3c:f2:d8:cb:
7b:1b:b7:b0:94:ce:1d:e3:af:be:14:19:71:dc:09:
88:57:f9:4a:a6:4c:c5:e4:98:f2:97:6d:d8:b9:41:
82:49:b7:38:b0:5a:6b:a7:22:ba:02:c1:83:0c:33:
f8:3a:da:45:15:5a:03:65:8a:e4:dc:67:f1:d0:bc:
bd:85:1b:dd:87:b6:86:43:72:04:ff:7f:e3:74:cb:
b3:f6:7c:b0:77:06:ce:82:bf:23:87:e9:7c:db:6f:
8a:6c:60:db:64:9b:6d:e9:66:ae:41:b6:1d:e1:b0:
77:8f:fb:80:0a:5b:d0:22:80:45:24:0a:5b:34:45:
ff:42:dc:07:67:35:c3:fd:2a:2c:f6:94:04:15:a7:
8a:fd:2d:37:4f:b8:8b:b9:0b:0d:78:51:b9:00:57:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:BA:6C:57:C9:30:08:E3:33:48:89:5C:B6:02:00:13:FC:21:F4
X509v3 Authority Key Identifier:
keyid:93:2C:08:F7:24:11:06:D9:4C:D7:BC:90:29:C3:E5:88:B8:02:21:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kywI9yQRBtlM17yQKcPliLgCIVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/kywI9yQRBtlM17yQKcPliLgCIVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e7ec3b-29f9-4c47-b5c2-8803965a4a3e/1/kywI9yQRBtlM17yQKcPliLgCIVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:bd:98:d1:08:1f:5a:16:e1:8c:8b:d7:ff:fb:db:87:7e:a5:
3f:b2:3c:2a:9a:59:61:a9:04:7e:59:a5:83:00:f8:89:94:0f:
0b:5d:23:80:da:71:44:f6:2c:3d:fa:4b:d7:15:86:76:31:74:
f6:5c:df:e4:cd:c9:2c:c3:75:7b:af:76:89:df:c6:0d:66:c6:
26:68:71:e0:43:d9:3d:cd:09:21:c8:cc:b0:30:5e:5f:99:61:
59:14:0a:77:46:d2:45:7b:e0:bf:2d:0d:f8:a7:c2:6a:e1:61:
3d:e5:5a:c5:73:92:a8:ae:7c:e8:90:8f:a5:36:d6:2c:b7:ea:
ac:b5:19:dc:8a:f4:6d:2e:f0:bd:0c:d4:a8:48:99:ea:30:f6:
3f:13:03:89:a6:7d:a9:f9:00:0e:ed:33:25:57:26:4d:66:a9:
89:60:ba:44:14:b4:d3:22:25:17:c8:62:73:0d:0d:72:a2:5e:
27:c5:e8:f5:5d:8c:00:47:55:30:88:03:54:97:6e:89:37:9c:
0e:50:06:45:b3:d5:c1:f1:eb:e6:50:7e:b1:a1:fb:66:b5:fa:
23:dd:c1:49:c3:cb:76:c5:79:c0:32:8b:46:40:0f:ba:f8:50:
ed:ff:6c:82:b9:da:62:3b:dc:cf:aa:68:08:35:5f:04:af:6f:
99:80:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net