Manifest
$ rpki-client -vvf rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
File: Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft (raw, json)
Hash identifier: oaKcdjF30Wi3tYZuTPKb1Hy90WxCKeNix0jWb3F2O0w=
Subject key identifier: 05:C9:FA:AE:96:00:8B:E2:5E:19:3D:7B:24:68:8D:FC:EE:97:37:AF
Authority key identifier: 2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13
Certificate issuer: /CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
Certificate serial: 018CED3CFF07684FD38F8C693E6E7C0C3866
Authority info access: rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
Subject info access: rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
Manifest number: 1CA5
Signing time: Tue 09 Jan 2024 08:00:41 +0000
Manifest this update: Tue 09 Jan 2024 08:00:41 +0000
Manifest next update: Wed 10 Jan 2024 08:00:41 +0000
Files and hashes: 1: Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl (hash: Nvu25ZnYBNuSHuuoTLCHZEGaiuFp+rG0YMxDcGV7ypM=)
2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer (hash: sZjePnlIrETXyoq+dTc1YA/Ly35MpwkcHwjaxY7leJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:3c:ff:07:68:4f:d3:8f:8c:69:3e:6e:7c:0c:38:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
Validity
Not Before: Jan 9 08:00:41 2024 GMT
Not After : Jan 10 08:00:41 2024 GMT
Subject: CN=05c9faae96008be25e193d7b24688dfcee9737af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:8b:65:94:c4:77:e6:e0:fd:76:53:25:34:
f5:d5:21:1f:c2:fa:5e:16:50:27:7d:b1:e7:95:7f:
00:8b:f5:4e:0b:5d:6c:88:be:34:f9:a7:ca:37:bf:
b8:98:e5:73:7f:6b:e8:44:df:ba:2e:4d:55:f1:e9:
a0:cb:c8:44:03:e8:02:b3:74:72:65:b0:4e:f3:c3:
c6:84:5a:8c:e0:42:52:f1:31:9e:10:48:77:23:f0:
01:6f:20:ee:f7:62:db:07:9d:46:fc:d7:d3:c9:ba:
01:d2:db:3b:aa:8b:6c:0e:6f:48:66:8e:01:b4:9d:
52:11:39:d0:09:51:f1:c9:67:18:44:7b:8a:d6:cc:
f9:34:27:9a:f4:a3:a1:d5:63:5f:3b:db:5a:af:ad:
71:f6:55:f2:58:66:d7:3c:3a:ae:96:0e:18:61:43:
83:4e:e7:5d:58:e1:d2:26:61:89:6b:f1:e0:70:a6:
ff:bc:3f:74:0a:20:67:0c:d4:d6:8e:37:1c:01:67:
bc:60:69:87:5b:c9:06:2e:70:0b:7c:ad:8a:de:3d:
8b:ce:53:b7:aa:ff:5e:4b:ac:b6:08:1a:cf:d0:fc:
3f:5c:57:93:83:18:3c:03:40:e6:4c:58:20:93:2f:
de:e5:79:3b:9c:57:7c:01:4e:ec:c7:10:4a:e9:d2:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:FA:AE:96:00:8B:E2:5E:19:3D:7B:24:68:8D:FC:EE:97:37:AF
X509v3 Authority Key Identifier:
keyid:2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c9:a2:30:00:3a:da:53:b5:83:d4:ff:b8:df:89:55:8f:49:
0a:61:c2:99:0f:6f:fe:b3:4d:20:42:91:27:62:31:a4:50:3c:
7f:29:ba:0d:1f:58:26:ed:f2:94:9c:6b:12:8f:dd:8b:28:8d:
6b:96:f5:44:f8:c5:c1:e9:0f:49:a5:24:4d:5d:ce:ba:f1:57:
f7:de:18:57:85:0e:aa:13:68:b9:68:9d:76:19:05:ed:88:c5:
8b:87:d5:d1:31:46:d4:f8:7d:11:73:c9:12:10:b6:97:36:bd:
50:0a:df:98:16:a2:8b:12:8e:9e:a1:4b:0e:96:90:1e:a7:69:
87:d2:95:2e:4c:f9:20:10:40:ec:81:f9:f7:2c:72:a8:f3:9a:
85:48:ca:be:66:cc:90:eb:8e:3b:1c:91:99:b7:c0:44:51:36:
19:ca:3d:c0:94:31:53:57:3a:26:a9:4d:b0:d3:7d:9c:23:8b:
69:89:33:c0:25:7e:35:bd:6e:78:e4:59:ad:55:84:eb:7f:58:
51:57:e3:9b:81:4d:3b:29:4f:0a:43:41:b2:6f:e2:a6:e8:59:
cc:ea:d3:6c:59:94:c1:78:b3:b0:88:02:94:f1:4e:6f:6f:ba:
7e:92:23:60:28:7f:5e:a0:5b:db:ec:91:84:a6:0f:37:ab:87:
44:a5:5a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:50 2024 by rpki-client on console.sobornost.net