
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.mft
File: 1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.mft (raw, json)
Hash identifier: JvX24pxpF3JSgy22gkSxIdUSHPSeQ9uUqcELGNkmkAs=
Subject key identifier: 5B:9A:2E:C6:1B:A2:B7:E4:B8:F1:89:5C:D1:91:82:B2:7C:E9:82:46
Authority key identifier: 1A:01:15:B0:00:22:6A:5C:C9:F8:9D:D6:F1:BD:8A:E2:AC:57:CC:46
Certificate issuer: /CN=1a0115b000226a5cc9f89dd6f1bd8ae2ac57cc46
Certificate serial: 63F09C93ECB9E59E765D20BC5AE7D0CE5BB88526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEVsAAialzJ-J3W8b2K4qxXzEY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.mft
Manifest number: 3B
Signing time: Tue 28 May 2024 05:36:25 +0000
Manifest this update: Tue 28 May 2024 05:31:25 +0000
Manifest next update: Wed 29 May 2024 06:54:25 +0000
Files and hashes: 1: 1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.crl (hash: BSJLcLqncJmcHm1X6tBq3A012TmCclrMxbNTzK6/xr4=)
2: AS60223.asa (hash: IUyuKKGy1A+zHB8/nnZl/Kk8JB7QDIJPzkRLt9A79CY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f0:9c:93:ec:b9:e5:9e:76:5d:20:bc:5a:e7:d0:ce:5b:b8:85:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0115b000226a5cc9f89dd6f1bd8ae2ac57cc46
Validity
Not Before: May 28 05:31:25 2024 GMT
Not After : May 29 06:54:25 2024 GMT
Subject: CN=5B9A2EC61BA2B7E4B8F1895CD19182B27CE98246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:84:1a:ad:4c:23:1d:f1:cf:f2:92:4f:83:
7f:a1:de:3a:14:a9:74:9a:ab:c0:ab:ea:21:6a:93:
46:a0:0c:66:e5:7d:99:77:7d:c4:64:e3:61:b7:48:
e2:65:7d:fa:c2:30:d7:f0:58:76:12:07:df:8b:44:
f4:8a:8c:02:11:8c:2d:c6:77:9c:02:b9:96:85:d3:
9e:c8:d7:f6:3a:0a:d3:f0:ad:7f:95:72:dc:12:47:
be:58:15:92:2e:51:d3:81:72:0e:b1:98:10:18:0f:
1c:71:23:42:fb:ce:f9:2a:b1:c1:2e:e5:1f:85:6e:
92:63:8e:d7:70:87:ad:53:fd:18:e9:2d:0f:02:ec:
f8:a8:06:1a:1c:c4:4d:7e:de:3b:4f:fd:5d:12:40:
10:10:a4:f6:c8:29:d5:81:69:76:74:29:20:25:e7:
57:83:af:2e:e8:8f:e7:cb:49:2c:16:b2:ba:48:47:
12:53:03:ae:58:3b:06:18:14:ee:b6:9d:af:ae:55:
5a:c1:a0:d2:45:b7:87:df:ea:31:f8:1c:e2:4d:16:
14:11:4d:47:31:0d:24:26:c4:60:1d:c5:71:15:40:
08:aa:c3:06:c1:7a:13:49:8e:d9:90:91:fc:ec:fc:
19:00:2a:8b:4a:f5:b3:38:7f:49:77:80:a2:a2:16:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:2E:C6:1B:A2:B7:E4:B8:F1:89:5C:D1:91:82:B2:7C:E9:82:46
X509v3 Authority Key Identifier:
keyid:1A:01:15:B0:00:22:6A:5C:C9:F8:9D:D6:F1:BD:8A:E2:AC:57:CC:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEVsAAialzJ-J3W8b2K4qxXzEY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7e72e00-b9c8-46bf-aa99-37c022efb774/0/1A0115B000226A5CC9F89DD6F1BD8AE2AC57CC46.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4b:0f:51:0a:3f:f8:7b:6f:44:08:8d:7c:88:42:db:69:68:
4e:f5:ff:39:7f:10:e3:d5:9b:c5:3c:60:af:22:0d:d8:f7:bf:
7e:e7:39:68:11:aa:eb:aa:cd:c9:38:5f:7e:52:9c:d8:c4:5b:
b0:ea:e7:58:a9:5c:b4:f3:ec:08:75:64:f2:3b:0b:27:07:35:
24:21:14:ce:df:35:72:91:a7:a0:85:44:6e:c8:df:33:ff:4a:
d5:70:81:7c:6a:3f:f4:af:1e:6b:05:5d:f1:d0:25:18:6a:32:
8a:0b:00:f2:e7:52:81:d6:10:65:3a:20:b9:e3:59:81:39:24:
1f:d5:c7:1d:a1:84:c2:92:eb:bf:7a:e3:2e:17:1d:cc:34:89:
37:9a:47:c7:95:ed:d3:63:8c:c6:02:14:d9:fe:f0:06:48:a6:
40:14:7a:59:e8:54:ce:e5:45:c3:5e:40:76:a4:9f:e2:ae:89:
75:f0:64:b4:16:18:fa:45:27:2c:c4:75:64:3b:4e:a4:32:71:
ba:1e:db:59:ab:92:41:85:45:2c:20:41:f6:34:2a:8a:8d:40:
61:7e:cb:96:c0:1c:8b:5e:27:2b:9e:5e:cf:8e:0f:b2:02:7e:
89:05:a3:ef:45:c3:23:62:2d:af:a4:a0:10:ed:a8:e4:fe:0b:
df:f6:26:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 07:01:33 2024 by rpki-client on console.sobornost.net