Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
File: lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft (raw, json)
Hash identifier: ToB6gNVzk8EB188cG0awLNKqovTGOcRZk3zhmAlDMKY=
Subject key identifier: EC:98:79:60:B2:D9:3F:B8:FD:31:A6:3C:EB:85:97:BE:04:85:2C:F6
Authority key identifier: 97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
Certificate issuer: /CN=97206b5201df70eb916669b455849647797ab679
Certificate serial: 0193FB1DD77CE992DB73A6B3CB7862516424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
Manifest number: 033D
Signing time: Wed 25 Dec 2024 00:00:57 +0000
Manifest this update: Wed 25 Dec 2024 00:00:57 +0000
Manifest next update: Thu 26 Dec 2024 00:00:57 +0000
Files and hashes: 1: XcPmUFJ8bKg2bA3t96XXVSrN2Ag.roa (hash: FbwTi22PZGVU1q9JYAS8Qvt6AanUb8SNUN6htl193zs=)
2: lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl (hash: 7XmIc1omH8NKJqh+awWB+WcakWn/bctPVJVUG7wkums=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fb:1d:d7:7c:e9:92:db:73:a6:b3:cb:78:62:51:64:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97206b5201df70eb916669b455849647797ab679
Validity
Not Before: Dec 25 00:00:57 2024 GMT
Not After : Dec 26 00:00:57 2024 GMT
Subject: CN=ec987960b2d93fb8fd31a63ceb8597be04852cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:60:23:84:bf:f9:9d:75:80:f3:26:9f:8b:
42:f9:9b:0d:b6:a1:61:30:07:c0:34:7e:28:eb:9b:
09:52:3c:40:3e:3e:08:fe:c8:ea:f8:77:05:76:af:
46:25:a4:c7:a1:b6:a6:34:d3:90:fd:fb:1a:18:1a:
f3:07:0a:fc:41:13:92:0a:39:13:18:05:33:63:1f:
2f:69:c9:b4:e9:94:4a:17:f0:4b:9d:55:73:11:38:
03:17:21:e6:b6:5e:17:e7:33:5f:74:81:1b:d5:03:
95:e4:4d:09:56:c7:6f:f9:3b:3c:89:dd:d1:db:ce:
fc:6f:f5:13:1c:cf:f6:ec:c0:94:83:5c:d9:fa:80:
58:c1:bf:a8:75:e1:f0:a6:b2:f2:69:d4:a6:41:58:
19:33:fb:7b:69:c8:a4:e5:9e:6e:8a:d8:be:dd:ab:
40:d5:b8:d5:a0:d1:05:bc:b5:fc:34:83:b7:22:2c:
1c:5c:1b:50:bb:01:d4:d2:17:59:f7:ef:2f:de:25:
f7:88:35:ba:69:8a:df:81:f4:6d:33:23:e7:92:11:
f5:a5:63:84:83:e1:75:56:5f:be:05:08:6c:10:39:
d3:01:db:61:5f:a5:64:1b:c1:52:cd:d8:4d:0a:fd:
99:ee:70:bd:79:79:f8:b9:93:b4:a1:66:13:49:38:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:98:79:60:B2:D9:3F:B8:FD:31:A6:3C:EB:85:97:BE:04:85:2C:F6
X509v3 Authority Key Identifier:
keyid:97:20:6B:52:01:DF:70:EB:91:66:69:B4:55:84:96:47:79:7A:B6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyBrUgHfcOuRZmm0VYSWR3l6tnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da1226-ac22-4ea6-9e38-dcc62a240676/1/lyBrUgHfcOuRZmm0VYSWR3l6tnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ec:3a:7a:b6:b2:1e:8d:9c:cf:32:18:47:42:b1:02:62:bd:
f9:79:ac:aa:0f:32:0c:42:da:26:94:29:9c:1a:91:2d:8e:60:
aa:77:ba:23:26:8f:47:eb:af:13:2b:ce:20:cd:cd:51:63:f2:
44:2c:09:75:2a:26:1a:96:47:00:29:93:c3:19:8c:82:35:9e:
37:e7:7f:c8:24:10:92:f6:e2:b6:a0:84:46:2a:28:c3:05:1f:
77:98:bc:68:fa:4e:7d:73:14:47:14:c9:15:fc:47:72:2e:7f:
82:65:33:56:ef:20:25:fe:f8:85:e0:b6:e8:b6:43:68:05:5e:
66:90:71:d7:7d:a5:19:73:28:e9:1b:f7:e5:cc:11:f9:ab:90:
c5:36:28:0e:f2:86:b3:50:89:4e:78:4b:3e:89:5f:85:4a:34:
92:c4:91:0f:83:f8:b5:d4:91:ef:49:39:e4:62:94:c2:17:db:
3e:5f:99:ae:f6:4b:7e:4c:de:65:ee:0e:c6:a1:03:49:54:6e:
50:0c:d2:6f:bf:e5:f8:39:2e:d5:d8:82:8a:86:a4:41:e3:97:
79:96:e6:84:7d:d7:e9:3b:7f:63:a5:44:2f:fb:81:e5:7d:f4:
25:29:62:f9:92:29:4f:5e:e7:1e:b8:5c:2b:86:23:22:53:b6:
b1:35:d7:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZP7Hdd86ZLbc6azy3hiUWQkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MjA2YjUyMDFkZjcwZWI5MTY2NjliNDU1ODQ5NjQ3Nzk3
YWI2NzkwHhcNMjQxMjI1MDAwMDU3WhcNMjQxMjI2MDAwMDU3WjAzMTEwLwYDVQQD
EyhlYzk4Nzk2MGIyZDkzZmI4ZmQzMWE2M2NlYjg1OTdiZTA0ODUyY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRJgI4S/+Z11gPMmn4tC+ZsNtqFh
MAfANH4o65sJUjxAPj4I/sjq+HcFdq9GJaTHobamNNOQ/fsaGBrzBwr8QROSCjkT
GAUzYx8vacm06ZRKF/BLnVVzETgDFyHmtl4X5zNfdIEb1QOV5E0JVsdv+Ts8id3R
2878b/UTHM/27MCUg1zZ+oBYwb+odeHwprLyadSmQVgZM/t7acik5Z5uiti+3atA
1bjVoNEFvLX8NIO3IiwcXBtQuwHU0hdZ9+8v3iX3iDW6aYrfgfRtMyPnkhH1pWOE
g+F1Vl++BQhsEDnTAdthX6VkG8FSzdhNCv2Z7nC9eXn4uZO0oWYTSTh5cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyYeWCy2T+4/TGmPOuFl74EhSz2MB8GA1UdIwQY
MBaAFJcga1IB33DrkWZptFWElkd5erZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHlCclVnSGZjT3VSWm1tMFZZU1dSM2w2dG5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kYTEyMjYtYWMyMi00ZWE2LTllMzgt
ZGNjNjJhMjQwNjc2LzEvbHlCclVnSGZjT3VSWm1tMFZZU1dSM2w2dG5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kYTEyMjYtYWMyMi00ZWE2LTllMzgtZGNjNjJhMjQwNjc2
LzEvbHlCclVnSGZjT3VSWm1tMFZZU1dSM2w2dG5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOw6eray
Ho2czzIYR0KxAmK9+Xmsqg8yDELaJpQpnBqRLY5gqne6IyaPR+uvEyvOIM3NUWPy
RCwJdSomGpZHACmTwxmMgjWeN+d/yCQQkvbitqCERioowwUfd5i8aPpOfXMURxTJ
FfxHci5/gmUzVu8gJf74heC26LZDaAVeZpBx132lGXMo6Rv35cwR+auQxTYoDvKG
s1CJTnhLPolfhUo0ksSRD4P4tdSR70k55GKUwhfbPl+ZrvZLfkzeZe4OxqEDSVRu
UAzSb7/l+Dku1diCioakQeOXeZbmhH3X6Tt/Y6VEL/uB5X30JSli+ZIpT17nHrhc
K4YjIlO2sTXXlg==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:18 2024 by rpki-client on console.sobornost.net