Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
File: 2qFwhybTI0m_uyoSD1jaog0dLMo.mft (raw, json)
Hash identifier: QVNx+U/ZXtxJJ8YKz9gm+1ZeLmWXI1BEMlKYIKqOB7g=
Subject key identifier: 95:D3:B1:CF:B6:24:E2:00:31:09:D0:46:3F:F2:AA:CD:5D:8E:A6:28
Authority key identifier: DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
Certificate issuer: /CN=daa1708726d32349bfbb2a120f58daa20d1d2cca
Certificate serial: 018CEDE1F07A0B57383717D830EA7B2A0D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qFwhybTI0m_uyoSD1jaog0dLMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
Manifest number: 08C4
Signing time: Tue 09 Jan 2024 11:00:56 +0000
Manifest this update: Tue 09 Jan 2024 11:00:56 +0000
Manifest next update: Wed 10 Jan 2024 11:00:56 +0000
Files and hashes: 1: 2qFwhybTI0m_uyoSD1jaog0dLMo.crl (hash: sv37Zm9Z69t4D4OBDQAzbDrytKLNvOvzczHJkzqjulQ=)
2: IqOnciWjVKlRggyTDQBReT5eRzE.roa (hash: ZlaMTgpmwmOdBn7m6Qm+9tkwYqslRi+4i/0bBxxhVL8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:e1:f0:7a:0b:57:38:37:17:d8:30:ea:7b:2a:0d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa1708726d32349bfbb2a120f58daa20d1d2cca
Validity
Not Before: Jan 9 11:00:56 2024 GMT
Not After : Jan 10 11:00:56 2024 GMT
Subject: CN=95d3b1cfb624e2003109d0463ff2aacd5d8ea628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:1c:02:05:de:60:32:6b:19:d7:ff:d8:43:
ad:22:34:1e:87:db:e9:1d:a8:d8:a0:60:3d:ab:98:
83:a5:8e:2b:ef:8b:02:6f:1e:18:54:4e:16:8e:a8:
22:80:19:0b:17:4a:d0:ac:b1:cf:a6:87:9f:38:28:
fc:b9:b2:9d:a6:56:2f:c0:0a:af:74:26:aa:f9:17:
c4:8b:6f:b7:7d:8f:12:43:1a:af:fa:8b:82:e5:7d:
de:f2:aa:08:a0:d7:fe:a9:e1:2c:7f:ae:82:67:0b:
1e:6c:93:1c:9e:1a:a9:d0:59:19:98:d6:58:43:86:
a3:77:dd:40:bd:72:35:7e:f0:57:3e:82:be:e9:87:
db:fe:6c:2b:d5:9b:c1:1a:7d:fa:ea:58:01:60:9c:
3f:87:e5:d3:ac:53:b6:12:57:87:0a:90:65:92:bc:
40:89:a2:76:ea:cc:07:54:25:cc:f3:91:2a:97:14:
1f:99:be:97:f0:f2:bb:00:16:c5:4f:84:00:99:a8:
0f:bf:35:e0:28:66:15:be:fa:3b:e4:b6:2f:d0:cd:
a9:da:51:32:5d:08:e0:85:d7:0f:c7:35:70:04:9a:
3b:e0:31:1c:91:c2:08:12:c6:1a:22:da:c6:e0:0d:
2f:c3:27:f2:62:5b:7f:88:75:ed:43:94:9e:5c:ab:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:B1:CF:B6:24:E2:00:31:09:D0:46:3F:F2:AA:CD:5D:8E:A6:28
X509v3 Authority Key Identifier:
keyid:DA:A1:70:87:26:D3:23:49:BF:BB:2A:12:0F:58:DA:A2:0D:1D:2C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qFwhybTI0m_uyoSD1jaog0dLMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fe9c1a-e27d-4277-b75c-c20767bf58a5/1/2qFwhybTI0m_uyoSD1jaog0dLMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2c:67:5f:b9:4d:11:d1:c3:b1:1e:a4:62:fc:b0:82:22:6c:
3a:5c:fb:72:79:00:2c:17:13:f9:e7:70:5c:19:b1:f1:a3:45:
e9:20:c9:80:19:15:bc:66:ff:f9:d6:0a:e0:68:2b:77:0f:18:
3a:1e:81:1b:3d:c8:85:72:ac:dd:cc:3d:57:51:26:e0:8d:49:
c6:5d:c2:b0:a0:6a:4f:88:78:02:41:8a:69:d9:e6:82:6c:ae:
be:10:ff:f8:e0:4d:69:43:f3:87:a2:2b:bc:7d:f4:df:97:0e:
bb:d6:6f:cd:6a:de:15:07:0d:40:81:91:38:2f:ab:6d:87:09:
7e:75:76:f8:46:f1:48:e0:3f:a8:1e:b8:63:43:cf:47:be:2a:
b4:a0:0d:3a:63:e1:ed:3b:9c:c0:f2:85:07:b1:56:77:1b:82:
c6:b5:71:37:2f:8b:31:87:cf:cb:fe:7f:68:34:f7:43:b3:81:
a5:4e:c5:8b:60:34:8c:93:1a:87:4b:59:d8:a9:a0:5e:70:a2:
11:43:04:04:85:b9:47:ed:8b:d0:8c:b9:f6:e3:91:86:2b:f8:
0b:03:41:35:96:05:9c:df:a7:30:b5:c7:1f:b7:e4:d5:22:f3:
31:fc:4f:f4:01:de:29:d6:8a:c2:5d:7b:19:3b:3f:8d:db:09:
d9:55:45:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzt4fB6C1c4NxfYMOp7Kg09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTE3MDg3MjZkMzIzNDliZmJiMmExMjBmNThkYWEyMGQx
ZDJjY2EwHhcNMjQwMTA5MTEwMDU2WhcNMjQwMTEwMTEwMDU2WjAzMTEwLwYDVQQD
Eyg5NWQzYjFjZmI2MjRlMjAwMzEwOWQwNDYzZmYyYWFjZDVkOGVhNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0QcAgXeYDJrGdf/2EOtIjQeh9vp
HajYoGA9q5iDpY4r74sCbx4YVE4WjqgigBkLF0rQrLHPpoefOCj8ubKdplYvwAqv
dCaq+RfEi2+3fY8SQxqv+ouC5X3e8qoIoNf+qeEsf66CZwsebJMcnhqp0FkZmNZY
Q4ajd91AvXI1fvBXPoK+6Yfb/mwr1ZvBGn366lgBYJw/h+XTrFO2EleHCpBlkrxA
iaJ26swHVCXM85EqlxQfmb6X8PK7ABbFT4QAmagPvzXgKGYVvvo75LYv0M2p2lEy
XQjghdcPxzVwBJo74DEckcIIEsYaItrG4A0vwyfyYlt/iHXtQ5SeXKueDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXTsc+2JOIAMQnQRj/yqs1djqYoMB8GA1UdIwQY
MBaAFNqhcIcm0yNJv7sqEg9Y2qINHSzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFGd2h5YlRJMG1fdXlvU0QxamFvZzBkTE1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZTljMWEtZTI3ZC00Mjc3LWI3NWMt
YzIwNzY3YmY1OGE1LzEvMnFGd2h5YlRJMG1fdXlvU0QxamFvZzBkTE1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZTljMWEtZTI3ZC00Mjc3LWI3NWMtYzIwNzY3YmY1OGE1
LzEvMnFGd2h5YlRJMG1fdXlvU0QxamFvZzBkTE1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARixnX7lN
EdHDsR6kYvywgiJsOlz7cnkALBcT+edwXBmx8aNF6SDJgBkVvGb/+dYK4Ggrdw8Y
Oh6BGz3IhXKs3cw9V1Em4I1Jxl3CsKBqT4h4AkGKadnmgmyuvhD/+OBNaUPzh6Ir
vH3035cOu9ZvzWreFQcNQIGROC+rbYcJfnV2+EbxSOA/qB64Y0PPR74qtKANOmPh
7TucwPKFB7FWdxuCxrVxNy+LMYfPy/5/aDT3Q7OBpU7Fi2A0jJMah0tZ2KmgXnCi
EUMEBIW5R+2L0Iy59uORhiv4CwNBNZYFnN+nMLXHH7fk1SLzMfxP9AHeKdaKwl17
GTs/jdsJ2VVFLA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:19 2024 by rpki-client on console.sobornost.net