Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7c36fd-3045-4a32-98dc-ff53e95a1ad5/1/kG5BciGLSRLjmSwBFK1fOhJSB00.mft
File: kG5BciGLSRLjmSwBFK1fOhJSB00.mft (raw, json)
Hash identifier: Oex01Y4x8hcRlHJ/TZOaf/MP5ChpSGLtiUgENlTvcSg=
Subject key identifier: 9B:24:DD:CB:0E:AD:15:BA:55:3F:48:D3:6D:12:0B:B5:96:C5:EB:67
Authority key identifier: 90:6E:41:72:21:8B:49:12:E3:99:2C:01:14:AD:5F:3A:12:52:07:4D
Certificate issuer: /CN=906e4172218b4912e3992c0114ad5f3a1252074d
Certificate serial: 019347159C29C269F6BC344259AE9AE50E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kG5BciGLSRLjmSwBFK1fOhJSB00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7c36fd-3045-4a32-98dc-ff53e95a1ad5/1/kG5BciGLSRLjmSwBFK1fOhJSB00.mft
Manifest number: 122E
Signing time: Wed 20 Nov 2024 01:00:18 +0000
Manifest this update: Wed 20 Nov 2024 01:00:18 +0000
Manifest next update: Thu 21 Nov 2024 01:00:18 +0000
Files and hashes: 1: kG5BciGLSRLjmSwBFK1fOhJSB00.crl (hash: 8WF/uv39p8gkVY8Ykrcg/2fG1j5LAbD+AVduOozu26E=)
2: vzQCI-JyCEbChpvNxLZnzJF1680.roa (hash: YuBklvkjHZAU08AWO1UgzrefLH+ZUaQJBWmNtIQxUFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:15:9c:29:c2:69:f6:bc:34:42:59:ae:9a:e5:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906e4172218b4912e3992c0114ad5f3a1252074d
Validity
Not Before: Nov 20 01:00:18 2024 GMT
Not After : Nov 21 01:00:18 2024 GMT
Subject: CN=9b24ddcb0ead15ba553f48d36d120bb596c5eb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:24:38:4d:38:0f:c6:44:64:b0:56:8f:ba:
08:ba:71:8d:4c:14:cb:52:12:49:09:36:a5:e9:e7:
9e:a7:2d:81:63:38:86:a0:d9:31:d0:af:89:80:a5:
67:9a:51:b2:29:f7:61:7a:3a:70:25:a6:85:56:54:
38:3b:18:db:b6:14:b3:40:fe:9b:a5:f3:db:c0:bd:
15:94:e0:dd:24:e3:dc:71:de:ef:2e:c5:80:e8:29:
6e:13:c7:29:ad:af:db:ef:be:9e:9e:63:6f:e3:29:
8f:d1:58:73:05:1e:8f:30:31:7c:13:64:93:1c:0d:
1d:5a:44:b1:bd:fb:18:3d:83:18:49:57:a4:42:af:
60:91:d5:00:93:04:0f:95:1f:4a:c8:40:b3:a2:1c:
c7:be:40:e2:b2:61:c9:71:e8:27:8c:60:39:2b:04:
48:6d:74:a5:db:1e:af:f2:12:4a:41:93:5f:01:b8:
a0:0e:69:c8:f2:24:e0:ca:35:50:09:30:ee:08:66:
26:ba:62:e8:8b:40:65:bb:08:b1:16:e5:f9:2e:f3:
7d:1d:92:03:42:4b:af:de:57:bb:ac:3c:1e:b0:84:
1d:19:89:32:34:db:04:fd:70:31:2f:8d:c2:8d:9a:
30:fa:be:06:13:20:89:22:c6:f6:ef:06:10:60:c9:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:DD:CB:0E:AD:15:BA:55:3F:48:D3:6D:12:0B:B5:96:C5:EB:67
X509v3 Authority Key Identifier:
keyid:90:6E:41:72:21:8B:49:12:E3:99:2C:01:14:AD:5F:3A:12:52:07:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kG5BciGLSRLjmSwBFK1fOhJSB00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7c36fd-3045-4a32-98dc-ff53e95a1ad5/1/kG5BciGLSRLjmSwBFK1fOhJSB00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7c36fd-3045-4a32-98dc-ff53e95a1ad5/1/kG5BciGLSRLjmSwBFK1fOhJSB00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1c:84:6a:14:bb:f5:c0:f8:d5:25:85:e0:87:b2:8f:51:8e:
e1:14:ab:d9:e6:87:c6:98:b3:bf:53:d9:db:fc:9b:bc:7d:fc:
f8:df:d9:33:d9:ab:f4:75:76:06:de:cd:6b:2e:40:0f:c8:52:
cb:ac:72:3d:70:34:ea:ed:26:eb:a8:64:c1:19:e8:37:94:14:
06:1b:e0:f4:f4:d6:58:36:fc:55:a6:9c:5d:e8:e8:76:9b:38:
21:61:88:bc:b2:cd:2f:5e:13:4a:31:e6:52:c8:b7:fa:13:56:
0d:a0:71:ee:6d:da:ee:9e:bd:ac:ec:10:c1:d2:26:52:f0:3d:
a6:02:1d:eb:4f:15:50:dd:69:76:78:78:e2:7e:fe:eb:61:98:
19:77:03:ba:11:97:a1:b0:3a:13:51:1c:df:28:be:03:74:70:
59:6e:e8:33:99:f8:37:a6:cc:90:e4:fb:df:c5:d2:33:99:75:
37:19:f7:c5:5a:1f:a9:aa:7c:4d:01:75:c1:e8:36:b0:bf:bb:
a7:c3:6d:b4:33:60:a4:b6:88:fc:c2:76:fc:1f:e3:46:d8:7d:
34:ee:d0:6d:8d:27:31:02:04:a0:36:8c:8a:e9:c9:99:75:14:
d4:aa:e9:11:32:34:2e:c2:fd:68:17:55:03:40:5a:c2:7a:95:
85:f2:1b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHFZwpwmn2vDRCWa6a5Q6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNmU0MTcyMjE4YjQ5MTJlMzk5MmMwMTE0YWQ1ZjNhMTI1
MjA3NGQwHhcNMjQxMTIwMDEwMDE4WhcNMjQxMTIxMDEwMDE4WjAzMTEwLwYDVQQD
Eyg5YjI0ZGRjYjBlYWQxNWJhNTUzZjQ4ZDM2ZDEyMGJiNTk2YzVlYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA4kOE04D8ZEZLBWj7oIunGNTBTL
UhJJCTal6eeepy2BYziGoNkx0K+JgKVnmlGyKfdhejpwJaaFVlQ4OxjbthSzQP6b
pfPbwL0VlODdJOPccd7vLsWA6CluE8cpra/b776enmNv4ymP0VhzBR6PMDF8E2ST
HA0dWkSxvfsYPYMYSVekQq9gkdUAkwQPlR9KyECzohzHvkDismHJcegnjGA5KwRI
bXSl2x6v8hJKQZNfAbigDmnI8iTgyjVQCTDuCGYmumLoi0BluwixFuX5LvN9HZID
Qkuv3le7rDwesIQdGYkyNNsE/XAxL43CjZow+r4GEyCJIsb27wYQYMk7iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsk3csOrRW6VT9I020SC7WWxetnMB8GA1UdIwQY
MBaAFJBuQXIhi0kS45ksARStXzoSUgdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0c1QmNpR0xTUkxqbVN3QkZLMWZPaEpTQjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YzM2ZmQtMzA0NS00YTMyLTk4ZGMt
ZmY1M2U5NWExYWQ1LzEva0c1QmNpR0xTUkxqbVN3QkZLMWZPaEpTQjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YzM2ZmQtMzA0NS00YTMyLTk4ZGMtZmY1M2U5NWExYWQ1
LzEva0c1QmNpR0xTUkxqbVN3QkZLMWZPaEpTQjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhyEahS7
9cD41SWF4Ieyj1GO4RSr2eaHxpizv1PZ2/ybvH38+N/ZM9mr9HV2Bt7Nay5AD8hS
y6xyPXA06u0m66hkwRnoN5QUBhvg9PTWWDb8VaacXejodps4IWGIvLLNL14TSjHm
Usi3+hNWDaBx7m3a7p69rOwQwdImUvA9pgId608VUN1pdnh44n7+62GYGXcDuhGX
obA6E1Ec3yi+A3RwWW7oM5n4N6bMkOT738XSM5l1Nxn3xVofqap8TQF1weg2sL+7
p8NttDNgpLaI/MJ2/B/jRth9NO7QbY0nMQIEoDaMiunJmXUU1KrpETI0LsL9aBdV
A0BawnqVhfIbsQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:12:08 2024 by rpki-client on console.sobornost.net