Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
File: 3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft (raw, json)
Hash identifier: x+lSr1XOCUcjubuKAuprv2Hr2hGKLDD8bNzcO8uLkV0=
Subject key identifier: 2E:59:F2:2D:A1:D2:58:C8:08:CF:1A:64:9C:55:CE:75:A2:22:B9:AB
Authority key identifier: DF:36:9B:87:18:BD:66:8E:87:2C:88:F7:0F:29:62:2D:F3:C9:82:A4
Certificate issuer: /CN=df369b8718bd668e872c88f70f29622df3c982a4
Certificate serial: 019346038EEC8775C83A3CE3DB195E432643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zabhxi9Zo6HLIj3DyliLfPJgqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
Manifest number: 10B4
Signing time: Tue 19 Nov 2024 20:00:58 +0000
Manifest this update: Tue 19 Nov 2024 20:00:58 +0000
Manifest next update: Wed 20 Nov 2024 20:00:58 +0000
Files and hashes: 1: 3zabhxi9Zo6HLIj3DyliLfPJgqQ.crl (hash: DtR5FDov5C6d6dTR71b0FqHn/TvKJBQ+nBEODto6GZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:46:03:8e:ec:87:75:c8:3a:3c:e3:db:19:5e:43:26:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df369b8718bd668e872c88f70f29622df3c982a4
Validity
Not Before: Nov 19 20:00:58 2024 GMT
Not After : Nov 20 20:00:58 2024 GMT
Subject: CN=2e59f22da1d258c808cf1a649c55ce75a222b9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:11:6f:ec:7c:d2:3f:6b:2f:3b:9e:71:59:
f3:73:6c:16:22:84:d7:6d:7b:37:05:21:29:03:05:
21:ee:e2:ea:82:96:ec:34:76:41:23:96:dd:bd:22:
71:39:ce:4a:a1:28:e5:52:76:58:f8:dd:c0:bb:be:
73:2c:4e:10:cf:3d:56:8e:53:f0:92:98:a8:e3:30:
fc:2c:47:d5:f5:9e:3e:17:ef:bd:8a:81:7a:85:0d:
80:2a:69:d2:8e:4a:90:fa:4c:8d:84:27:b6:39:c3:
55:e6:54:e6:17:e3:fe:a2:5a:d9:67:be:af:fa:e5:
1b:d0:48:1a:86:89:8a:92:0a:40:27:7f:d8:41:65:
c6:d2:61:fd:3c:a2:5e:42:5b:9b:e3:96:4e:2a:29:
c7:7a:b0:4e:f5:07:61:e0:14:18:ae:35:4a:d7:62:
33:de:11:40:79:b7:c8:e1:e7:d7:2d:58:6f:e4:9b:
12:f1:5d:fb:9f:1b:2c:0c:02:45:f6:aa:fe:f7:92:
22:6d:e3:49:74:b9:89:8a:89:06:76:d0:47:67:6b:
8f:a0:07:69:09:00:da:32:bd:fb:f6:df:b8:61:3e:
50:8a:53:00:d4:37:07:0b:de:cb:a6:63:36:80:58:
33:79:f5:95:e7:0d:1c:d2:9d:62:f3:55:fa:95:c4:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:F2:2D:A1:D2:58:C8:08:CF:1A:64:9C:55:CE:75:A2:22:B9:AB
X509v3 Authority Key Identifier:
keyid:DF:36:9B:87:18:BD:66:8E:87:2C:88:F7:0F:29:62:2D:F3:C9:82:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zabhxi9Zo6HLIj3DyliLfPJgqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/698ecb-539a-47e7-ac2a-762b4698f107/1/3zabhxi9Zo6HLIj3DyliLfPJgqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:14:5e:ec:e6:66:93:e8:54:a9:93:76:0e:63:e3:46:78:59:
27:55:e3:36:36:75:96:d7:ad:23:20:92:c6:1a:d1:29:6f:d1:
2b:ef:aa:c2:0f:0d:a4:34:e4:04:c8:bf:b3:fd:23:a5:2a:67:
b2:95:e8:eb:5e:ba:0f:82:f9:f4:e9:6e:33:79:4e:a7:17:6c:
a3:f6:3a:6e:1f:52:fd:19:00:8a:cb:85:e2:90:26:61:f8:d6:
44:ba:dc:50:70:d7:43:e6:96:79:70:48:0e:00:b6:ef:26:a4:
c6:8e:a6:52:b9:51:d0:8a:37:74:75:51:74:83:48:07:cf:e8:
17:3a:79:27:13:af:e0:37:55:7c:dd:61:18:46:60:0a:2f:35:
4a:79:b4:b6:7a:aa:77:5c:64:e4:a1:64:da:b4:bf:2c:47:34:
10:f6:db:97:c5:55:d6:f6:17:66:59:ed:18:a0:99:fc:bc:05:
dc:d5:d3:35:72:7c:2b:03:6c:59:10:77:f6:15:f7:f5:3f:93:
18:d1:13:c0:0f:8a:3e:91:fd:70:43:3c:64:d6:68:2d:f5:80:
24:f2:63:c0:39:49:26:dc:8b:d8:0c:ee:e1:30:8d:72:2d:14:
a1:0f:c5:27:ed:15:a4:30:e4:90:5d:b2:e2:c7:3f:19:f7:03:
84:0e:b0:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNGA47sh3XIOjzj2xleQyZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMzY5Yjg3MThiZDY2OGU4NzJjODhmNzBmMjk2MjJkZjNj
OTgyYTQwHhcNMjQxMTE5MjAwMDU4WhcNMjQxMTIwMjAwMDU4WjAzMTEwLwYDVQQD
EygyZTU5ZjIyZGExZDI1OGM4MDhjZjFhNjQ5YzU1Y2U3NWEyMjJiOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytERb+x80j9rLzuecVnzc2wWIoTX
bXs3BSEpAwUh7uLqgpbsNHZBI5bdvSJxOc5KoSjlUnZY+N3Au75zLE4Qzz1WjlPw
kpio4zD8LEfV9Z4+F++9ioF6hQ2AKmnSjkqQ+kyNhCe2OcNV5lTmF+P+olrZZ76v
+uUb0EgahomKkgpAJ3/YQWXG0mH9PKJeQlub45ZOKinHerBO9Qdh4BQYrjVK12Iz
3hFAebfI4efXLVhv5JsS8V37nxssDAJF9qr+95IibeNJdLmJiokGdtBHZ2uPoAdp
CQDaMr379t+4YT5QilMA1DcHC97LpmM2gFgzefWV5w0c0p1i81X6lcSLsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5Z8i2h0ljICM8aZJxVznWiIrmrMB8GA1UdIwQY
MBaAFN82m4cYvWaOhyyI9w8pYi3zyYKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3phYmh4aTlabzZITElqM0R5bGlMZlBKZ3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OThlY2ItNTM5YS00N2U3LWFjMmEt
NzYyYjQ2OThmMTA3LzEvM3phYmh4aTlabzZITElqM0R5bGlMZlBKZ3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82OThlY2ItNTM5YS00N2U3LWFjMmEtNzYyYjQ2OThmMTA3
LzEvM3phYmh4aTlabzZITElqM0R5bGlMZlBKZ3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchRe7OZm
k+hUqZN2DmPjRnhZJ1XjNjZ1ltetIyCSxhrRKW/RK++qwg8NpDTkBMi/s/0jpSpn
spXo6166D4L59OluM3lOpxdso/Y6bh9S/RkAisuF4pAmYfjWRLrcUHDXQ+aWeXBI
DgC27yakxo6mUrlR0Io3dHVRdINIB8/oFzp5JxOv4DdVfN1hGEZgCi81Snm0tnqq
d1xk5KFk2rS/LEc0EPbbl8VV1vYXZlntGKCZ/LwF3NXTNXJ8KwNsWRB39hX39T+T
GNETwA+KPpH9cEM8ZNZoLfWAJPJjwDlJJtyL2Azu4TCNci0UoQ/FJ+0VpDDkkF2y
4sc/GfcDhA6wIw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:12:24 2024 by rpki-client on console.sobornost.net