Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft
File: 2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft (raw, json)
Hash identifier: ZU7kHSkACrt8qMTwIb+tvcngmS95GWqGQuX6GXmaqhw=
Subject key identifier: 04:4A:68:D1:7F:96:90:52:14:A7:06:96:DB:24:E3:B9:AC:69:0D:71
Authority key identifier: D9:F3:49:D6:90:6E:D1:ED:D3:C8:9E:75:6E:6A:8C:E4:C1:91:00:54
Certificate issuer: /CN=d9f349d6906ed1edd3c89e756e6a8ce4c1910054
Certificate serial: 018CEDE1BB11B1AAC245D0382B3392207157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft
Manifest number: 080D
Signing time: Tue 09 Jan 2024 11:00:42 +0000
Manifest this update: Tue 09 Jan 2024 11:00:42 +0000
Manifest next update: Wed 10 Jan 2024 11:00:42 +0000
Files and hashes: 1: 2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.crl (hash: BxO3zJcCfAKxrpqsjmtJ3eVKnxYREnXgV5+wcHX4ugI=)
2: NrTpD5c914SBDtc0rJO1EOwl7jk.roa (hash: QyCVbSSBvvdhse4tROxxjgjpsadmEiL/13R8nlaB0oc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:e1:bb:11:b1:aa:c2:45:d0:38:2b:33:92:20:71:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f349d6906ed1edd3c89e756e6a8ce4c1910054
Validity
Not Before: Jan 9 11:00:42 2024 GMT
Not After : Jan 10 11:00:42 2024 GMT
Subject: CN=044a68d17f96905214a70696db24e3b9ac690d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:fc:c3:1e:31:7b:05:22:04:cf:27:8d:31:
3f:f3:97:0c:11:41:44:9b:36:72:5c:1d:46:7d:4b:
eb:84:60:be:bb:b1:88:73:32:34:c2:3d:38:da:46:
89:c3:03:1a:8f:15:6f:05:2a:11:55:40:ee:7c:7f:
5b:e9:c2:27:27:67:05:f9:b7:29:55:08:30:a4:9e:
f0:3b:38:25:b9:ed:bf:12:3e:0f:9c:82:2b:de:17:
e6:f6:8d:67:de:c7:00:21:46:63:82:47:37:cf:45:
25:4a:19:dc:00:a4:0c:07:5c:c6:20:ae:a5:c9:0e:
67:b9:fb:cf:ca:11:ae:d6:78:33:83:78:fa:a8:8f:
96:34:1e:a7:36:bb:74:9f:a8:33:45:b1:f6:6f:7c:
6e:0e:8e:47:df:f8:39:f3:73:d3:a8:d9:b1:f8:93:
5b:2d:e6:6c:8b:4d:f9:5e:1a:e6:30:00:d7:2b:53:
c3:2a:31:46:06:16:7a:95:7f:a8:b9:e3:f9:b1:5c:
e5:9d:1f:b9:c8:d2:a6:15:34:76:66:78:a1:f3:35:
12:c8:b2:c8:50:e5:db:c7:59:f7:72:a2:11:01:91:
b3:cc:3f:2a:2e:bf:fc:4b:f0:e1:da:8a:ec:76:ff:
e4:f9:f2:b9:6d:e1:37:a8:67:3a:22:28:bc:7b:d4:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4A:68:D1:7F:96:90:52:14:A7:06:96:DB:24:E3:B9:AC:69:0D:71
X509v3 Authority Key Identifier:
keyid:D9:F3:49:D6:90:6E:D1:ED:D3:C8:9E:75:6E:6A:8C:E4:C1:91:00:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d6:a8:25:bd:b9:a6:f6:34:6c:70:3d:18:a1:ac:48:4c:81:
8b:67:93:7d:90:bd:2e:3b:b9:cf:f0:0c:47:ef:fd:39:c8:cd:
0e:ce:ad:5a:99:e8:2f:f9:1e:10:e1:20:e4:4c:4f:6a:5f:13:
07:6b:a1:0a:db:76:d3:53:bd:4b:4c:cc:70:8c:9e:37:81:06:
ed:3b:bd:53:66:81:50:49:5b:14:89:75:6e:1e:a5:73:3d:3c:
5a:73:c2:96:ba:a8:b8:58:ba:78:72:f8:fd:5b:d2:52:b5:11:
c1:c4:77:e8:e7:fb:7a:df:9d:3e:e3:5e:26:54:5f:16:6c:5d:
80:17:df:06:15:bc:1c:12:4f:c2:6a:d3:7f:79:ed:49:e9:4f:
75:ae:19:4a:3a:d1:2b:38:f0:07:c1:e6:a8:4f:1b:f5:f3:f1:
40:a8:93:e3:08:bf:3f:7f:c4:c4:97:a5:9f:70:90:41:20:5d:
18:cd:3d:f5:10:1f:61:65:a3:7f:e8:be:9b:ec:61:7e:a5:90:
14:91:b8:10:9a:d8:e5:4a:15:ee:b7:24:26:42:8b:72:c6:c4:
9c:cb:3b:b1:10:a8:66:5d:1d:6f:9d:96:72:47:bf:dd:6b:4b:
f3:1a:60:74:d2:71:89:b8:b2:bb:45:ad:e2:c3:cf:f9:ca:e3:
12:cc:fc:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzt4bsRsarCRdA4KzOSIHFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjM0OWQ2OTA2ZWQxZWRkM2M4OWU3NTZlNmE4Y2U0YzE5
MTAwNTQwHhcNMjQwMTA5MTEwMDQyWhcNMjQwMTEwMTEwMDQyWjAzMTEwLwYDVQQD
EygwNDRhNjhkMTdmOTY5MDUyMTRhNzA2OTZkYjI0ZTNiOWFjNjkwZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdj8wx4xewUiBM8njTE/85cMEUFE
mzZyXB1GfUvrhGC+u7GIczI0wj042kaJwwMajxVvBSoRVUDufH9b6cInJ2cF+bcp
VQgwpJ7wOzglue2/Ej4PnIIr3hfm9o1n3scAIUZjgkc3z0UlShncAKQMB1zGIK6l
yQ5nufvPyhGu1ngzg3j6qI+WNB6nNrt0n6gzRbH2b3xuDo5H3/g583PTqNmx+JNb
LeZsi035XhrmMADXK1PDKjFGBhZ6lX+oueP5sVzlnR+5yNKmFTR2Znih8zUSyLLI
UOXbx1n3cqIRAZGzzD8qLr/8S/Dh2orsdv/k+fK5beE3qGc6Iii8e9T7gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARKaNF/lpBSFKcGltsk47msaQ1xMB8GA1UdIwQY
MBaAFNnzSdaQbtHt08iedW5qjOTBkQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZOSjFwQnUwZTNUeUo1MWJtcU01TUdSQUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yN2Q0ZjItZDFkYy00MWJkLWI4ZTYt
OTU0NWIxMzNjNGUzLzEvMmZOSjFwQnUwZTNUeUo1MWJtcU01TUdSQUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yN2Q0ZjItZDFkYy00MWJkLWI4ZTYtOTU0NWIxMzNjNGUz
LzEvMmZOSjFwQnUwZTNUeUo1MWJtcU01TUdSQUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9aoJb25
pvY0bHA9GKGsSEyBi2eTfZC9Lju5z/AMR+/9OcjNDs6tWpnoL/keEOEg5ExPal8T
B2uhCtt201O9S0zMcIyeN4EG7Tu9U2aBUElbFIl1bh6lcz08WnPClrqouFi6eHL4
/VvSUrURwcR36Of7et+dPuNeJlRfFmxdgBffBhW8HBJPwmrTf3ntSelPda4ZSjrR
KzjwB8HmqE8b9fPxQKiT4wi/P3/ExJeln3CQQSBdGM099RAfYWWjf+i+m+xhfqWQ
FJG4EJrY5UoV7rckJkKLcsbEnMs7sRCoZl0db52Wcke/3WtL8xpgdNJxibiyu0Wt
4sPP+crjEsz8SA==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:37 2024 by rpki-client on console.sobornost.net