Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.mft
File: 0kNgnAcZXiAiEHIziNHC5IGAqt0.mft (raw, json)
Hash identifier: +9mmNvZS9tAZipngSH1MjbL41Rb5vgt2dOEnMe5UHeY=
Subject key identifier: 5C:70:FC:F1:9E:8B:38:67:33:D7:C8:EE:6F:77:42:B4:3F:FE:ED:F2
Authority key identifier: D2:43:60:9C:07:19:5E:20:22:10:72:33:88:D1:C2:E4:81:80:AA:DD
Certificate issuer: /CN=d243609c07195e202210723388d1c2e48180aadd
Certificate serial: 01948F63BF537C02E92A5DBB5D335CA94BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kNgnAcZXiAiEHIziNHC5IGAqt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.mft
Manifest number: 08B5
Signing time: Wed 22 Jan 2025 19:01:06 +0000
Manifest this update: Wed 22 Jan 2025 19:01:06 +0000
Manifest next update: Thu 23 Jan 2025 19:01:06 +0000
Files and hashes: 1: 0kNgnAcZXiAiEHIziNHC5IGAqt0.crl (hash: LEshWqRvoCc7/W5p/mI/pRqXxrCfv/wTQ/vKtNsetLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:63:bf:53:7c:02:e9:2a:5d:bb:5d:33:5c:a9:4b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d243609c07195e202210723388d1c2e48180aadd
Validity
Not Before: Jan 22 19:01:06 2025 GMT
Not After : Jan 23 19:01:06 2025 GMT
Subject: CN=5c70fcf19e8b386733d7c8ee6f7742b43ffeedf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:1a:cf:2a:95:88:f7:1d:d7:01:55:f2:e2:
a2:6c:a2:ec:0a:41:55:79:9a:7c:c4:c8:fa:9a:ef:
3e:54:cf:c8:4c:db:7a:a8:ba:17:c0:fc:bf:9a:15:
6a:df:e7:54:4e:09:05:e7:dd:48:b5:28:df:a5:af:
ad:e0:4a:2d:81:29:b8:94:12:71:df:22:53:49:12:
cf:46:b3:83:11:48:2d:9b:3d:b2:f8:6d:2d:06:58:
73:21:12:16:0e:68:6a:ca:6d:86:71:63:76:7b:bd:
47:35:f6:16:50:eb:65:54:7e:01:63:02:f3:67:31:
26:4e:c1:cf:96:94:ca:d7:28:25:cb:20:c1:8d:85:
55:c1:0c:d2:c5:05:1a:11:39:58:5d:bb:73:da:cd:
75:74:fa:de:a5:cb:ff:4c:fc:5d:19:58:a8:db:fd:
a4:ab:5e:6a:db:1e:77:3c:cf:d9:68:37:3c:89:6d:
0a:0b:7f:4d:d7:43:05:67:cc:c7:b8:88:fa:40:b7:
ab:b3:db:a1:66:58:38:07:43:fc:68:d6:b5:0d:2d:
ff:af:d9:ff:2d:fb:dc:64:39:85:26:57:66:f1:c7:
9e:43:e8:7d:3d:b6:89:38:a6:47:d4:44:9c:b8:71:
5f:dc:e1:e2:71:be:93:80:c4:b4:97:6e:d2:1b:90:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:70:FC:F1:9E:8B:38:67:33:D7:C8:EE:6F:77:42:B4:3F:FE:ED:F2
X509v3 Authority Key Identifier:
keyid:D2:43:60:9C:07:19:5E:20:22:10:72:33:88:D1:C2:E4:81:80:AA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kNgnAcZXiAiEHIziNHC5IGAqt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/038449-a99b-4e9c-8ed6-46127fd95aaa/1/0kNgnAcZXiAiEHIziNHC5IGAqt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f9:89:38:7f:ce:ae:ad:99:e1:25:73:05:60:9f:92:db:5b:
d4:c8:16:df:49:0d:c3:de:ae:44:88:66:54:fd:32:78:eb:da:
e6:a2:27:0c:48:e8:3d:fe:a2:09:83:ab:45:f4:91:1c:b9:65:
54:9c:81:e8:70:f4:4a:80:cb:ec:f5:e7:07:fc:52:50:9e:9b:
ac:d9:32:84:17:12:92:34:4a:d8:b7:75:fa:3f:18:8e:9d:18:
02:83:cd:cb:a9:1e:f5:81:45:96:db:b4:6b:76:4f:65:b5:3b:
10:11:06:23:cd:86:cd:0f:be:91:b1:91:8f:69:2f:de:50:67:
b6:37:b2:e1:ab:c2:6e:94:f1:9e:14:94:83:16:b8:f4:34:0a:
db:54:5f:37:19:91:40:4b:f1:6a:44:89:c3:ed:84:3f:44:1a:
bd:3d:fa:d4:d5:1a:d5:95:35:89:bf:1d:01:b5:da:86:26:fe:
84:96:e4:95:4d:89:dc:be:3c:50:86:45:1c:7c:ee:a0:8e:1e:
7f:e5:4d:bc:62:79:7c:96:7a:c5:7a:c5:30:55:b1:0d:81:79:
76:32:bd:1f:12:ca:ac:62:05:48:60:21:3e:bf:c4:e1:3f:1a:
41:9b:a9:e3:2f:bc:f3:b6:02:2b:7e:53:75:eb:3e:25:d7:b8:
3c:01:53:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSPY79TfALpKl27XTNcqUvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDM2MDljMDcxOTVlMjAyMjEwNzIzMzg4ZDFjMmU0ODE4
MGFhZGQwHhcNMjUwMTIyMTkwMTA2WhcNMjUwMTIzMTkwMTA2WjAzMTEwLwYDVQQD
Eyg1YzcwZmNmMTllOGIzODY3MzNkN2M4ZWU2Zjc3NDJiNDNmZmVlZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pgazyqViPcd1wFV8uKibKLsCkFV
eZp8xMj6mu8+VM/ITNt6qLoXwPy/mhVq3+dUTgkF591ItSjfpa+t4EotgSm4lBJx
3yJTSRLPRrODEUgtmz2y+G0tBlhzIRIWDmhqym2GcWN2e71HNfYWUOtlVH4BYwLz
ZzEmTsHPlpTK1yglyyDBjYVVwQzSxQUaETlYXbtz2s11dPrepcv/TPxdGVio2/2k
q15q2x53PM/ZaDc8iW0KC39N10MFZ8zHuIj6QLers9uhZlg4B0P8aNa1DS3/r9n/
LfvcZDmFJldm8ceeQ+h9PbaJOKZH1EScuHFf3OHicb6TgMS0l27SG5BVcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxw/PGeizhnM9fI7m93QrQ//u3yMB8GA1UdIwQY
MBaAFNJDYJwHGV4gIhByM4jRwuSBgKrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtOZ25BY1pYaUFpRUhJemlOSEM1SUdBcXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wMzg0NDktYTk5Yi00ZTljLThlZDYt
NDYxMjdmZDk1YWFhLzEvMGtOZ25BY1pYaUFpRUhJemlOSEM1SUdBcXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wMzg0NDktYTk5Yi00ZTljLThlZDYtNDYxMjdmZDk1YWFh
LzEvMGtOZ25BY1pYaUFpRUhJemlOSEM1SUdBcXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/mJOH/O
rq2Z4SVzBWCfkttb1MgW30kNw96uRIhmVP0yeOva5qInDEjoPf6iCYOrRfSRHLll
VJyB6HD0SoDL7PXnB/xSUJ6brNkyhBcSkjRK2Ld1+j8Yjp0YAoPNy6ke9YFFltu0
a3ZPZbU7EBEGI82GzQ++kbGRj2kv3lBntjey4avCbpTxnhSUgxa49DQK21RfNxmR
QEvxakSJw+2EP0QavT361NUa1ZU1ib8dAbXahib+hJbklU2J3L48UIZFHHzuoI4e
f+VNvGJ5fJZ6xXrFMFWxDYF5djK9HxLKrGIFSGAhPr/E4T8aQZup4y+887YCK35T
des+Jde4PAFT4g==
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:34 2025 by rpki-client on console.sobornost.net