Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.mft
File: XiVOwyZYUUKP_zNyGoXICy8ej7w.mft (raw, json)
Hash identifier: 7V5bkkFC5KvvKlV3I6UUXTWT9IILKxyDqOZ8UKop2Gk=
Subject key identifier: 13:E2:CE:98:38:F0:45:F8:9A:5C:CB:9A:D3:8A:48:17:56:BF:5C:35
Authority key identifier: 5E:25:4E:C3:26:58:51:42:8F:FF:33:72:1A:85:C8:0B:2F:1E:8F:BC
Certificate issuer: /CN=5e254ec3265851428fff33721a85c80b2f1e8fbc
Certificate serial: 019347159FCF7BB63CAAF04F23219DEE5E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiVOwyZYUUKP_zNyGoXICy8ej7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.mft
Manifest number: 0BF2
Signing time: Wed 20 Nov 2024 01:00:19 +0000
Manifest this update: Wed 20 Nov 2024 01:00:19 +0000
Manifest next update: Thu 21 Nov 2024 01:00:19 +0000
Files and hashes: 1: XiVOwyZYUUKP_zNyGoXICy8ej7w.crl (hash: ZwiS1Hxmg0iKf7UbIfMQbRbudaXZiLuB7jqaCildphA=)
2: y3G9QW_9GQasYvn_Nilngc1DZSI.roa (hash: dnrDQQmrJW+2oy97yVVm+FfEd94mEB2OlqwdVGWTVPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:15:9f:cf:7b:b6:3c:aa:f0:4f:23:21:9d:ee:5e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e254ec3265851428fff33721a85c80b2f1e8fbc
Validity
Not Before: Nov 20 01:00:19 2024 GMT
Not After : Nov 21 01:00:19 2024 GMT
Subject: CN=13e2ce9838f045f89a5ccb9ad38a481756bf5c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:33:77:91:eb:a9:c0:21:6f:9e:24:00:f7:
91:50:08:d9:16:6b:70:4d:52:3e:cd:a6:d9:67:e8:
69:3f:d9:4f:d4:45:57:7f:8f:67:2d:dd:e3:7a:18:
ae:f0:cf:c0:89:eb:b7:83:74:95:01:dd:34:bf:5a:
c4:d9:ad:9a:77:4d:42:c4:0c:59:35:54:15:53:42:
c5:e1:7b:95:31:e9:57:cb:5c:12:dc:91:1e:aa:1c:
d0:16:45:94:72:84:90:a7:f3:95:92:0f:ac:cd:3d:
a5:44:af:ff:d7:e8:69:7b:40:0a:f3:f1:e3:c6:ea:
de:5a:ab:f1:5c:0a:9b:39:df:d0:08:36:3d:25:d9:
0c:83:16:b0:9e:b3:25:eb:17:db:36:f4:ec:3d:ad:
b6:32:90:ad:26:8d:82:c3:7b:47:3f:52:b2:8b:5c:
5e:03:d1:29:55:20:a7:2b:41:54:31:dd:0f:e7:a6:
74:b7:0a:fa:28:37:00:49:25:21:08:16:09:49:39:
87:23:83:dc:41:10:f2:33:d6:1a:0a:ba:68:8f:43:
4d:2c:ad:fe:6c:74:f4:ae:aa:33:7c:5c:9d:3b:89:
99:90:c7:56:18:ee:87:74:3a:2d:74:81:09:d6:e0:
c8:c8:2b:b4:0c:49:08:0c:c3:91:8a:b4:eb:a7:18:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E2:CE:98:38:F0:45:F8:9A:5C:CB:9A:D3:8A:48:17:56:BF:5C:35
X509v3 Authority Key Identifier:
keyid:5E:25:4E:C3:26:58:51:42:8F:FF:33:72:1A:85:C8:0B:2F:1E:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiVOwyZYUUKP_zNyGoXICy8ej7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ed0918-b251-403c-8360-20ca2c0f6e54/1/XiVOwyZYUUKP_zNyGoXICy8ej7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fb:b4:6d:4f:f0:f6:8f:99:ab:ba:ae:6a:42:0e:1f:a2:23:
98:88:b4:1f:37:7e:c4:02:1e:c7:2a:dc:e2:f2:a4:eb:c8:56:
32:a7:54:7c:76:27:cd:2e:5e:1b:92:9a:e5:8a:23:71:22:72:
bc:40:89:55:8f:5b:08:61:29:ba:9a:38:0b:f1:93:ff:cc:c5:
2c:3d:51:9e:a7:56:93:e1:c6:d9:96:4e:4d:3e:15:92:fa:02:
39:4f:b8:f7:0a:9b:34:53:cf:64:74:60:d8:29:c0:fa:76:f9:
e9:d9:87:d5:bb:e7:93:77:68:11:de:72:f9:49:4f:2f:5e:b3:
8f:cf:89:a8:9e:f3:e7:e2:a6:8b:b7:d6:b1:af:4e:7b:98:fe:
99:59:34:ef:3c:53:75:96:51:64:7a:b9:ae:1c:b1:b7:b0:69:
9b:44:4e:98:7d:1a:37:d5:19:e2:12:cb:d7:b8:55:46:43:a9:
69:78:00:09:70:6f:88:27:fc:e7:e9:46:6e:86:4b:7e:61:6a:
cc:2f:1e:ff:41:b0:e5:63:8f:18:16:be:65:6c:4f:5b:16:d2:
cc:72:50:fc:5d:cd:3c:a2:3d:b8:c8:02:91:f0:90:c3:5b:01:
40:da:0e:01:d4:77:64:34:d1:65:ce:fe:a6:fa:ce:d1:b4:46:
45:e2:9c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHFZ/Pe7Y8qvBPIyGd7l52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjU0ZWMzMjY1ODUxNDI4ZmZmMzM3MjFhODVjODBiMmYx
ZThmYmMwHhcNMjQxMTIwMDEwMDE5WhcNMjQxMTIxMDEwMDE5WjAzMTEwLwYDVQQD
EygxM2UyY2U5ODM4ZjA0NWY4OWE1Y2NiOWFkMzhhNDgxNzU2YmY1YzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vwzd5HrqcAhb54kAPeRUAjZFmtw
TVI+zabZZ+hpP9lP1EVXf49nLd3jehiu8M/Aieu3g3SVAd00v1rE2a2ad01CxAxZ
NVQVU0LF4XuVMelXy1wS3JEeqhzQFkWUcoSQp/OVkg+szT2lRK//1+hpe0AK8/Hj
xureWqvxXAqbOd/QCDY9JdkMgxawnrMl6xfbNvTsPa22MpCtJo2Cw3tHP1Kyi1xe
A9EpVSCnK0FUMd0P56Z0twr6KDcASSUhCBYJSTmHI4PcQRDyM9YaCrpoj0NNLK3+
bHT0rqozfFydO4mZkMdWGO6HdDotdIEJ1uDIyCu0DEkIDMORirTrpxhnpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPizpg48EX4mlzLmtOKSBdWv1w1MB8GA1UdIwQY
MBaAFF4lTsMmWFFCj/8zchqFyAsvHo+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlWT3d5WllVVUtQX3pOeUdvWElDeThlajd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZDA5MTgtYjI1MS00MDNjLTgzNjAt
MjBjYTJjMGY2ZTU0LzEvWGlWT3d5WllVVUtQX3pOeUdvWElDeThlajd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lZDA5MTgtYjI1MS00MDNjLTgzNjAtMjBjYTJjMGY2ZTU0
LzEvWGlWT3d5WllVVUtQX3pOeUdvWElDeThlajd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvu0bU/w
9o+Zq7quakIOH6IjmIi0Hzd+xAIexyrc4vKk68hWMqdUfHYnzS5eG5Ka5YojcSJy
vECJVY9bCGEpupo4C/GT/8zFLD1RnqdWk+HG2ZZOTT4VkvoCOU+49wqbNFPPZHRg
2CnA+nb56dmH1bvnk3doEd5y+UlPL16zj8+JqJ7z5+Kmi7fWsa9Oe5j+mVk07zxT
dZZRZHq5rhyxt7Bpm0ROmH0aN9UZ4hLL17hVRkOpaXgACXBviCf85+lGboZLfmFq
zC8e/0Gw5WOPGBa+ZWxPWxbSzHJQ/F3NPKI9uMgCkfCQw1sBQNoOAdR3ZDTRZc7+
pvrO0bRGReKcmw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:14:06 2024 by rpki-client on console.sobornost.net