Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.mft
File: Cw03aKjvw7cGiAHLvunrVv5tABw.mft (raw, json)
Hash identifier: YvVluumJQEH7rlzUwoN/ymtHfBCoEPA8BvZQ1hpF68U=
Subject key identifier: 4C:81:E2:56:68:0D:8C:05:28:8B:DA:82:4D:CC:0A:75:0E:1C:09:6A
Authority key identifier: 0B:0D:37:68:A8:EF:C3:B7:06:88:01:CB:BE:E9:EB:56:FE:6D:00:1C
Certificate issuer: /CN=0b0d3768a8efc3b7068801cbbee9eb56fe6d001c
Certificate serial: 018CED3D32CEBAA07474A9B22C20673C963D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cw03aKjvw7cGiAHLvunrVv5tABw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.mft
Manifest number: 1021
Signing time: Tue 09 Jan 2024 08:00:59 +0000
Manifest this update: Tue 09 Jan 2024 08:00:59 +0000
Manifest next update: Wed 10 Jan 2024 08:00:59 +0000
Files and hashes: 1: Cw03aKjvw7cGiAHLvunrVv5tABw.crl (hash: VD6wWGsip3AQEnFIRdHhqp7zP0DMLoz38f0pFn9MZxs=)
2: Tat0ZOdbooLBdr87Y0GGk826cSU.roa (hash: jiWbQ33XEWT+EtoWgcQI0ZFp5rreKry70YdxyrMRCIY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:3d:32:ce:ba:a0:74:74:a9:b2:2c:20:67:3c:96:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0d3768a8efc3b7068801cbbee9eb56fe6d001c
Validity
Not Before: Jan 9 08:00:59 2024 GMT
Not After : Jan 10 08:00:59 2024 GMT
Subject: CN=4c81e256680d8c05288bda824dcc0a750e1c096a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:0b:8a:db:ff:d1:13:3e:fb:d5:cd:8a:fd:
02:58:3f:54:4d:38:64:1f:88:72:59:c2:39:be:4f:
c8:db:4f:66:54:b6:88:af:06:a9:6d:84:d8:01:49:
ea:1b:c3:d5:c8:48:66:83:67:97:5c:a5:3d:d0:74:
b7:e9:d7:d1:3f:75:61:6e:29:24:c7:b2:7b:a0:4d:
87:86:18:cd:6f:5d:c5:58:4e:0c:1d:f1:4f:cd:bb:
d4:e1:5a:31:4f:17:32:9e:99:3e:98:0a:c0:0a:cd:
22:86:e9:54:01:e5:fa:e0:56:e3:ac:1a:4f:b3:80:
44:4e:59:a8:e4:22:56:3c:af:a0:5e:fb:d9:9e:8f:
6d:0a:64:6d:93:e3:d8:3b:88:c5:1e:4b:19:14:59:
72:e2:33:a4:9b:19:f7:f4:f8:7a:50:39:18:af:05:
59:65:1f:c8:c8:b3:8c:a1:94:83:3e:a4:9c:76:55:
6a:da:f1:86:11:4b:51:ac:a9:c8:f1:51:75:97:c9:
4c:ab:cc:12:b5:9c:be:71:13:e2:0a:55:44:4e:87:
e5:f4:2e:aa:36:1b:53:62:43:ae:59:f9:e0:9b:1f:
c8:79:37:f7:6f:3b:ab:6e:52:41:ce:25:71:2c:fe:
95:a7:24:5b:e5:99:ea:16:26:ec:7a:55:61:13:fe:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:E2:56:68:0D:8C:05:28:8B:DA:82:4D:CC:0A:75:0E:1C:09:6A
X509v3 Authority Key Identifier:
keyid:0B:0D:37:68:A8:EF:C3:B7:06:88:01:CB:BE:E9:EB:56:FE:6D:00:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cw03aKjvw7cGiAHLvunrVv5tABw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a507cd-a377-4821-b9d2-24a3004aca54/1/Cw03aKjvw7cGiAHLvunrVv5tABw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:8c:8b:f3:0c:59:80:04:28:77:7c:9f:e9:da:a7:98:77:
2e:24:62:8a:05:e9:2b:c6:d3:1d:d4:72:bb:3f:ba:28:b3:0f:
42:a6:a6:e4:ce:cf:9f:b3:50:a8:5e:21:12:73:9e:eb:4c:99:
76:06:e1:5d:16:1f:5d:15:b1:d0:c2:31:fc:62:6e:4a:38:ac:
3b:5c:f3:3b:0a:66:95:1e:bf:75:e9:f6:d7:63:08:c8:e7:98:
ed:54:f3:a3:1f:e2:0e:84:a0:fc:e8:dd:bd:66:b6:fb:97:16:
a6:e1:5c:44:c7:8c:b8:ae:94:6e:5f:cd:c1:b1:e9:32:e2:fc:
7f:8e:3e:42:80:2a:30:a6:00:05:e8:9a:2c:f1:56:d1:23:32:
24:47:84:c9:85:00:dd:5b:75:ed:32:89:f8:4e:4c:51:72:7a:
51:7a:02:8d:24:eb:14:c2:6e:a8:60:55:f5:c5:4b:05:2e:89:
8a:c0:b3:85:ab:90:50:fc:84:df:33:c7:97:07:50:00:56:49:
92:3d:24:c0:cd:c3:32:17:6f:a1:f4:0d:c5:ad:0b:12:cf:db:
12:19:f5:8e:a5:54:8b:4a:1a:79:a9:a5:f1:cc:46:b4:ef:ad:
cd:3b:e4:48:40:01:ab:f5:e2:47:ff:39:2e:60:37:4b:43:3c:
ea:cf:7c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYztPTLOuqB0dKmyLCBnPJY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMGQzNzY4YThlZmMzYjcwNjg4MDFjYmJlZTllYjU2ZmU2
ZDAwMWMwHhcNMjQwMTA5MDgwMDU5WhcNMjQwMTEwMDgwMDU5WjAzMTEwLwYDVQQD
Eyg0YzgxZTI1NjY4MGQ4YzA1Mjg4YmRhODI0ZGNjMGE3NTBlMWMwOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3YLitv/0RM++9XNiv0CWD9UTThk
H4hyWcI5vk/I209mVLaIrwapbYTYAUnqG8PVyEhmg2eXXKU90HS36dfRP3Vhbikk
x7J7oE2HhhjNb13FWE4MHfFPzbvU4VoxTxcynpk+mArACs0ihulUAeX64FbjrBpP
s4BETlmo5CJWPK+gXvvZno9tCmRtk+PYO4jFHksZFFly4jOkmxn39Ph6UDkYrwVZ
ZR/IyLOMoZSDPqScdlVq2vGGEUtRrKnI8VF1l8lMq8wStZy+cRPiClVETofl9C6q
NhtTYkOuWfngmx/IeTf3bzurblJBziVxLP6VpyRb5ZnqFibselVhE/7VlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyB4lZoDYwFKIvagk3MCnUOHAlqMB8GA1UdIwQY
MBaAFAsNN2io78O3BogBy77p61b+bQAcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3cwM2FLanZ3N2NHaUFITHZ1bnJWdjV0QUJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hNTA3Y2QtYTM3Ny00ODIxLWI5ZDIt
MjRhMzAwNGFjYTU0LzEvQ3cwM2FLanZ3N2NHaUFITHZ1bnJWdjV0QUJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hNTA3Y2QtYTM3Ny00ODIxLWI5ZDItMjRhMzAwNGFjYTU0
LzEvQ3cwM2FLanZ3N2NHaUFITHZ1bnJWdjV0QUJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxKMi/MM
WYAEKHd8n+nap5h3LiRiigXpK8bTHdRyuz+6KLMPQqam5M7Pn7NQqF4hEnOe60yZ
dgbhXRYfXRWx0MIx/GJuSjisO1zzOwpmlR6/den212MIyOeY7VTzox/iDoSg/Ojd
vWa2+5cWpuFcRMeMuK6Ubl/NwbHpMuL8f44+QoAqMKYABeiaLPFW0SMyJEeEyYUA
3Vt17TKJ+E5MUXJ6UXoCjSTrFMJuqGBV9cVLBS6JisCzhauQUPyE3zPHlwdQAFZJ
kj0kwM3DMhdvofQNxa0LEs/bEhn1jqVUi0oaeaml8cxGtO+tzTvkSEABq/XiR/85
LmA3S0M86s989A==
-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:17 2024 by rpki-client on console.sobornost.net