Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
File: O8iOk9iVAzFkvO-XU52MidZxfas.mft (raw, json)
Hash identifier: HiJal68I4YW6YMCetQ1LnNVPTH5zQ35FOoDWLItWC44=
Subject key identifier: AE:51:C3:81:65:E5:D5:47:91:2B:1C:DD:F4:3B:18:7E:D2:3C:F3:DE
Authority key identifier: 3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
Certificate issuer: /CN=3bc88e93d895033164bcef97539d8c89d6717dab
Certificate serial: 01934716DCEEF8FB889DFEDA97988AEA9436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
Manifest number: 1367
Signing time: Wed 20 Nov 2024 01:01:40 +0000
Manifest this update: Wed 20 Nov 2024 01:01:40 +0000
Manifest next update: Thu 21 Nov 2024 01:01:40 +0000
Files and hashes: 1: GqdYxxm-z9v5v0Yj8m-6Y9VXjjg.roa (hash: KYzjTpHmjuq4/Y/CcyOvng8tF2cucBkxu+/DmHWpgIE=)
2: O8iOk9iVAzFkvO-XU52MidZxfas.crl (hash: FKEZgXW+h6uQzhedjBVuvd9ON3vQoeCR5tTFP6ytg5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:16:dc:ee:f8:fb:88:9d:fe:da:97:98:8a:ea:94:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc88e93d895033164bcef97539d8c89d6717dab
Validity
Not Before: Nov 20 01:01:40 2024 GMT
Not After : Nov 21 01:01:40 2024 GMT
Subject: CN=ae51c38165e5d547912b1cddf43b187ed23cf3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:9c:91:2d:7a:8a:59:88:30:03:5c:6d:40:
21:e1:39:6d:ea:cb:45:cf:40:32:b1:d2:8a:77:ca:
ef:33:0d:3a:53:44:7b:d8:a4:2c:68:fe:fa:21:8f:
4d:59:ba:c3:36:ca:bd:46:30:08:43:b6:5a:05:b1:
2d:2f:54:43:2a:26:37:64:60:4f:ad:90:c2:57:e1:
9b:7b:54:d0:4c:94:bb:71:c4:41:dc:39:eb:78:73:
00:03:44:c1:f3:ee:25:1c:fa:23:76:26:2f:a5:a9:
02:d1:23:25:5e:12:7a:82:b0:5d:05:2d:02:b2:54:
9b:3e:3f:0e:69:79:42:81:91:e6:90:1b:a3:d2:a4:
25:ad:2f:14:75:24:8f:9f:6d:cc:05:cc:37:7b:d6:
af:15:35:78:63:35:a6:eb:49:87:60:e1:73:11:95:
68:2d:e7:48:af:ae:05:c3:21:0a:10:24:10:20:52:
a8:ab:ba:eb:30:03:50:6d:c3:44:0f:2e:a8:35:7d:
a3:cc:b7:f1:2a:18:17:64:4d:3f:9a:cc:5a:fa:92:
ef:9b:7d:f9:af:ac:ba:5a:98:4b:b9:5e:18:fd:3d:
6b:4b:d0:dd:e9:6c:db:bf:d4:ef:0b:0b:73:58:a0:
18:7a:42:1b:28:8f:1d:cc:91:66:fa:fd:15:16:1c:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:C3:81:65:E5:D5:47:91:2B:1C:DD:F4:3B:18:7E:D2:3C:F3:DE
X509v3 Authority Key Identifier:
keyid:3B:C8:8E:93:D8:95:03:31:64:BC:EF:97:53:9D:8C:89:D6:71:7D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8iOk9iVAzFkvO-XU52MidZxfas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/df8b06-5d61-4ffd-a949-048b5f5bfa81/1/O8iOk9iVAzFkvO-XU52MidZxfas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b5:a6:f1:16:21:58:a1:8b:c9:07:8d:65:51:7b:f0:de:98:
71:73:df:82:00:9c:91:64:65:de:21:57:29:eb:1d:80:49:26:
f6:09:fc:85:a3:f1:d6:dc:99:e3:bd:95:40:3d:c1:90:eb:12:
85:71:47:79:d1:46:49:64:01:64:e4:db:87:b7:77:bc:5f:9b:
8f:7c:a0:80:ed:5c:fc:82:11:17:ea:57:f4:8d:ba:82:fc:ae:
5c:9e:e4:96:5b:8b:3d:30:c6:8c:ad:2d:b2:56:7f:3f:73:7a:
1a:a3:06:08:f5:b0:6f:e6:43:03:48:b1:d4:a9:cf:3c:8a:67:
7c:af:a4:1d:92:2a:08:5f:c4:73:3b:9c:21:7d:e1:48:92:a6:
78:d8:cf:31:65:20:a9:8d:b8:18:de:fc:13:77:64:8b:88:e1:
89:26:ef:82:de:09:68:ac:c4:b2:fa:c1:ba:4a:49:f0:e1:14:
b6:b4:28:e5:ff:fc:42:09:42:a4:32:27:1c:f1:36:52:bc:1d:
90:a2:7f:30:41:89:60:76:e5:ea:61:7f:92:64:5e:52:54:bf:
b2:44:ea:08:65:c3:20:5c:74:9b:ab:01:cc:c7:28:d0:be:45:
72:bc:ab:aa:b9:c4:95:09:03:57:ac:8d:f4:7c:20:ef:b5:6c:
91:77:fe:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHFtzu+PuInf7al5iK6pQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYzg4ZTkzZDg5NTAzMzE2NGJjZWY5NzUzOWQ4Yzg5ZDY3
MTdkYWIwHhcNMjQxMTIwMDEwMTQwWhcNMjQxMTIxMDEwMTQwWjAzMTEwLwYDVQQD
EyhhZTUxYzM4MTY1ZTVkNTQ3OTEyYjFjZGRmNDNiMTg3ZWQyM2NmM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUGckS16ilmIMANcbUAh4Tlt6stF
z0AysdKKd8rvMw06U0R72KQsaP76IY9NWbrDNsq9RjAIQ7ZaBbEtL1RDKiY3ZGBP
rZDCV+Gbe1TQTJS7ccRB3DnreHMAA0TB8+4lHPojdiYvpakC0SMlXhJ6grBdBS0C
slSbPj8OaXlCgZHmkBuj0qQlrS8UdSSPn23MBcw3e9avFTV4YzWm60mHYOFzEZVo
LedIr64FwyEKECQQIFKoq7rrMANQbcNEDy6oNX2jzLfxKhgXZE0/msxa+pLvm335
r6y6WphLuV4Y/T1rS9Dd6Wzbv9TvCwtzWKAYekIbKI8dzJFm+v0VFhwTWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5Rw4Fl5dVHkSsc3fQ7GH7SPPPeMB8GA1UdIwQY
MBaAFDvIjpPYlQMxZLzvl1OdjInWcX2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzhpT2s5aVZBekZrdk8tWFU1Mk1pZFp4ZmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZjhiMDYtNWQ2MS00ZmZkLWE5NDkt
MDQ4YjVmNWJmYTgxLzEvTzhpT2s5aVZBekZrdk8tWFU1Mk1pZFp4ZmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kZjhiMDYtNWQ2MS00ZmZkLWE5NDktMDQ4YjVmNWJmYTgx
LzEvTzhpT2s5aVZBekZrdk8tWFU1Mk1pZFp4ZmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibWm8RYh
WKGLyQeNZVF78N6YcXPfggCckWRl3iFXKesdgEkm9gn8haPx1tyZ472VQD3BkOsS
hXFHedFGSWQBZOTbh7d3vF+bj3yggO1c/IIRF+pX9I26gvyuXJ7klluLPTDGjK0t
slZ/P3N6GqMGCPWwb+ZDA0ix1KnPPIpnfK+kHZIqCF/EczucIX3hSJKmeNjPMWUg
qY24GN78E3dki4jhiSbvgt4JaKzEsvrBukpJ8OEUtrQo5f/8QglCpDInHPE2Urwd
kKJ/MEGJYHbl6mF/kmReUlS/skTqCGXDIFx0m6sBzMco0L5FcryrqrnElQkDV6yN
9Hwg77VskXf+Ag==
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:14:52 2024 by rpki-client on console.sobornost.net