Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f14fa1-a26c-4caa-9349-634f74fbac94/1/G-GHf3jq6VlD_8hjWc7Q973RG9w.mft
File: G-GHf3jq6VlD_8hjWc7Q973RG9w.mft (raw, json)
Hash identifier: ZAeMUJ7k1ig3OeIe1hKkPkqM/nFcBnP7SWECSUtTHW4=
Subject key identifier: 93:7A:0B:E5:CC:BF:D7:3F:18:EA:8E:7F:20:44:BC:7F:89:53:59:B6
Authority key identifier: 1B:E1:87:7F:78:EA:E9:59:43:FF:C8:63:59:CE:D0:F7:BD:D1:1B:DC
Certificate issuer: /CN=1be1877f78eae95943ffc86359ced0f7bdd11bdc
Certificate serial: 018F001AB9B2EBC48B93AA3B88672C41EC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-GHf3jq6VlD_8hjWc7Q973RG9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f14fa1-a26c-4caa-9349-634f74fbac94/1/G-GHf3jq6VlD_8hjWc7Q973RG9w.mft
Manifest number: 112D
Signing time: Sun 21 Apr 2024 10:01:42 +0000
Manifest this update: Sun 21 Apr 2024 10:01:42 +0000
Manifest next update: Mon 22 Apr 2024 10:01:42 +0000
Files and hashes: 1: G-GHf3jq6VlD_8hjWc7Q973RG9w.crl (hash: jbcx8reG5uW7MSxYHP3iCwskPvXi27+ZS7OAUvIe+7E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:00:1a:b9:b2:eb:c4:8b:93:aa:3b:88:67:2c:41:ec:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be1877f78eae95943ffc86359ced0f7bdd11bdc
Validity
Not Before: Apr 21 10:01:42 2024 GMT
Not After : Apr 22 10:01:42 2024 GMT
Subject: CN=937a0be5ccbfd73f18ea8e7f2044bc7f895359b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:b5:22:f2:dc:71:b6:ef:6f:69:fb:d8:0d:
fe:9c:b2:24:d3:62:83:a0:d8:a5:37:58:63:7c:e3:
e0:68:14:16:15:7a:f3:83:6b:1f:ea:38:18:f7:4c:
6f:4d:72:9d:88:15:9b:06:a7:e0:26:de:8b:f8:c7:
a2:24:81:b3:7d:20:e4:26:d0:aa:1e:d8:f5:81:d6:
af:7c:76:48:e8:0c:7d:c9:a5:1d:b0:b1:41:9c:81:
41:e7:69:69:f2:82:f0:71:26:a6:cd:98:f5:82:e0:
5d:ad:75:71:d8:e0:41:cc:d8:42:e6:2f:a9:2e:08:
a5:75:e1:a6:71:c9:eb:a9:3b:85:0f:8f:4a:eb:cc:
2b:3a:25:ba:a7:2d:c8:90:a3:2a:dd:fd:73:df:18:
cb:fd:26:29:fd:a6:42:72:05:f7:e2:92:2c:91:81:
0d:72:88:02:1e:35:1a:13:52:d7:89:56:2d:c9:e1:
b4:b1:50:1e:bb:36:9b:48:2c:84:ad:be:b3:e2:87:
30:16:dd:29:53:f7:b1:29:a7:ec:02:a0:e5:98:11:
88:08:b0:c8:32:09:19:ab:f3:bc:55:d2:0c:e9:05:
6e:2b:3a:e2:14:35:ff:98:e4:63:64:a3:66:45:27:
d5:28:d8:f1:53:e2:68:08:63:b4:89:23:32:86:db:
c7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:0B:E5:CC:BF:D7:3F:18:EA:8E:7F:20:44:BC:7F:89:53:59:B6
X509v3 Authority Key Identifier:
keyid:1B:E1:87:7F:78:EA:E9:59:43:FF:C8:63:59:CE:D0:F7:BD:D1:1B:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-GHf3jq6VlD_8hjWc7Q973RG9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f14fa1-a26c-4caa-9349-634f74fbac94/1/G-GHf3jq6VlD_8hjWc7Q973RG9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f14fa1-a26c-4caa-9349-634f74fbac94/1/G-GHf3jq6VlD_8hjWc7Q973RG9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ee:9e:ff:35:15:b7:21:e3:fc:17:43:98:0e:fe:f1:05:5c:
6c:6c:8c:40:ed:44:3a:01:4f:61:28:a1:4e:cc:03:22:5e:49:
70:e2:e4:56:c3:95:cd:fa:1d:84:8f:72:6d:7e:56:a3:ff:9b:
f3:f8:fa:61:81:e4:14:3e:b3:95:2e:0e:a6:76:6a:46:dd:d1:
28:8b:80:7a:67:60:0e:a3:9c:f8:e1:ad:63:43:8a:6d:a8:8e:
b8:a7:13:ad:04:69:f7:f0:6f:8a:7e:16:45:50:0e:61:21:e3:
e1:62:40:a9:64:e4:38:28:cd:55:76:9a:ab:4c:9c:58:0a:45:
ec:1c:b9:f5:d2:9c:72:e0:4c:c4:84:f7:66:49:b2:b8:02:52:
2f:93:5d:d7:24:b1:a1:67:cb:3e:4c:4b:bf:29:96:ce:b5:0c:
e8:34:13:5e:f7:e4:2f:1a:1b:63:a9:1e:f4:08:15:fe:ad:b8:
58:16:1a:cd:db:92:55:59:92:ca:7b:d6:59:0c:11:00:7b:41:
6c:25:ee:ab:90:4f:e1:e1:3b:3e:d1:6c:15:26:80:a1:01:ac:
ac:01:4f:14:c0:cd:09:3d:00:66:bf:3a:b7:b5:55:3d:c1:69:
ff:22:24:99:9c:ec:d4:cb:c9:0c:0b:e4:95:eb:78:54:af:32:
2c:78:93:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8AGrmy68SLk6o7iGcsQexJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZTE4NzdmNzhlYWU5NTk0M2ZmYzg2MzU5Y2VkMGY3YmRk
MTFiZGMwHhcNMjQwNDIxMTAwMTQyWhcNMjQwNDIyMTAwMTQyWjAzMTEwLwYDVQQD
Eyg5MzdhMGJlNWNjYmZkNzNmMThlYThlN2YyMDQ0YmM3Zjg5NTM1OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO61IvLccbbvb2n72A3+nLIk02KD
oNilN1hjfOPgaBQWFXrzg2sf6jgY90xvTXKdiBWbBqfgJt6L+MeiJIGzfSDkJtCq
Htj1gdavfHZI6Ax9yaUdsLFBnIFB52lp8oLwcSamzZj1guBdrXVx2OBBzNhC5i+p
LgildeGmccnrqTuFD49K68wrOiW6py3IkKMq3f1z3xjL/SYp/aZCcgX34pIskYEN
cogCHjUaE1LXiVYtyeG0sVAeuzabSCyErb6z4ocwFt0pU/exKafsAqDlmBGICLDI
MgkZq/O8VdIM6QVuKzriFDX/mORjZKNmRSfVKNjxU+JoCGO0iSMyhtvHhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN6C+XMv9c/GOqOfyBEvH+JU1m2MB8GA1UdIwQY
MBaAFBvhh3946ulZQ//IY1nO0Pe90RvcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy1HSGYzanE2VmxEXzhoaldjN1E5NzNSRzl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9mMTRmYTEtYTI2Yy00Y2FhLTkzNDkt
NjM0Zjc0ZmJhYzk0LzEvRy1HSGYzanE2VmxEXzhoaldjN1E5NzNSRzl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9mMTRmYTEtYTI2Yy00Y2FhLTkzNDktNjM0Zjc0ZmJhYzk0
LzEvRy1HSGYzanE2VmxEXzhoaldjN1E5NzNSRzl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO6e/zUV
tyHj/BdDmA7+8QVcbGyMQO1EOgFPYSihTswDIl5JcOLkVsOVzfodhI9ybX5Wo/+b
8/j6YYHkFD6zlS4OpnZqRt3RKIuAemdgDqOc+OGtY0OKbaiOuKcTrQRp9/Bvin4W
RVAOYSHj4WJAqWTkOCjNVXaaq0ycWApF7By59dKccuBMxIT3ZkmyuAJSL5Nd1ySx
oWfLPkxLvymWzrUM6DQTXvfkLxobY6ke9AgV/q24WBYazduSVVmSynvWWQwRAHtB
bCXuq5BP4eE7PtFsFSaAoQGsrAFPFMDNCT0AZr86t7VVPcFp/yIkmZzs1MvJDAvk
let4VK8yLHiT6w==
-----END CERTIFICATE-----
Generated at Wed Apr 24 03:17:04 2024 by rpki-client on console.sobornost.net