Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/q8hbmhhAC4RRUq4vvSjoWYY-L34.mft
File: q8hbmhhAC4RRUq4vvSjoWYY-L34.mft (raw, json)
Hash identifier: RjHx0ZKGJrPbw0dhMyToL2v5OA/ZgyQXsi22X1YSU9s=
Subject key identifier: 79:4C:EC:4A:CF:E4:5A:8B:C4:81:7B:AB:4B:1A:A7:A3:50:9F:00:A4
Authority key identifier: AB:C8:5B:9A:18:40:0B:84:51:52:AE:2F:BD:28:E8:59:86:3E:2F:7E
Certificate issuer: /CN=abc85b9a18400b845152ae2fbd28e859863e2f7e
Certificate serial: 018CED067EA667FA49D8231728EC7DFE4295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8hbmhhAC4RRUq4vvSjoWYY-L34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/q8hbmhhAC4RRUq4vvSjoWYY-L34.mft
Manifest number: 0811
Signing time: Tue 09 Jan 2024 07:01:14 +0000
Manifest this update: Tue 09 Jan 2024 07:01:14 +0000
Manifest next update: Wed 10 Jan 2024 07:01:14 +0000
Files and hashes: 1: g3yYvqMCtcag2XKaZ3iQsxlqYR4.roa (hash: PdWd6sjKkHkpOwuglSArKd4+g2md9Bb2a16QJT52VzY=)
2: q8hbmhhAC4RRUq4vvSjoWYY-L34.crl (hash: jZenKKGf6pdZlTzhJl8hAFoLX/dbj1749YxpVFIcV5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:06:7e:a6:67:fa:49:d8:23:17:28:ec:7d:fe:42:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc85b9a18400b845152ae2fbd28e859863e2f7e
Validity
Not Before: Jan 9 07:01:14 2024 GMT
Not After : Jan 10 07:01:14 2024 GMT
Subject: CN=794cec4acfe45a8bc4817bab4b1aa7a3509f00a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:25:4f:e9:74:6e:24:52:b8:22:68:35:aa:
e2:5c:ab:bf:a5:b5:5b:0b:36:52:25:dd:28:ef:e9:
06:7d:ae:9c:f6:65:d5:27:34:41:f0:cc:9a:0e:a3:
9a:e8:e0:f1:4f:68:10:df:b7:d3:bd:be:57:6d:d6:
f7:f9:d0:ab:a1:d6:bd:6b:b6:03:27:0e:da:0f:ee:
11:59:b5:9c:03:8d:07:9f:07:99:df:13:0c:79:57:
ec:aa:68:56:ca:00:76:f1:4e:f0:4f:2b:44:95:6d:
72:c8:fc:cc:c6:e5:9f:76:43:c7:53:63:30:6b:a8:
4f:26:e6:97:9a:1f:1c:70:95:e7:50:95:a7:ba:b7:
c8:f7:2c:09:07:0c:8b:61:66:e3:d3:a7:8a:07:98:
0e:12:34:c1:ef:77:94:e5:16:88:31:73:a8:09:03:
31:3d:92:0b:f1:d9:11:9b:e1:6e:27:94:d2:50:fa:
08:3b:72:34:08:88:2d:c0:c0:64:ac:f4:5c:9b:b3:
a6:b9:84:d5:f3:58:14:c2:24:a0:02:a2:bf:23:f6:
5b:41:2d:03:45:ca:61:07:f6:38:2f:79:5c:c6:35:
c1:c0:bb:06:07:80:43:24:d1:11:ea:cb:b1:5b:33:
07:3f:81:01:af:51:4a:5f:97:3c:85:9e:9a:4e:0d:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:EC:4A:CF:E4:5A:8B:C4:81:7B:AB:4B:1A:A7:A3:50:9F:00:A4
X509v3 Authority Key Identifier:
keyid:AB:C8:5B:9A:18:40:0B:84:51:52:AE:2F:BD:28:E8:59:86:3E:2F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8hbmhhAC4RRUq4vvSjoWYY-L34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/q8hbmhhAC4RRUq4vvSjoWYY-L34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/q8hbmhhAC4RRUq4vvSjoWYY-L34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:98:3e:f0:d1:40:6b:b1:01:b9:91:41:f3:ba:b8:5f:10:e7:
83:af:94:25:c3:aa:0d:52:a0:35:41:1c:4d:35:a5:ac:da:60:
85:60:f7:de:b2:ee:66:5a:5e:81:12:3a:d0:d1:5c:0b:d2:98:
05:c7:96:e0:8e:8a:60:05:39:9a:65:c4:ab:93:55:22:34:68:
9e:d4:db:4a:bb:8e:02:44:70:60:e1:31:b4:40:e3:a9:e0:e7:
0a:3b:6d:95:b2:db:3f:9f:1f:c7:e1:9e:27:5f:eb:7f:b7:03:
1d:8e:a4:47:9d:78:df:7f:93:28:b5:ad:1a:8a:aa:3d:56:5d:
9c:c6:d3:97:48:26:f8:45:08:d8:d9:f6:a9:a2:7a:49:35:e4:
0b:f1:4d:f7:6c:69:d0:52:8d:71:87:b0:55:fd:d5:78:ad:a7:
1c:74:d6:9b:f7:81:97:7b:1a:3b:51:7c:81:74:a9:bf:43:07:
56:23:58:1d:58:3f:2c:b5:d6:3a:b8:6a:79:32:3a:78:ed:98:
fc:38:9c:f3:46:95:09:2c:e8:fd:73:48:ee:c8:c7:9f:70:f2:
0f:e0:f8:a1:39:97:44:b9:ec:0a:19:10:bf:e0:9a:14:41:e8:
06:e7:1d:07:85:c8:eb:fb:f9:39:c4:42:d4:71:f9:91:13:3c:
71:7a:d1:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYztBn6mZ/pJ2CMXKOx9/kKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzg1YjlhMTg0MDBiODQ1MTUyYWUyZmJkMjhlODU5ODYz
ZTJmN2UwHhcNMjQwMTA5MDcwMTE0WhcNMjQwMTEwMDcwMTE0WjAzMTEwLwYDVQQD
Eyg3OTRjZWM0YWNmZTQ1YThiYzQ4MTdiYWI0YjFhYTdhMzUwOWYwMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo44lT+l0biRSuCJoNariXKu/pbVb
CzZSJd0o7+kGfa6c9mXVJzRB8MyaDqOa6ODxT2gQ37fTvb5Xbdb3+dCroda9a7YD
Jw7aD+4RWbWcA40HnweZ3xMMeVfsqmhWygB28U7wTytElW1yyPzMxuWfdkPHU2Mw
a6hPJuaXmh8ccJXnUJWnurfI9ywJBwyLYWbj06eKB5gOEjTB73eU5RaIMXOoCQMx
PZIL8dkRm+FuJ5TSUPoIO3I0CIgtwMBkrPRcm7OmuYTV81gUwiSgAqK/I/ZbQS0D
RcphB/Y4L3lcxjXBwLsGB4BDJNER6suxWzMHP4EBr1FKX5c8hZ6aTg0FrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlM7ErP5FqLxIF7q0sap6NQnwCkMB8GA1UdIwQY
MBaAFKvIW5oYQAuEUVKuL70o6FmGPi9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThoYm1oaEFDNFJSVXE0dnZTam9XWVktTDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yMGJmNDEtN2YyMC00OGY3LTg2MDkt
NTE3YTY1MDVkY2I0LzEvcThoYm1oaEFDNFJSVXE0dnZTam9XWVktTDM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8yMGJmNDEtN2YyMC00OGY3LTg2MDktNTE3YTY1MDVkY2I0
LzEvcThoYm1oaEFDNFJSVXE0dnZTam9XWVktTDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZg+8NFA
a7EBuZFB87q4XxDng6+UJcOqDVKgNUEcTTWlrNpghWD33rLuZlpegRI60NFcC9KY
BceW4I6KYAU5mmXEq5NVIjRontTbSruOAkRwYOExtEDjqeDnCjttlbLbP58fx+Ge
J1/rf7cDHY6kR51433+TKLWtGoqqPVZdnMbTl0gm+EUI2Nn2qaJ6STXkC/FN92xp
0FKNcYewVf3VeK2nHHTWm/eBl3saO1F8gXSpv0MHViNYHVg/LLXWOrhqeTI6eO2Y
/Dic80aVCSzo/XNI7sjHn3DyD+D4oTmXRLnsChkQv+CaFEHoBucdB4XI6/v5OcRC
1HH5kRM8cXrRSQ==
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:01 2024 by rpki-client on console.sobornost.net