Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c5a19b-1221-4aed-a026-60434a2fbe04/1/3n4UMh-GpG2I8Rdxq3gYxruoyIE.mft
File: 3n4UMh-GpG2I8Rdxq3gYxruoyIE.mft (raw, json)
Hash identifier: HUHme5DZ6PG596oNz1vdpb9VkfL4+F9qnMp49exdzv4=
Subject key identifier: 09:AC:EA:16:CD:56:45:5F:30:B3:F2:73:9B:14:C0:6E:B6:94:86:97
Authority key identifier: DE:7E:14:32:1F:86:A4:6D:88:F1:17:71:AB:78:18:C6:BB:A8:C8:81
Certificate issuer: /CN=de7e14321f86a46d88f11771ab7818c6bba8c881
Certificate serial: 018F2BA8F8B73EC695787A7D8DC6E75ED5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3n4UMh-GpG2I8Rdxq3gYxruoyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c5a19b-1221-4aed-a026-60434a2fbe04/1/3n4UMh-GpG2I8Rdxq3gYxruoyIE.mft
Manifest number: 0934
Signing time: Mon 29 Apr 2024 21:00:45 +0000
Manifest this update: Mon 29 Apr 2024 21:00:45 +0000
Manifest next update: Tue 30 Apr 2024 21:00:45 +0000
Files and hashes: 1: 3n4UMh-GpG2I8Rdxq3gYxruoyIE.crl (hash: j9JJQdEIT44eljBm/RdG9jYG7d3nmfM98eJ8ZIT7vfA=)
2: USqQ8XG89Yqk9IuDLJjFaDlmqeE.roa (hash: 9/sNUGETLhHg/aUAG68KMe04hW4qzB2MdqeEagvAE5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2b:a8:f8:b7:3e:c6:95:78:7a:7d:8d:c6:e7:5e:d5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de7e14321f86a46d88f11771ab7818c6bba8c881
Validity
Not Before: Apr 29 21:00:45 2024 GMT
Not After : Apr 30 21:00:45 2024 GMT
Subject: CN=09acea16cd56455f30b3f2739b14c06eb6948697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:76:46:29:09:ee:30:ee:9d:df:c5:ae:7a:
08:a6:6d:35:61:a0:78:7c:b2:f5:92:aa:5e:0e:bc:
94:9f:78:a3:51:37:53:00:f3:42:ff:07:e5:e3:1a:
c6:ea:24:26:c4:5b:5f:e5:ca:d9:6c:b2:5c:53:33:
b8:ad:88:91:99:0a:6a:fa:16:f6:37:38:fa:55:6e:
47:d1:c0:e0:d7:bf:db:e9:4e:fb:83:5c:42:2d:77:
a3:e2:63:15:14:10:f6:ae:88:aa:94:a4:63:f2:7e:
89:5a:07:1f:12:0c:cc:a6:28:c1:29:96:46:48:4b:
5a:13:35:b1:dd:10:b4:bd:99:98:40:30:60:1f:8f:
c1:1d:8c:b6:08:f4:13:9e:39:d4:06:56:c9:9c:a8:
64:cf:85:08:41:a9:de:53:9d:9f:23:7a:10:8a:c1:
12:f1:f1:21:e6:6b:b4:3e:c7:ae:81:3e:d1:d1:65:
95:e9:ee:22:d5:2d:14:26:bd:11:67:dd:dd:81:bd:
4a:0c:1e:93:0f:0b:c4:b3:77:a4:37:84:25:ac:ea:
6b:d8:86:43:cf:03:93:85:39:7f:87:c9:77:dc:4b:
62:54:27:9e:73:60:df:63:83:1a:49:d1:43:12:39:
d1:cf:68:33:64:3c:99:1d:6d:72:90:e3:71:5b:2e:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AC:EA:16:CD:56:45:5F:30:B3:F2:73:9B:14:C0:6E:B6:94:86:97
X509v3 Authority Key Identifier:
keyid:DE:7E:14:32:1F:86:A4:6D:88:F1:17:71:AB:78:18:C6:BB:A8:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3n4UMh-GpG2I8Rdxq3gYxruoyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c5a19b-1221-4aed-a026-60434a2fbe04/1/3n4UMh-GpG2I8Rdxq3gYxruoyIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c5a19b-1221-4aed-a026-60434a2fbe04/1/3n4UMh-GpG2I8Rdxq3gYxruoyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2f:23:f1:62:aa:72:dd:18:8d:a0:bb:ca:a4:18:2b:8c:e2:
a4:e5:16:79:65:86:8f:d1:8a:c9:7d:5c:7e:f7:90:79:bb:01:
d3:2d:ec:3d:77:35:ab:41:bc:25:27:24:15:6d:71:24:ad:fb:
21:a5:10:4e:8c:04:f1:01:a8:46:51:33:08:26:a6:bb:a3:4b:
26:86:4c:f7:f2:6d:8c:a8:4b:37:a8:ca:63:e9:11:86:2b:4e:
aa:33:7b:87:15:a4:68:14:4f:37:84:13:64:87:35:f7:31:7a:
be:f9:24:1e:df:b0:d0:53:a3:b5:53:5c:9d:1a:69:ca:25:9d:
84:75:7c:f8:59:65:63:e5:a4:31:6a:2e:ea:54:28:6b:fc:0b:
c4:e4:06:0b:55:45:dc:12:ce:35:1b:0d:af:c9:15:d4:5f:f1:
4e:1e:ec:ed:d2:b5:2a:f7:e1:84:0d:11:de:5a:15:37:12:69:
eb:b6:16:f0:ca:64:43:d8:4b:21:b2:93:af:75:e7:83:78:16:
56:b9:4c:5c:b1:20:76:bb:51:cf:c0:3a:4a:b4:1c:5d:5c:c4:
76:02:03:0d:ee:f3:3c:ee:f7:0c:34:18:ef:55:4a:d1:e2:96:
d3:a2:36:ce:7c:4f:cc:01:66:b3:e3:35:88:bc:05:23:e6:f0:
5c:0c:25:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8rqPi3PsaVeHp9jcbnXtXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlN2UxNDMyMWY4NmE0NmQ4OGYxMTc3MWFiNzgxOGM2YmJh
OGM4ODEwHhcNMjQwNDI5MjEwMDQ1WhcNMjQwNDMwMjEwMDQ1WjAzMTEwLwYDVQQD
EygwOWFjZWExNmNkNTY0NTVmMzBiM2YyNzM5YjE0YzA2ZWI2OTQ4Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/R2RikJ7jDund/FrnoIpm01YaB4
fLL1kqpeDryUn3ijUTdTAPNC/wfl4xrG6iQmxFtf5crZbLJcUzO4rYiRmQpq+hb2
Nzj6VW5H0cDg17/b6U77g1xCLXej4mMVFBD2roiqlKRj8n6JWgcfEgzMpijBKZZG
SEtaEzWx3RC0vZmYQDBgH4/BHYy2CPQTnjnUBlbJnKhkz4UIQaneU52fI3oQisES
8fEh5mu0PseugT7R0WWV6e4i1S0UJr0RZ93dgb1KDB6TDwvEs3ekN4QlrOpr2IZD
zwOThTl/h8l33EtiVCeec2DfY4MaSdFDEjnRz2gzZDyZHW1ykONxWy4bHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAms6hbNVkVfMLPyc5sUwG62lIaXMB8GA1UdIwQY
MBaAFN5+FDIfhqRtiPEXcat4GMa7qMiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM240VU1oLUdwRzJJOFJkeHEzZ1l4cnVveUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jNWExOWItMTIyMS00YWVkLWEwMjYt
NjA0MzRhMmZiZTA0LzEvM240VU1oLUdwRzJJOFJkeHEzZ1l4cnVveUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9jNWExOWItMTIyMS00YWVkLWEwMjYtNjA0MzRhMmZiZTA0
LzEvM240VU1oLUdwRzJJOFJkeHEzZ1l4cnVveUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy8j8WKq
ct0YjaC7yqQYK4zipOUWeWWGj9GKyX1cfveQebsB0y3sPXc1q0G8JSckFW1xJK37
IaUQTowE8QGoRlEzCCamu6NLJoZM9/JtjKhLN6jKY+kRhitOqjN7hxWkaBRPN4QT
ZIc19zF6vvkkHt+w0FOjtVNcnRppyiWdhHV8+FllY+WkMWou6lQoa/wLxOQGC1VF
3BLONRsNr8kV1F/xTh7s7dK1KvfhhA0R3loVNxJp67YW8MpkQ9hLIbKTr3Xng3gW
VrlMXLEgdrtRz8A6SrQcXVzEdgIDDe7zPO73DDQY71VK0eKW06I2znxPzAFms+M1
iLwFI+bwXAwlTw==
-----END CERTIFICATE-----
Generated at Tue Apr 30 22:25:31 2024 by rpki-client on console.sobornost.net