Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/1x--OCD28Y6hszNtqfByuP0qDfI.mft
File: 1x--OCD28Y6hszNtqfByuP0qDfI.mft (raw, json)
Hash identifier: 5e5IIQu0ran/YuZDO1l93gdJYK3X/iMPb0ip0Mxeudc=
Subject key identifier: 25:A7:1D:1F:BE:2C:4F:6A:12:F7:E1:AD:85:B5:7A:E7:1F:7A:10:59
Authority key identifier: D7:1F:BE:38:20:F6:F1:8E:A1:B3:33:6D:A9:F0:72:B8:FD:2A:0D:F2
Certificate issuer: /CN=d71fbe3820f6f18ea1b3336da9f072b8fd2a0df2
Certificate serial: 0192AE8771F55F6D9A6DA27AF55EFD3A274B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1x--OCD28Y6hszNtqfByuP0qDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/1x--OCD28Y6hszNtqfByuP0qDfI.mft
Manifest number: 11F1
Signing time: Mon 21 Oct 2024 10:02:45 +0000
Manifest this update: Mon 21 Oct 2024 10:02:45 +0000
Manifest next update: Tue 22 Oct 2024 10:02:45 +0000
Files and hashes: 1: 0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa (hash: M5B0SkG9hWwwlfig08E3JzP7e25LB4D53pzU2Ly/ANE=)
2: 1x--OCD28Y6hszNtqfByuP0qDfI.crl (hash: D/ERAoivO+BxjUVMcojh8zC62J8SdEeuoK2xbtUIRwQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:87:71:f5:5f:6d:9a:6d:a2:7a:f5:5e:fd:3a:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d71fbe3820f6f18ea1b3336da9f072b8fd2a0df2
Validity
Not Before: Oct 21 10:02:45 2024 GMT
Not After : Oct 22 10:02:45 2024 GMT
Subject: CN=25a71d1fbe2c4f6a12f7e1ad85b57ae71f7a1059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:4d:29:b8:00:e0:fd:84:83:b3:13:73:02:
27:cb:19:7b:41:3a:29:98:6c:29:5e:67:4d:b6:54:
75:98:a8:17:df:90:78:04:5d:45:c9:f0:1a:92:76:
cd:07:27:c0:8f:5f:29:d5:4f:fb:b2:30:48:f9:3e:
66:3d:af:e5:c9:f6:6b:e7:c4:1c:6c:74:58:b0:2e:
9e:9b:e7:eb:a5:34:74:60:8f:de:7d:7b:0f:a4:d0:
b2:86:1a:4e:f1:42:27:a6:e6:ba:65:aa:eb:ed:9f:
32:25:4f:7f:6f:cf:f2:1f:df:5e:9a:50:9a:bc:60:
2c:c8:c2:99:2f:f4:ed:11:23:da:ac:86:40:b1:da:
41:6b:a4:44:9f:03:59:96:76:81:1b:d5:6f:c9:62:
5c:94:5f:66:fb:17:f9:32:4d:1f:70:9e:9d:a6:6e:
f3:48:a5:c8:d8:74:8e:91:34:78:a0:19:88:08:0c:
8e:c8:6a:0d:ba:5a:66:79:13:6a:9c:4f:bd:32:92:
23:95:52:1d:80:43:9e:ab:1c:dd:30:4d:18:19:91:
35:15:98:6f:37:8a:5c:88:93:22:59:be:58:81:17:
68:e0:7a:fd:c3:b7:ec:67:7e:c1:1f:85:95:91:a7:
34:c0:4a:e1:bc:6d:03:7c:75:6e:53:49:e7:83:84:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A7:1D:1F:BE:2C:4F:6A:12:F7:E1:AD:85:B5:7A:E7:1F:7A:10:59
X509v3 Authority Key Identifier:
keyid:D7:1F:BE:38:20:F6:F1:8E:A1:B3:33:6D:A9:F0:72:B8:FD:2A:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1x--OCD28Y6hszNtqfByuP0qDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/1x--OCD28Y6hszNtqfByuP0qDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/1x--OCD28Y6hszNtqfByuP0qDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c7:e0:63:0e:3d:1d:b8:37:27:dc:bb:3e:1a:cb:d8:a7:ca:
52:22:eb:56:35:06:a7:2b:d7:7f:ad:83:91:0b:e3:90:46:18:
10:2f:37:03:fa:4f:b6:fa:c3:e6:ae:21:68:e7:b7:ff:44:26:
36:f7:2d:f4:00:65:a6:b9:bc:80:a8:bc:8d:85:d8:5f:61:4e:
3b:8e:15:dc:11:b0:fc:65:2d:67:1f:b9:b6:30:a8:82:58:7b:
6e:3e:5c:85:ef:4a:be:a6:1f:eb:35:cf:25:a0:25:bb:b0:a6:
f4:13:8f:0a:e9:50:61:53:79:93:3f:f4:a7:58:13:6c:38:47:
fc:82:7f:76:59:1f:e0:67:15:51:6f:fc:be:5f:3e:41:cb:95:
dc:05:0e:c6:80:42:f8:58:4b:db:03:34:9e:98:a9:00:ea:a9:
28:8e:d3:c9:f3:c9:1e:1c:fe:6c:1a:8e:6b:dd:ca:e7:6f:aa:
bb:8d:cb:31:18:15:c7:d6:f3:93:8b:26:98:2c:7f:14:15:e3:
98:8b:a9:1e:e5:a7:dd:0a:07:32:1b:69:55:4a:56:bb:f1:86:
cb:58:e4:e6:a7:ae:df:b1:fb:1b:c5:73:fc:8b:39:85:bf:9f:
31:16:4c:0c:3f:5f:ca:d6:b4:79:47:db:7c:d5:e7:d9:54:c2:
3c:3c:ee:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKuh3H1X22abaJ69V79OidLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MWZiZTM4MjBmNmYxOGVhMWIzMzM2ZGE5ZjA3MmI4ZmQy
YTBkZjIwHhcNMjQxMDIxMTAwMjQ1WhcNMjQxMDIyMTAwMjQ1WjAzMTEwLwYDVQQD
EygyNWE3MWQxZmJlMmM0ZjZhMTJmN2UxYWQ4NWI1N2FlNzFmN2ExMDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19NKbgA4P2Eg7MTcwInyxl7QTop
mGwpXmdNtlR1mKgX35B4BF1FyfAaknbNByfAj18p1U/7sjBI+T5mPa/lyfZr58Qc
bHRYsC6em+frpTR0YI/efXsPpNCyhhpO8UInpua6Zarr7Z8yJU9/b8/yH99emlCa
vGAsyMKZL/TtESParIZAsdpBa6REnwNZlnaBG9VvyWJclF9m+xf5Mk0fcJ6dpm7z
SKXI2HSOkTR4oBmICAyOyGoNulpmeRNqnE+9MpIjlVIdgEOeqxzdME0YGZE1FZhv
N4pciJMiWb5YgRdo4Hr9w7fsZ37BH4WVkac0wErhvG0DfHVuU0nng4SqhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWnHR++LE9qEvfhrYW1eucfehBZMB8GA1UdIwQY
MBaAFNcfvjgg9vGOobMzbanwcrj9Kg3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXgtLU9DRDI4WTZoc3pOdHFmQnl1UDBxRGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZjM5MDQtMzg5OC00MmVkLThmNDAt
OTczNDVjYTE3ZDdmLzEvMXgtLU9DRDI4WTZoc3pOdHFmQnl1UDBxRGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yZjM5MDQtMzg5OC00MmVkLThmNDAtOTczNDVjYTE3ZDdm
LzEvMXgtLU9DRDI4WTZoc3pOdHFmQnl1UDBxRGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsfgYw49
Hbg3J9y7PhrL2KfKUiLrVjUGpyvXf62DkQvjkEYYEC83A/pPtvrD5q4haOe3/0Qm
Nvct9ABlprm8gKi8jYXYX2FOO44V3BGw/GUtZx+5tjCoglh7bj5che9KvqYf6zXP
JaAlu7Cm9BOPCulQYVN5kz/0p1gTbDhH/IJ/dlkf4GcVUW/8vl8+QcuV3AUOxoBC
+FhL2wM0npipAOqpKI7TyfPJHhz+bBqOa93K52+qu43LMRgVx9bzk4smmCx/FBXj
mIupHuWn3QoHMhtpVUpWu/GGy1jk5qeu37H7G8Vz/Is5hb+fMRZMDD9fyta0eUfb
fNXn2VTCPDzuig==
-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:13 2024 by rpki-client on console.sobornost.net