Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/KGQqsXkLf181kGjp-7cmQcVBMHk.mft
File: KGQqsXkLf181kGjp-7cmQcVBMHk.mft (raw, json)
Hash identifier: heDgOa4ac0V9yI57QPW8kgT6PpMhnu+MdCFPNQODYvo=
Subject key identifier: FA:05:30:7C:3D:48:D1:F8:ED:3B:0C:0C:09:D5:09:21:CC:C0:5A:DB
Authority key identifier: 28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79
Certificate issuer: /CN=28642ab1790b7f5f359068e9fbb72641c5413079
Certificate serial: 018CC779518E752EEF110681B98D2834BCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/KGQqsXkLf181kGjp-7cmQcVBMHk.mft
Manifest number: 0943
Signing time: Tue 02 Jan 2024 00:01:05 +0000
Manifest this update: Tue 02 Jan 2024 00:01:05 +0000
Manifest next update: Wed 03 Jan 2024 00:01:05 +0000
Files and hashes: 1: KGQqsXkLf181kGjp-7cmQcVBMHk.crl (hash: DJQnNBjCpkemrBntbqFapDMUf+rtDsJ9smBhpORSArw=)
2: lbYSgScTm_bNbchz558_6DG871A.roa (hash: TN6ZvadQQNKyFafaj3EKtNWmp4tRnE+xFZUraeZctrI=)
3: saGplsDgiJeNhPps3tJYWRr5Ml0.roa (hash: fzs1Lt849nOeCLvf/4xY4XLCnJ10DUvFKZDQr0uFqnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:79:51:8e:75:2e:ef:11:06:81:b9:8d:28:34:bc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28642ab1790b7f5f359068e9fbb72641c5413079
Validity
Not Before: Jan 2 00:01:05 2024 GMT
Not After : Jan 3 00:01:05 2024 GMT
Subject: CN=fa05307c3d48d1f8ed3b0c0c09d50921ccc05adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:16:5b:5d:59:ea:63:9b:7a:e3:63:4d:a8:
55:dd:7a:b7:45:7d:d3:99:90:7b:85:d4:03:51:98:
2c:1d:78:db:d2:80:17:86:95:42:4b:ba:3b:4c:38:
de:60:be:46:0e:cb:0b:66:a1:f9:71:91:e6:bc:c0:
c4:5c:f7:91:d9:51:9d:fe:58:07:74:9b:30:5f:5d:
3e:c0:f5:3f:21:f8:6e:3f:fe:37:56:e1:81:1b:6f:
e6:92:8a:47:4c:c2:66:cf:0b:80:37:24:a9:b4:1f:
43:d9:2a:ab:09:ad:0a:73:5e:97:e5:d6:2d:b7:83:
86:46:e6:2e:6a:68:e4:10:48:3e:e3:85:30:05:c7:
6d:01:f0:2a:f8:cc:61:dc:ff:56:c6:a2:6c:53:ba:
e8:c8:73:91:ee:80:75:3b:c1:59:8e:29:a1:96:0f:
2b:f8:c2:51:fa:7b:f8:ec:ee:e9:d8:85:2c:f3:12:
8e:9a:7c:89:98:a7:bf:c6:ad:65:be:50:90:6f:a1:
d0:d6:3e:0b:ce:09:83:10:3d:5e:9d:fb:ff:d9:c7:
30:7e:18:7f:e2:3b:18:17:eb:b2:63:cb:32:9e:63:
bc:8d:73:73:fc:26:70:81:c0:b6:a9:6b:ac:be:2e:
1e:d6:aa:91:51:27:93:fc:c8:63:e5:19:70:ba:93:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:30:7C:3D:48:D1:F8:ED:3B:0C:0C:09:D5:09:21:CC:C0:5A:DB
X509v3 Authority Key Identifier:
keyid:28:64:2A:B1:79:0B:7F:5F:35:90:68:E9:FB:B7:26:41:C5:41:30:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGQqsXkLf181kGjp-7cmQcVBMHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/KGQqsXkLf181kGjp-7cmQcVBMHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c059d9-0d30-40b3-814b-491a0b5d223f/1/KGQqsXkLf181kGjp-7cmQcVBMHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4a:ca:28:91:78:de:0c:d4:8c:d6:cd:89:2c:ae:73:56:81:
2e:d9:ac:76:2d:b0:ee:71:1e:2a:07:b0:59:a8:2f:c8:d3:2f:
f3:55:33:8e:b6:a0:db:7a:7a:17:59:3e:b1:d1:b8:7e:11:72:
98:42:85:28:f6:25:9a:16:69:fb:40:bd:5e:af:e1:e6:4e:28:
55:8e:f6:7c:5e:f2:a0:db:42:db:86:bf:26:d9:5c:a1:71:be:
d8:b6:d9:3d:be:4f:30:d4:ca:c8:40:64:21:de:45:2d:81:f3:
d0:b7:7a:89:b5:e3:db:f0:09:4e:89:38:ba:c6:64:00:61:af:
3e:3f:c7:99:e1:6d:2b:db:7b:bc:65:32:0b:fc:e6:b6:b7:f0:
43:a9:ff:01:20:cb:c1:3f:88:06:5a:ce:c0:2b:b1:a7:36:34:
6a:16:0f:bb:c8:39:db:24:dc:cb:ea:fd:56:58:c9:0b:66:e9:
65:dd:52:3d:03:9b:67:01:4b:0f:8a:a6:c8:db:58:f5:38:bd:
d5:da:a6:52:e0:0d:ef:7b:15:4c:f9:e7:99:f4:1b:5b:cf:3d:
85:89:2f:b1:d6:bd:44:30:ac:00:19:f0:4d:ab:dd:90:6f:6a:
3d:dd:be:19:84:b3:73:75:6f:37:db:96:58:3b:7a:ad:ab:96:
4a:30:10:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzHeVGOdS7vEQaBuY0oNLzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjQyYWIxNzkwYjdmNWYzNTkwNjhlOWZiYjcyNjQxYzU0
MTMwNzkwHhcNMjQwMTAyMDAwMTA1WhcNMjQwMTAzMDAwMTA1WjAzMTEwLwYDVQQD
EyhmYTA1MzA3YzNkNDhkMWY4ZWQzYjBjMGMwOWQ1MDkyMWNjYzA1YWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8UWW11Z6mObeuNjTahV3Xq3RX3T
mZB7hdQDUZgsHXjb0oAXhpVCS7o7TDjeYL5GDssLZqH5cZHmvMDEXPeR2VGd/lgH
dJswX10+wPU/IfhuP/43VuGBG2/mkopHTMJmzwuANySptB9D2SqrCa0Kc16X5dYt
t4OGRuYuamjkEEg+44UwBcdtAfAq+Mxh3P9WxqJsU7royHOR7oB1O8FZjimhlg8r
+MJR+nv47O7p2IUs8xKOmnyJmKe/xq1lvlCQb6HQ1j4LzgmDED1enfv/2ccwfhh/
4jsYF+uyY8synmO8jXNz/CZwgcC2qWusvi4e1qqRUSeT/Mhj5RlwupPQswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoFMHw9SNH47TsMDAnVCSHMwFrbMB8GA1UdIwQY
MBaAFChkKrF5C39fNZBo6fu3JkHFQTB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dRcXNYa0xmMTgxa0dqcC03Y21RY1ZCTUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMDU5ZDktMGQzMC00MGIzLTgxNGIt
NDkxYTBiNWQyMjNmLzEvS0dRcXNYa0xmMTgxa0dqcC03Y21RY1ZCTUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jMDU5ZDktMGQzMC00MGIzLTgxNGItNDkxYTBiNWQyMjNm
LzEvS0dRcXNYa0xmMTgxa0dqcC03Y21RY1ZCTUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0rKKJF4
3gzUjNbNiSyuc1aBLtmsdi2w7nEeKgewWagvyNMv81Uzjrag23p6F1k+sdG4fhFy
mEKFKPYlmhZp+0C9Xq/h5k4oVY72fF7yoNtC24a/JtlcoXG+2LbZPb5PMNTKyEBk
Id5FLYHz0Ld6ibXj2/AJTok4usZkAGGvPj/HmeFtK9t7vGUyC/zmtrfwQ6n/ASDL
wT+IBlrOwCuxpzY0ahYPu8g52yTcy+r9VljJC2bpZd1SPQObZwFLD4qmyNtY9Ti9
1dqmUuAN73sVTPnnmfQbW889hYkvsda9RDCsABnwTavdkG9qPd2+GYSzc3VvN9uW
WDt6rauWSjAQ4w==
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:56 2024 by rpki-client on console.sobornost.net