Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.mft
File: 0eAM_O2eO6VceewiWB7xs0vgHK4.mft (raw, json)
Hash identifier: m7SYHWq5e5cJEAIG/iJVG77yDp3F64eOiiuoZzhjrBQ=
Subject key identifier: 75:C3:A9:79:65:C4:49:0E:E8:BB:48:96:8E:BF:80:A4:88:72:B5:E2
Authority key identifier: D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
Certificate issuer: /CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
Certificate serial: 018CEDAB4774A901FA932AC27C4819E8531A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.mft
Manifest number: 080F
Signing time: Tue 09 Jan 2024 10:01:14 +0000
Manifest this update: Tue 09 Jan 2024 10:01:14 +0000
Manifest next update: Wed 10 Jan 2024 10:01:14 +0000
Files and hashes: 1: 0eAM_O2eO6VceewiWB7xs0vgHK4.crl (hash: IXbSdROVWsKGLNK6OEgu0UfPz36ExsaPPJRM0POyDp4=)
2: 1-e8XIT1Z3N7FkE6antYfwBKkpzw.roa (hash: zVNjPnCC1reYEwi0hBdkwfOGcT4yDr6RLJ+k6m72QQk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:ab:47:74:a9:01:fa:93:2a:c2:7c:48:19:e8:53:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
Validity
Not Before: Jan 9 10:01:14 2024 GMT
Not After : Jan 10 10:01:14 2024 GMT
Subject: CN=75c3a97965c4490ee8bb48968ebf80a48872b5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:46:fe:37:ee:bb:34:ce:59:5c:94:47:1e:
4a:3a:44:fa:5a:06:01:15:25:7c:c0:3d:85:9f:31:
31:c0:db:b4:99:a1:86:65:ba:f3:bf:3c:73:8a:a3:
6e:73:8c:3c:b4:0e:f0:c2:6b:e2:bc:e9:6a:08:0b:
7d:1b:6a:b9:0d:a7:de:09:29:8e:cf:2b:ae:19:60:
1b:4a:ae:fc:6f:03:71:4f:89:91:4d:62:00:a6:44:
40:1e:c0:30:19:5f:d3:af:58:c0:f4:20:3b:5d:78:
df:fd:61:32:54:dc:4e:6d:7a:90:d0:d3:82:4a:4d:
7e:e7:12:1c:35:c2:7f:77:79:b0:f4:00:e2:ca:93:
ff:3f:89:4d:01:41:f4:0c:27:18:34:38:f4:06:60:
d6:5d:32:9e:b4:dc:e1:26:d6:d1:97:ef:27:fa:d6:
0e:ab:ce:55:5f:90:e9:eb:8c:89:22:28:0e:6d:ba:
56:75:30:ee:07:6f:f2:77:2f:bd:cd:bc:18:ff:83:
7f:2f:30:51:db:98:c0:f9:c5:fb:57:3e:be:39:2e:
98:7f:42:3f:47:30:97:24:5c:42:5d:d9:e6:1d:55:
dd:48:db:a0:0f:de:e0:14:43:ef:0b:d1:f8:f8:97:
9b:6f:13:11:84:d5:97:7a:c4:27:08:b7:46:48:be:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:A9:79:65:C4:49:0E:E8:BB:48:96:8E:BF:80:A4:88:72:B5:E2
X509v3 Authority Key Identifier:
keyid:D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:64:ba:f7:b0:08:5b:62:48:9b:31:db:11:0f:ac:b9:53:42:
df:2a:a3:1d:b9:a8:b3:e2:a4:7b:6a:4c:8a:61:51:b5:6d:a8:
98:0d:0e:02:84:8a:5c:69:58:fa:ef:aa:be:4b:48:0c:ae:6b:
74:ec:f7:b8:3f:9b:13:2a:31:a9:8a:a6:22:08:dc:27:ea:96:
b0:35:68:0c:31:4a:6c:4a:2d:b4:ba:0a:2a:99:29:aa:db:f2:
55:cc:86:97:38:12:68:4b:06:d1:38:02:be:ca:1b:49:c3:16:
80:6c:38:32:04:fb:cd:a3:b4:10:77:d5:62:0e:9f:b6:51:e8:
8c:4d:82:16:5c:e3:b1:7d:7c:bb:dc:58:4a:24:8d:43:19:69:
b7:ae:47:21:4b:34:fe:9a:8c:68:18:00:e7:ff:12:48:9d:40:
ff:b4:a2:4d:e6:b9:05:81:85:e2:47:df:66:f5:14:fd:ac:16:
13:a4:c9:62:b8:c3:7b:2f:0c:ec:d5:ab:4a:0c:7b:dd:48:73:
21:eb:c6:33:a3:95:66:60:c5:65:79:79:13:a1:c7:fb:22:ea:
74:7b:3f:e0:91:b1:09:b4:d6:3e:41:1f:a6:19:f2:57:c8:75:
22:44:0e:a9:11:19:32:46:cc:ca:b1:b4:66:a9:ca:4e:f9:8d:
84:6a:96:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYztq0d0qQH6kyrCfEgZ6FMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZTAwY2ZjZWQ5ZTNiYTU1Yzc5ZWMyMjU4MWVmMWIzNGJl
MDFjYWUwHhcNMjQwMTA5MTAwMTE0WhcNMjQwMTEwMTAwMTE0WjAzMTEwLwYDVQQD
Eyg3NWMzYTk3OTY1YzQ0OTBlZThiYjQ4OTY4ZWJmODBhNDg4NzJiNWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKdG/jfuuzTOWVyURx5KOkT6WgYB
FSV8wD2FnzExwNu0maGGZbrzvzxziqNuc4w8tA7wwmvivOlqCAt9G2q5DafeCSmO
zyuuGWAbSq78bwNxT4mRTWIApkRAHsAwGV/Tr1jA9CA7XXjf/WEyVNxObXqQ0NOC
Sk1+5xIcNcJ/d3mw9ADiypP/P4lNAUH0DCcYNDj0BmDWXTKetNzhJtbRl+8n+tYO
q85VX5Dp64yJIigObbpWdTDuB2/ydy+9zbwY/4N/LzBR25jA+cX7Vz6+OS6Yf0I/
RzCXJFxCXdnmHVXdSNugD97gFEPvC9H4+JebbxMRhNWXesQnCLdGSL7WaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXDqXllxEkO6LtIlo6/gKSIcrXiMB8GA1UdIwQY
MBaAFNHgDPztnjulXHnsIlge8bNL4ByuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGVBTV9PMmVPNlZjZWV3aVdCN3hzMHZnSEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jOGEzNjQtZTg5Ny00NDZmLTg5Zjct
NWRmOTlkMjhlYjRiLzEvMGVBTV9PMmVPNlZjZWV3aVdCN3hzMHZnSEs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jOGEzNjQtZTg5Ny00NDZmLTg5ZjctNWRmOTlkMjhlYjRi
LzEvMGVBTV9PMmVPNlZjZWV3aVdCN3hzMHZnSEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2S697AI
W2JImzHbEQ+suVNC3yqjHbmos+Kke2pMimFRtW2omA0OAoSKXGlY+u+qvktIDK5r
dOz3uD+bEyoxqYqmIgjcJ+qWsDVoDDFKbEottLoKKpkpqtvyVcyGlzgSaEsG0TgC
vsobScMWgGw4MgT7zaO0EHfVYg6ftlHojE2CFlzjsX18u9xYSiSNQxlpt65HIUs0
/pqMaBgA5/8SSJ1A/7SiTea5BYGF4kffZvUU/awWE6TJYrjDey8M7NWrSgx73Uhz
IevGM6OVZmDFZXl5E6HH+yLqdHs/4JGxCbTWPkEfphnyV8h1IkQOqREZMkbMyrG0
ZqnKTvmNhGqWJg==
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:17 2024 by rpki-client on console.sobornost.net