Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rhdpXcqPKNB7COv1xVifgSnlypQ.mft
File: rhdpXcqPKNB7COv1xVifgSnlypQ.mft (raw, json)
Hash identifier: pK5qv1b/eoda7lYnhoNG2Tb2es2UDOHhBUHW69zFUcA=
Subject key identifier: AA:D1:0D:6D:F3:E8:33:8B:28:92:48:84:89:82:89:84:B4:08:AD:A7
Authority key identifier: AE:17:69:5D:CA:8F:28:D0:7B:08:EB:F5:C5:58:9F:81:29:E5:CA:94
Certificate issuer: /CN=ae17695dca8f28d07b08ebf5c5589f8129e5ca94
Certificate serial: 019326E6067B7E82D5AC32E8C52DBF3CC35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhdpXcqPKNB7COv1xVifgSnlypQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rhdpXcqPKNB7COv1xVifgSnlypQ.mft
Manifest number: 1358
Signing time: Wed 13 Nov 2024 19:00:29 +0000
Manifest this update: Wed 13 Nov 2024 19:00:29 +0000
Manifest next update: Thu 14 Nov 2024 19:00:29 +0000
Files and hashes: 1: 8U57jlEVwxYc_xQ6lgsRAOuuzdc.roa (hash: nVuNMB5Ncrfq6CXZqq89YwGtpha5pCSpAcYlAQ4Rh4I=)
2: rhdpXcqPKNB7COv1xVifgSnlypQ.crl (hash: vfO3pQ/O3DFYNy67jan7TOEHMTm7TWOKSOXt4jXS9YA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:e6:06:7b:7e:82:d5:ac:32:e8:c5:2d:bf:3c:c3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae17695dca8f28d07b08ebf5c5589f8129e5ca94
Validity
Not Before: Nov 13 19:00:29 2024 GMT
Not After : Nov 14 19:00:29 2024 GMT
Subject: CN=aad10d6df3e8338b2892488489828984b408ada7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:54:99:1e:f6:09:32:03:1c:c9:dc:8a:d6:
3c:e2:a6:3a:21:11:c2:7c:61:a0:0b:15:2a:c8:3d:
05:ff:fa:d6:b5:71:61:ef:5e:c3:76:53:4a:16:e4:
06:43:ca:bc:63:e6:4b:ac:fc:ff:08:e9:6d:7b:05:
c7:52:50:17:41:53:06:bd:01:1a:21:4b:0c:b0:d2:
ed:84:2d:36:ce:5d:14:da:b5:f7:62:87:6c:db:fd:
c1:2f:d0:02:7e:19:88:0a:0e:fc:7c:2e:d7:54:2d:
2b:72:7f:ff:09:74:ba:ed:a2:08:38:df:a7:38:19:
5c:af:d1:c1:f8:33:8d:12:ed:9a:a9:7d:98:35:95:
93:ac:5e:af:d2:ef:d8:51:34:90:52:20:91:8e:af:
12:dc:ca:3a:22:e2:65:c7:4b:ff:83:32:ff:a0:0c:
b2:bc:52:9f:8d:b2:1f:47:4a:99:b3:53:40:a0:64:
30:dc:80:db:e1:1d:76:94:78:02:f2:79:b7:1f:5b:
e2:99:9b:0b:13:e8:ba:26:10:4a:46:e8:81:eb:08:
2e:cf:98:f7:ce:e2:e4:77:80:0f:a9:a2:e9:03:81:
18:3b:97:ad:e4:0e:f1:e5:97:9b:81:65:44:0d:7f:
47:41:81:2b:65:58:db:7d:e2:44:6f:98:29:12:9b:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:0D:6D:F3:E8:33:8B:28:92:48:84:89:82:89:84:B4:08:AD:A7
X509v3 Authority Key Identifier:
keyid:AE:17:69:5D:CA:8F:28:D0:7B:08:EB:F5:C5:58:9F:81:29:E5:CA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhdpXcqPKNB7COv1xVifgSnlypQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rhdpXcqPKNB7COv1xVifgSnlypQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1962df-402a-4859-8517-07e89ca45687/1/rhdpXcqPKNB7COv1xVifgSnlypQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:49:14:a6:52:a9:44:a3:6f:7a:2b:93:ba:85:ca:e1:e0:44:
e3:df:04:9d:92:9f:01:42:e0:fb:fe:e0:9e:5e:5e:ee:b2:e9:
22:d3:e0:61:5d:68:34:5e:f8:c7:51:6d:63:10:33:d2:22:cd:
b0:4a:08:d4:49:62:dd:7b:fe:b7:e0:47:14:f0:3f:9d:b9:ef:
c9:74:89:c6:4e:a3:de:de:28:6c:66:be:3a:d0:0d:5e:04:c1:
6a:03:1c:83:dd:8e:e5:30:2c:f5:6c:64:e2:31:62:55:b3:bd:
80:16:b2:f6:23:2a:b2:cc:d8:8c:9a:a7:23:66:f9:6d:d0:65:
50:f7:98:8c:5b:e4:66:e6:c2:eb:0d:c7:e3:11:7c:88:00:5c:
ec:6e:53:3d:29:8d:e2:8b:db:e8:4f:e2:fb:ef:7e:16:25:7e:
8c:9f:e1:1d:86:68:32:da:f9:65:3c:16:e0:b5:c4:07:99:b5:
e2:16:4a:9d:66:b0:68:2d:62:9c:6b:8b:9b:d3:9e:0b:36:b3:
8d:d9:a2:5d:19:73:e7:14:bb:db:a4:92:1f:91:37:28:4b:7b:
54:66:1c:b5:c1:b0:19:d2:38:0e:c8:ba:46:13:d3:c5:e3:ce:
c5:ac:42:89:63:56:15:21:7c:a4:ac:50:16:6e:db:95:f5:08:
59:da:17:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMm5gZ7foLVrDLoxS2/PMNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMTc2OTVkY2E4ZjI4ZDA3YjA4ZWJmNWM1NTg5ZjgxMjll
NWNhOTQwHhcNMjQxMTEzMTkwMDI5WhcNMjQxMTE0MTkwMDI5WjAzMTEwLwYDVQQD
EyhhYWQxMGQ2ZGYzZTgzMzhiMjg5MjQ4ODQ4OTgyODk4NGI0MDhhZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvatUmR72CTIDHMncitY84qY6IRHC
fGGgCxUqyD0F//rWtXFh717DdlNKFuQGQ8q8Y+ZLrPz/COltewXHUlAXQVMGvQEa
IUsMsNLthC02zl0U2rX3Yods2/3BL9ACfhmICg78fC7XVC0rcn//CXS67aIION+n
OBlcr9HB+DONEu2aqX2YNZWTrF6v0u/YUTSQUiCRjq8S3Mo6IuJlx0v/gzL/oAyy
vFKfjbIfR0qZs1NAoGQw3IDb4R12lHgC8nm3H1vimZsLE+i6JhBKRuiB6wguz5j3
zuLkd4APqaLpA4EYO5et5A7x5ZebgWVEDX9HQYErZVjbfeJEb5gpEpt7EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrRDW3z6DOLKJJIhImCiYS0CK2nMB8GA1UdIwQY
MBaAFK4XaV3KjyjQewjr9cVYn4Ep5cqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmhkcFhjcVBLTkI3Q092MXhWaWZnU25seXBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xOTYyZGYtNDAyYS00ODU5LTg1MTct
MDdlODljYTQ1Njg3LzEvcmhkcFhjcVBLTkI3Q092MXhWaWZnU25seXBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8xOTYyZGYtNDAyYS00ODU5LTg1MTctMDdlODljYTQ1Njg3
LzEvcmhkcFhjcVBLTkI3Q092MXhWaWZnU25seXBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEkUplKp
RKNveiuTuoXK4eBE498EnZKfAULg+/7gnl5e7rLpItPgYV1oNF74x1FtYxAz0iLN
sEoI1Eli3Xv+t+BHFPA/nbnvyXSJxk6j3t4obGa+OtANXgTBagMcg92O5TAs9Wxk
4jFiVbO9gBay9iMqsszYjJqnI2b5bdBlUPeYjFvkZubC6w3H4xF8iABc7G5TPSmN
4ovb6E/i++9+FiV+jJ/hHYZoMtr5ZTwW4LXEB5m14hZKnWawaC1inGuLm9OeCzaz
jdmiXRlz5xS726SSH5E3KEt7VGYctcGwGdI4Dsi6RhPTxePOxaxCiWNWFSF8pKxQ
Fm7blfUIWdoXpw==
-----END CERTIFICATE-----
Generated at Thu Nov 14 18:06:04 2024 by rpki-client on console.sobornost.net