Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/nr3062_3kSPhfd8_UBgTP0HB0bQ.mft
File: nr3062_3kSPhfd8_UBgTP0HB0bQ.mft (raw, json)
Hash identifier: 5+j+T8Fm9aGKGXovHzdnlVwu7GFOdd9uXF49ixcjr6Y=
Subject key identifier: CC:FC:91:C1:4C:E7:D1:B1:58:0B:0A:EB:62:8B:FF:35:8A:87:36:8B
Authority key identifier: 9E:BD:F4:EB:6F:F7:91:23:E1:7D:DF:3F:50:18:13:3F:41:C1:D1:B4
Certificate issuer: /CN=9ebdf4eb6ff79123e17ddf3f5018133f41c1d1b4
Certificate serial: 018CEDE21519C4CCD5E448E92E53D2115007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nr3062_3kSPhfd8_UBgTP0HB0bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/nr3062_3kSPhfd8_UBgTP0HB0bQ.mft
Manifest number: 080A
Signing time: Tue 09 Jan 2024 11:01:05 +0000
Manifest this update: Tue 09 Jan 2024 11:01:05 +0000
Manifest next update: Wed 10 Jan 2024 11:01:05 +0000
Files and hashes: 1: 9xwCOzat6K2X0ahk6wGB7BxZcCs.roa (hash: bAO5BAV6aG4yIq+Cfsr5SlmqtPj3hD3U/qA9XSrBWzI=)
2: nr3062_3kSPhfd8_UBgTP0HB0bQ.crl (hash: VQj5X9n4305xMQYtbp5lkbKfEhkjOXQ2Gw2gj17UfzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:e2:15:19:c4:cc:d5:e4:48:e9:2e:53:d2:11:50:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebdf4eb6ff79123e17ddf3f5018133f41c1d1b4
Validity
Not Before: Jan 9 11:01:05 2024 GMT
Not After : Jan 10 11:01:05 2024 GMT
Subject: CN=ccfc91c14ce7d1b1580b0aeb628bff358a87368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:1b:ef:91:6f:c9:9e:b0:4b:3c:2c:4a:91:
5c:77:46:c6:67:ad:76:37:0a:2c:6a:67:fc:9c:3b:
d6:b6:a8:d2:c6:be:a6:67:79:55:55:98:28:89:72:
c3:b9:98:b9:55:cb:a0:67:a8:6e:71:65:aa:78:8c:
d8:79:ab:ef:02:f5:89:1f:af:a9:f4:4f:47:24:ba:
74:78:7f:25:35:e7:07:e2:32:d4:54:14:98:03:03:
57:c4:eb:0c:99:87:46:0d:84:cd:90:3b:c6:78:6a:
69:8f:de:e5:ee:f7:ff:0f:94:b2:ff:9b:de:dd:84:
6b:40:22:ef:1a:4b:14:5a:b3:19:bb:66:fd:20:14:
ca:2d:61:fd:be:13:5d:eb:bc:9c:8c:19:24:91:a9:
6c:1b:af:8d:83:67:05:d0:6e:b4:61:51:84:ea:e3:
4a:ad:5d:0a:3c:6b:94:a7:aa:d2:41:1e:99:d7:3e:
b2:11:1a:bd:49:d2:11:b1:ac:2d:d9:14:dd:a3:10:
08:7b:4f:76:5e:97:d3:9e:36:68:51:a0:2d:a1:fc:
cf:0a:4c:53:f8:5b:03:c2:32:57:06:ad:12:26:cc:
c4:81:2e:57:89:d4:08:dd:78:bf:4f:6a:e0:e3:20:
c5:74:f7:d7:8b:0f:63:0e:ad:73:18:d3:8b:48:46:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FC:91:C1:4C:E7:D1:B1:58:0B:0A:EB:62:8B:FF:35:8A:87:36:8B
X509v3 Authority Key Identifier:
keyid:9E:BD:F4:EB:6F:F7:91:23:E1:7D:DF:3F:50:18:13:3F:41:C1:D1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nr3062_3kSPhfd8_UBgTP0HB0bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/nr3062_3kSPhfd8_UBgTP0HB0bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b81cb0-d157-4533-9637-f9fdd3132406/1/nr3062_3kSPhfd8_UBgTP0HB0bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:48:b5:35:71:e0:fa:8a:37:09:66:72:15:80:54:79:66:46:
34:5b:7a:86:42:b1:43:16:d5:b4:7d:c1:b7:0d:3c:aa:46:0b:
5e:b5:e4:62:36:86:c5:f6:98:21:14:c3:76:13:69:21:bf:6c:
07:cc:e5:f4:7d:3f:e5:1f:69:a0:b2:7f:25:e3:a7:a2:0d:f9:
57:a8:f1:d0:bc:e9:69:d6:0f:56:84:a7:0f:9b:1c:28:87:fe:
95:3a:c1:aa:5e:36:05:6d:fd:58:4f:2a:1b:dc:40:d2:02:d1:
47:5b:bf:60:ea:c5:ce:2f:49:83:47:f5:ef:f3:9c:67:2f:0b:
39:8e:99:21:96:8b:30:16:3c:94:5c:6a:4e:86:f9:9b:04:52:
0a:eb:25:c3:b0:bc:91:ee:67:9d:94:3a:ad:db:b8:fa:37:6c:
c5:5a:9e:58:a1:e2:48:51:f8:05:76:f6:0d:a3:67:a4:7e:ec:
dc:11:98:e4:83:66:c8:c9:0f:0e:08:0b:a5:66:09:94:67:7c:
5e:71:d4:c6:a0:a1:82:3c:9e:77:9a:f2:67:38:01:d6:96:d7:
08:0a:2f:89:12:0b:e5:fe:35:d0:3c:92:54:c5:c8:b3:3c:bf:
e0:fa:5e:5a:b9:b1:2b:38:cf:d4:93:e1:50:7e:fa:71:c7:f8:
32:81:63:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzt4hUZxMzV5EjpLlPSEVAHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYmRmNGViNmZmNzkxMjNlMTdkZGYzZjUwMTgxMzNmNDFj
MWQxYjQwHhcNMjQwMTA5MTEwMTA1WhcNMjQwMTEwMTEwMTA1WjAzMTEwLwYDVQQD
EyhjY2ZjOTFjMTRjZTdkMWIxNTgwYjBhZWI2MjhiZmYzNThhODczNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYwb75FvyZ6wSzwsSpFcd0bGZ612
Nwosamf8nDvWtqjSxr6mZ3lVVZgoiXLDuZi5VcugZ6hucWWqeIzYeavvAvWJH6+p
9E9HJLp0eH8lNecH4jLUVBSYAwNXxOsMmYdGDYTNkDvGeGppj97l7vf/D5Sy/5ve
3YRrQCLvGksUWrMZu2b9IBTKLWH9vhNd67ycjBkkkalsG6+Ng2cF0G60YVGE6uNK
rV0KPGuUp6rSQR6Z1z6yERq9SdIRsawt2RTdoxAIe092XpfTnjZoUaAtofzPCkxT
+FsDwjJXBq0SJszEgS5XidQI3Xi/T2rg4yDFdPfXiw9jDq1zGNOLSEZXfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMz8kcFM59GxWAsK62KL/zWKhzaLMB8GA1UdIwQY
MBaAFJ699Otv95Ej4X3fP1AYEz9BwdG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnIzMDYyXzNrU1BoZmQ4X1VCZ1RQMEhCMGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iODFjYjAtZDE1Ny00NTMzLTk2Mzct
ZjlmZGQzMTMyNDA2LzEvbnIzMDYyXzNrU1BoZmQ4X1VCZ1RQMEhCMGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iODFjYjAtZDE1Ny00NTMzLTk2MzctZjlmZGQzMTMyNDA2
LzEvbnIzMDYyXzNrU1BoZmQ4X1VCZ1RQMEhCMGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0i1NXHg
+oo3CWZyFYBUeWZGNFt6hkKxQxbVtH3Btw08qkYLXrXkYjaGxfaYIRTDdhNpIb9s
B8zl9H0/5R9poLJ/JeOnog35V6jx0LzpadYPVoSnD5scKIf+lTrBql42BW39WE8q
G9xA0gLRR1u/YOrFzi9Jg0f17/OcZy8LOY6ZIZaLMBY8lFxqTob5mwRSCuslw7C8
ke5nnZQ6rdu4+jdsxVqeWKHiSFH4BXb2DaNnpH7s3BGY5INmyMkPDggLpWYJlGd8
XnHUxqChgjyed5ryZzgB1pbXCAoviRIL5f410DySVMXIszy/4PpeWrmxKzjP1JPh
UH76ccf4MoFjAg==
-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:35 2024 by rpki-client on console.sobornost.net