Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/bWNf4MCJbVhMTMwZlL5_alGainM.mft
File: bWNf4MCJbVhMTMwZlL5_alGainM.mft (raw, json)
Hash identifier: 03vRO202V6xgafoeOoFxxk8jrc3zvBnQuV4uG46V1ak=
Subject key identifier: F7:0D:51:B3:C7:E8:72:56:72:05:56:27:0B:DF:67:39:D8:BA:67:BC
Authority key identifier: 6D:63:5F:E0:C0:89:6D:58:4C:4C:CC:19:94:BE:7F:6A:51:9A:8A:73
Certificate issuer: /CN=6d635fe0c0896d584c4ccc1994be7f6a519a8a73
Certificate serial: 018C58894689F676E4D0E1F3A2FE07602E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWNf4MCJbVhMTMwZlL5_alGainM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/bWNf4MCJbVhMTMwZlL5_alGainM.mft
Manifest number: 0233
Signing time: Mon 11 Dec 2023 11:00:40 +0000
Manifest this update: Mon 11 Dec 2023 11:00:40 +0000
Manifest next update: Tue 12 Dec 2023 11:00:40 +0000
Files and hashes: 1: 21D0Nhw6lRIFoMSuDCoHQdQG5ms.roa (hash: BZKzolrWWxAWwoYXz82PV3AJYFjohJMV+jUruAjr8s4=)
2: bWNf4MCJbVhMTMwZlL5_alGainM.crl (hash: dCYxfT3ERyHZSngtDDz5xOKio4e6pn8FW8HS6MdvEXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:89:46:89:f6:76:e4:d0:e1:f3:a2:fe:07:60:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d635fe0c0896d584c4ccc1994be7f6a519a8a73
Validity
Not Before: Dec 11 11:00:40 2023 GMT
Not After : Dec 12 11:00:40 2023 GMT
Subject: CN=f70d51b3c7e87256720556270bdf6739d8ba67bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:a9:c2:25:a8:88:6e:c9:11:82:85:8d:d3:
5a:ff:5c:18:cd:5c:b8:69:44:ee:b0:5d:2b:7f:35:
79:e0:f3:6f:d1:26:ff:9d:cd:c0:c2:05:16:90:8f:
34:77:f8:4e:20:9b:63:c3:7e:f9:32:c2:e8:a6:61:
03:96:57:0c:94:9b:e4:de:61:1e:94:57:69:32:79:
c7:9b:17:c4:65:fa:d4:8a:14:7a:d5:07:b6:45:19:
6b:cc:e7:0e:7f:5c:b1:1e:d1:49:5d:47:19:eb:59:
0b:bb:f1:29:7c:5c:39:ff:a5:51:da:7b:44:53:ce:
5b:65:6e:39:77:fe:d1:38:9a:0e:70:ad:1e:25:81:
ff:b6:94:d0:ed:c3:8b:37:88:0b:ce:d1:22:28:df:
6c:94:54:b1:2c:81:d9:d6:0a:8a:85:45:f3:a4:dc:
6d:47:b2:90:e0:08:53:3c:f9:0d:4a:85:79:35:08:
13:a8:46:6e:e2:a4:69:5b:74:67:a2:e1:1c:95:b5:
1a:34:d4:d9:22:67:62:f1:ea:5c:3b:0b:40:0d:78:
d7:a6:61:21:ee:19:5f:2f:46:7a:fb:9d:c6:7b:f7:
8b:54:1a:34:c5:2d:9a:73:3f:8e:7c:e5:f0:31:63:
82:54:6e:7e:78:de:83:09:47:d6:bf:cb:2e:f6:f4:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0D:51:B3:C7:E8:72:56:72:05:56:27:0B:DF:67:39:D8:BA:67:BC
X509v3 Authority Key Identifier:
keyid:6D:63:5F:E0:C0:89:6D:58:4C:4C:CC:19:94:BE:7F:6A:51:9A:8A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWNf4MCJbVhMTMwZlL5_alGainM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/bWNf4MCJbVhMTMwZlL5_alGainM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f64f11-8d28-4d88-af50-dc6ce6e525c2/1/bWNf4MCJbVhMTMwZlL5_alGainM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fd:3e:d6:91:38:62:23:40:76:03:9d:74:bf:40:b0:19:4b:
97:e1:9a:0a:56:f7:85:cc:1d:f5:e6:f9:7c:51:ce:e1:15:ae:
34:13:5a:3f:17:01:d9:53:ca:38:6b:79:b1:d8:51:b1:dc:05:
d4:f8:0b:4f:be:93:86:5e:3d:3e:7a:15:94:a1:45:e4:a1:9d:
6e:2c:f4:95:4f:ec:c9:2f:04:06:13:e0:c7:db:5c:8a:81:8d:
7f:30:ac:4c:59:3f:40:7e:a6:ed:93:06:7e:b4:08:9b:17:99:
4f:2e:18:d2:24:33:f3:a8:49:c8:59:a9:74:64:44:a6:1d:ee:
6c:2b:66:23:04:f9:46:53:ff:be:11:2e:b9:d9:fd:79:27:59:
c8:b6:87:2c:d9:06:cd:ec:78:7d:fa:18:a9:81:54:1f:02:3f:
e0:20:33:c2:c0:1a:14:52:cd:39:50:8c:cf:dc:7f:09:44:73:
07:54:eb:21:ac:0d:46:5a:01:49:4f:31:6c:94:95:11:fe:4d:
35:0f:26:64:77:2a:d5:3b:25:4f:54:fa:d0:93:2e:5b:e6:7f:
ac:69:f2:dc:13:f9:9c:3c:74:ae:3a:a9:69:a3:0f:51:13:ad:
ca:c2:f0:ba:af:a3:59:3f:49:c0:c7:11:0b:fb:6b:29:de:68:
38:c0:d7:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxYiUaJ9nbk0OHzov4HYC6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjM1ZmUwYzA4OTZkNTg0YzRjY2MxOTk0YmU3ZjZhNTE5
YThhNzMwHhcNMjMxMjExMTEwMDQwWhcNMjMxMjEyMTEwMDQwWjAzMTEwLwYDVQQD
EyhmNzBkNTFiM2M3ZTg3MjU2NzIwNTU2MjcwYmRmNjczOWQ4YmE2N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfipwiWoiG7JEYKFjdNa/1wYzVy4
aUTusF0rfzV54PNv0Sb/nc3AwgUWkI80d/hOIJtjw375MsLopmEDllcMlJvk3mEe
lFdpMnnHmxfEZfrUihR61Qe2RRlrzOcOf1yxHtFJXUcZ61kLu/EpfFw5/6VR2ntE
U85bZW45d/7ROJoOcK0eJYH/tpTQ7cOLN4gLztEiKN9slFSxLIHZ1gqKhUXzpNxt
R7KQ4AhTPPkNSoV5NQgTqEZu4qRpW3RnouEclbUaNNTZImdi8epcOwtADXjXpmEh
7hlfL0Z6+53Ge/eLVBo0xS2acz+OfOXwMWOCVG5+eN6DCUfWv8su9vQwHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcNUbPH6HJWcgVWJwvfZznYume8MB8GA1UdIwQY
MBaAFG1jX+DAiW1YTEzMGZS+f2pRmopzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldOZjRNQ0piVmhNVE13WmxMNV9hbEdhaW5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNjRmMTEtOGQyOC00ZDg4LWFmNTAt
ZGM2Y2U2ZTUyNWMyLzEvYldOZjRNQ0piVmhNVE13WmxMNV9hbEdhaW5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNjRmMTEtOGQyOC00ZDg4LWFmNTAtZGM2Y2U2ZTUyNWMy
LzEvYldOZjRNQ0piVmhNVE13WmxMNV9hbEdhaW5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJP0+1pE4
YiNAdgOddL9AsBlLl+GaClb3hcwd9eb5fFHO4RWuNBNaPxcB2VPKOGt5sdhRsdwF
1PgLT76Thl49PnoVlKFF5KGdbiz0lU/syS8EBhPgx9tcioGNfzCsTFk/QH6m7ZMG
frQImxeZTy4Y0iQz86hJyFmpdGREph3ubCtmIwT5RlP/vhEuudn9eSdZyLaHLNkG
zex4ffoYqYFUHwI/4CAzwsAaFFLNOVCMz9x/CURzB1TrIawNRloBSU8xbJSVEf5N
NQ8mZHcq1TslT1T60JMuW+Z/rGny3BP5nDx0rjqpaaMPUROtysLwuq+jWT9JwMcR
C/trKd5oOMDX/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:10 2024 by rpki-client on console-fra.rpki-client.org