Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f1424-476f-4178-9abf-185b2d4f9437/1/kfTaY6Bl9oYMqGaEhrtY2jKge50.mft
File: kfTaY6Bl9oYMqGaEhrtY2jKge50.mft (raw, json)
Hash identifier: teIL95qpL05hXGP+92UGVrbAJhehBcocItz5qPY36Dw=
Subject key identifier: 13:CB:F4:CD:6D:28:62:64:8A:C8:27:DD:BF:B4:16:17:1D:43:AE:91
Authority key identifier: 91:F4:DA:63:A0:65:F6:86:0C:A8:66:84:86:BB:58:DA:32:A0:7B:9D
Certificate issuer: /CN=91f4da63a065f6860ca8668486bb58da32a07b9d
Certificate serial: 0188D32158F22868104414FE56E50D3373B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfTaY6Bl9oYMqGaEhrtY2jKge50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f1424-476f-4178-9abf-185b2d4f9437/1/kfTaY6Bl9oYMqGaEhrtY2jKge50.mft
Manifest number: 019A
Signing time: Mon 19 Jun 2023 10:09:17 +0000
Manifest this update: Mon 19 Jun 2023 10:09:17 +0000
Manifest next update: Tue 20 Jun 2023 10:09:17 +0000
Files and hashes: 1: kfTaY6Bl9oYMqGaEhrtY2jKge50.crl (hash: pdg84ppissqvgg/hP4pT6Ak8LImO6yMMXWsfKB0n32M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:21:58:f2:28:68:10:44:14:fe:56:e5:0d:33:73:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f4da63a065f6860ca8668486bb58da32a07b9d
Validity
Not Before: Jun 19 10:09:17 2023 GMT
Not After : Jun 20 10:09:17 2023 GMT
Subject: CN=13cbf4cd6d2862648ac827ddbfb416171d43ae91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:a5:ba:88:7c:c7:09:73:1b:fe:a9:73:18:
01:c8:e5:b3:ac:1a:2b:89:d9:ff:9b:d3:af:d8:a3:
11:d8:44:2b:ce:31:04:94:7f:d8:57:ff:8a:92:06:
e2:83:c6:f0:65:ce:47:7f:75:57:a8:0d:df:e1:a9:
d2:a0:69:a5:e3:f8:36:4d:69:92:88:d0:c7:44:7d:
5f:ab:2d:3d:5a:2d:81:14:c6:af:b2:5c:09:96:5f:
42:27:41:f5:9a:39:67:2a:02:78:70:77:bd:db:91:
03:74:21:96:68:f8:64:35:8b:e4:6d:30:3e:08:ce:
4e:80:73:2d:57:47:6c:d0:08:6c:26:f7:8f:10:ed:
f3:e7:1d:87:68:cc:15:67:ab:42:fd:1a:f5:e5:59:
99:db:86:d2:f2:39:01:69:15:07:20:35:93:ad:d5:
44:65:ca:00:45:d3:aa:aa:0d:d9:cf:22:96:70:98:
5e:1d:2e:a0:99:a0:5e:b1:7f:c0:9c:52:ce:9e:5d:
e3:14:fe:64:93:2e:16:31:da:27:8e:d7:ea:65:c0:
fc:df:7c:b7:0a:fa:93:ab:5c:f3:27:bd:70:b1:a1:
f8:c6:68:84:82:fb:c7:66:ff:93:bb:f9:07:3a:f1:
e2:07:51:ff:59:29:bc:93:bf:b3:2d:12:11:6c:88:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:F4:CD:6D:28:62:64:8A:C8:27:DD:BF:B4:16:17:1D:43:AE:91
X509v3 Authority Key Identifier:
keyid:91:F4:DA:63:A0:65:F6:86:0C:A8:66:84:86:BB:58:DA:32:A0:7B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfTaY6Bl9oYMqGaEhrtY2jKge50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f1424-476f-4178-9abf-185b2d4f9437/1/kfTaY6Bl9oYMqGaEhrtY2jKge50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f1424-476f-4178-9abf-185b2d4f9437/1/kfTaY6Bl9oYMqGaEhrtY2jKge50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:20:40:1b:18:bf:2b:e3:45:77:dc:4f:13:d2:32:52:c9:7e:
72:39:a9:1c:35:07:16:1c:f4:34:c4:9b:23:98:4a:ba:46:41:
14:a4:87:6b:fa:ba:d7:b7:4a:ab:8d:7f:cf:11:02:13:91:3f:
d5:3c:46:68:b7:4b:bb:0f:c2:e1:a2:4d:db:f8:f5:2c:1b:60:
3e:88:ce:ff:8b:a9:b8:8b:55:bc:0a:4e:f4:07:af:ee:4f:4b:
72:35:e1:9a:95:e9:1f:ce:3f:4b:b6:a8:f3:fd:11:e3:61:dd:
5d:93:54:4c:ec:0f:d0:50:42:43:92:b0:d7:0a:46:6e:59:a6:
e4:11:14:4c:d8:0e:7a:62:ad:eb:ca:48:cc:3f:c5:55:0b:57:
34:3d:01:c5:6e:3d:60:0a:ba:ae:41:27:fe:d6:dd:6b:a0:11:
c5:f9:4d:8d:96:82:54:67:5e:99:be:66:3a:84:90:2d:63:90:
46:ae:7b:b5:c7:06:14:07:87:d2:3b:bb:90:75:f3:31:1c:f9:
c7:55:40:8d:0d:0a:95:39:7f:fe:03:1b:66:33:43:fa:ef:67:
84:21:6b:77:62:49:e8:41:ff:8d:84:25:50:4b:ca:e2:b9:e8:
6e:5d:ab:46:99:58:66:79:b2:be:d4:e3:c6:0c:6c:73:60:e0:
5c:2f:83:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYjTIVjyKGgQRBT+VuUNM3O1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjRkYTYzYTA2NWY2ODYwY2E4NjY4NDg2YmI1OGRhMzJh
MDdiOWQwHhcNMjMwNjE5MTAwOTE3WhcNMjMwNjIwMTAwOTE3WjAzMTEwLwYDVQQD
EygxM2NiZjRjZDZkMjg2MjY0OGFjODI3ZGRiZmI0MTYxNzFkNDNhZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLWluoh8xwlzG/6pcxgByOWzrBor
idn/m9Ov2KMR2EQrzjEElH/YV/+Kkgbig8bwZc5Hf3VXqA3f4anSoGml4/g2TWmS
iNDHRH1fqy09Wi2BFMavslwJll9CJ0H1mjlnKgJ4cHe925EDdCGWaPhkNYvkbTA+
CM5OgHMtV0ds0AhsJvePEO3z5x2HaMwVZ6tC/Rr15VmZ24bS8jkBaRUHIDWTrdVE
ZcoARdOqqg3ZzyKWcJheHS6gmaBesX/AnFLOnl3jFP5kky4WMdonjtfqZcD833y3
CvqTq1zzJ71wsaH4xmiEgvvHZv+Tu/kHOvHiB1H/WSm8k7+zLRIRbIhnfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPL9M1tKGJkisgn3b+0FhcdQ66RMB8GA1UdIwQY
MBaAFJH02mOgZfaGDKhmhIa7WNoyoHudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZUYVk2Qmw5b1lNcUdhRWhydFkyaktnZTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjE0MjQtNDc2Zi00MTc4LTlhYmYt
MTg1YjJkNGY5NDM3LzEva2ZUYVk2Qmw5b1lNcUdhRWhydFkyaktnZTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80ZjE0MjQtNDc2Zi00MTc4LTlhYmYtMTg1YjJkNGY5NDM3
LzEva2ZUYVk2Qmw5b1lNcUdhRWhydFkyaktnZTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSBAGxi/
K+NFd9xPE9IyUsl+cjmpHDUHFhz0NMSbI5hKukZBFKSHa/q617dKq41/zxECE5E/
1TxGaLdLuw/C4aJN2/j1LBtgPojO/4upuItVvApO9Aev7k9LcjXhmpXpH84/S7ao
8/0R42HdXZNUTOwP0FBCQ5Kw1wpGblmm5BEUTNgOemKt68pIzD/FVQtXND0BxW49
YAq6rkEn/tbda6ARxflNjZaCVGdemb5mOoSQLWOQRq57tccGFAeH0ju7kHXzMRz5
x1VAjQ0KlTl//gMbZjND+u9nhCFrd2JJ6EH/jYQlUEvK4rnobl2rRplYZnmyvtTj
xgxsc2DgXC+DJA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:21 2024 by rpki-client on console-fra.rpki-client.org