Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.mft
File: IbQQoXRA_Ksc3JCvpvy3JMgMgqk.mft (raw, json)
Hash identifier: xLRgXqPD5kC7t5NmWiJDL6m1ZbohJYYxdABHq8PtF1s=
Subject key identifier: 64:B3:FD:1B:DF:F0:82:64:13:2E:FC:8B:AE:3A:EE:2B:46:5A:5D:68
Authority key identifier: 21:B4:10:A1:74:40:FC:AB:1C:DC:90:AF:A6:FC:B7:24:C8:0C:82:A9
Certificate issuer: /CN=21b410a17440fcab1cdc90afa6fcb724c80c82a9
Certificate serial: 01851AACFFDDAD606542DC939D5A7ED0880B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.mft
Manifest number: 0BD8
Signing time: Fri 16 Dec 2022 11:23:43 +0000
Manifest this update: Fri 16 Dec 2022 11:23:43 +0000
Manifest next update: Sat 17 Dec 2022 11:23:43 +0000
Files and hashes: 1: C947akILMynVJudVF7A6dpPOYSQ.roa (hash: EVMINBT5P06MgeRAxWz7lPPG9TyStVcF/cpjjlQa8mM=)
2: IbQQoXRA_Ksc3JCvpvy3JMgMgqk.crl (hash: 1+zQgrB/EyrESN58dvhfS1tGOoZki1iiNJocPTP/3Vs=)
3: tnumXhyZkNDA0kF4gT4Y1lzlDk8.roa (hash: zZ7zjIU7udriBllpuNgkKhl/ppKW0Q9Mz4zrYyvl0ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:ac:ff:dd:ad:60:65:42:dc:93:9d:5a:7e:d0:88:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b410a17440fcab1cdc90afa6fcb724c80c82a9
Validity
Not Before: Dec 16 11:23:43 2022 GMT
Not After : Dec 17 11:23:43 2022 GMT
Subject: CN=64b3fd1bdff08264132efc8bae3aee2b465a5d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:24:e6:1b:5a:82:24:41:52:31:5f:94:8d:
3d:1e:09:23:24:bb:f4:5f:6f:75:3f:0b:af:6d:01:
03:e7:3d:b5:5c:c2:60:ff:81:54:3a:6f:0a:7d:03:
56:8d:f9:31:bd:0b:76:e1:7a:03:52:18:02:55:c5:
7d:eb:a4:29:47:45:4d:b2:27:3c:92:da:f0:90:8a:
9e:24:52:e8:2e:9d:3d:f2:14:2c:06:df:bd:4c:dd:
26:ca:e1:14:46:eb:53:5a:79:10:e3:1f:95:de:2d:
f8:b3:04:e8:ee:6a:5e:10:79:03:e2:0d:60:a6:6c:
bc:f2:99:b7:28:62:2e:16:6c:e0:01:7f:9f:0f:47:
2d:0d:5e:fb:d2:3d:e1:02:96:48:18:2d:83:e7:c1:
c6:e4:21:c0:55:19:78:2c:ae:56:dd:43:ef:27:bb:
b9:5e:e1:3f:78:8e:25:4d:9c:8e:05:14:02:61:5e:
79:3a:e0:a0:ed:ab:2f:4d:62:a8:1f:7c:6e:14:cd:
3a:c3:e5:19:0c:8c:90:ec:7c:24:1c:29:5a:b1:5f:
5a:45:91:11:29:01:9a:0c:cd:2c:ce:73:4c:c9:4c:
d0:26:58:d4:4a:a5:4b:8a:82:94:c0:63:81:80:7c:
d7:12:d4:47:cd:51:97:dc:cf:8d:4d:df:03:cb:57:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:FD:1B:DF:F0:82:64:13:2E:FC:8B:AE:3A:EE:2B:46:5A:5D:68
X509v3 Authority Key Identifier:
keyid:21:B4:10:A1:74:40:FC:AB:1C:DC:90:AF:A6:FC:B7:24:C8:0C:82:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ea2b76-b5b8-40ef-9500-496e256cc6b1/1/IbQQoXRA_Ksc3JCvpvy3JMgMgqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:b0:be:ac:9a:dc:ec:0f:d3:39:a5:a8:22:a0:12:ed:90:
08:93:fd:9e:9c:9a:6e:7b:64:34:82:b6:bf:aa:0e:97:0d:fd:
5b:1a:24:82:6e:45:8d:7e:0a:2c:80:39:ca:22:ba:55:a3:b9:
12:b7:d7:9e:43:be:32:8a:b6:ac:2c:f8:d9:16:a4:0e:5c:94:
1e:e1:bc:4f:96:30:4f:36:ad:49:66:4b:7e:0b:7b:06:50:f7:
59:4e:6f:03:e5:03:2b:71:fc:8d:c8:50:dc:0a:2f:05:72:0d:
33:b6:4d:df:f2:f0:30:23:67:51:a5:27:81:dd:9c:7e:85:d4:
e2:f4:e3:56:95:2c:79:5f:4f:0f:0c:4a:02:a1:5a:f1:37:ce:
5e:8f:dc:68:e6:fa:57:77:be:76:4f:51:2e:ec:ee:43:a4:79:
71:b0:89:9b:f2:36:5c:4e:79:81:4a:8b:62:59:48:b1:dc:a0:
bc:1d:de:97:e7:b8:8b:ba:53:2f:d3:df:c1:4d:fd:9c:f2:e0:
12:ca:15:3a:7d:13:a8:7d:66:a0:88:e0:9f:27:e0:fb:ff:f5:
56:36:52:f2:4a:85:c3:e4:c2:65:a9:02:07:8d:08:e9:84:c2:
05:3a:e0:77:38:de:7e:50:e9:56:a3:18:9d:3d:ca:9a:a0:ba:
55:59:27:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUarP/drWBlQtyTnVp+0IgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYjQxMGExNzQ0MGZjYWIxY2RjOTBhZmE2ZmNiNzI0Yzgw
YzgyYTkwHhcNMjIxMjE2MTEyMzQzWhcNMjIxMjE3MTEyMzQzWjAzMTEwLwYDVQQD
Eyg2NGIzZmQxYmRmZjA4MjY0MTMyZWZjOGJhZTNhZWUyYjQ2NWE1ZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW0k5htagiRBUjFflI09HgkjJLv0
X291PwuvbQED5z21XMJg/4FUOm8KfQNWjfkxvQt24XoDUhgCVcV966QpR0VNsic8
ktrwkIqeJFLoLp098hQsBt+9TN0myuEURutTWnkQ4x+V3i34swTo7mpeEHkD4g1g
pmy88pm3KGIuFmzgAX+fD0ctDV770j3hApZIGC2D58HG5CHAVRl4LK5W3UPvJ7u5
XuE/eI4lTZyOBRQCYV55OuCg7asvTWKoH3xuFM06w+UZDIyQ7HwkHClasV9aRZER
KQGaDM0sznNMyUzQJljUSqVLioKUwGOBgHzXEtRHzVGX3M+NTd8Dy1e0eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSz/Rvf8IJkEy78i6467itGWl1oMB8GA1UdIwQY
MBaAFCG0EKF0QPyrHNyQr6b8tyTIDIKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJRUW9YUkFfS3NjM0pDdnB2eTNKTWdNZ3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lYTJiNzYtYjViOC00MGVmLTk1MDAt
NDk2ZTI1NmNjNmIxLzEvSWJRUW9YUkFfS3NjM0pDdnB2eTNKTWdNZ3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lYTJiNzYtYjViOC00MGVmLTk1MDAtNDk2ZTI1NmNjNmIx
LzEvSWJRUW9YUkFfS3NjM0pDdnB2eTNKTWdNZ3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZawvqya
3OwP0zmlqCKgEu2QCJP9npyabntkNIK2v6oOlw39Wxokgm5FjX4KLIA5yiK6VaO5
ErfXnkO+Moq2rCz42RakDlyUHuG8T5YwTzatSWZLfgt7BlD3WU5vA+UDK3H8jchQ
3AovBXINM7ZN3/LwMCNnUaUngd2cfoXU4vTjVpUseV9PDwxKAqFa8TfOXo/caOb6
V3e+dk9RLuzuQ6R5cbCJm/I2XE55gUqLYllIsdygvB3el+e4i7pTL9PfwU39nPLg
EsoVOn0TqH1moIjgnyfg+//1VjZS8kqFw+TCZakCB40I6YTCBTrgdzjeflDpVqMY
nT3KmqC6VVknuw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:31 2024 by rpki-client on console-fra.rpki-client.org