Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/acfcd6-68e7-4106-a7cb-45a90978449a/1/SU9gv8bAKknhgWH8jMSPYng8JNk.mft
File: SU9gv8bAKknhgWH8jMSPYng8JNk.mft (raw, json)
Hash identifier: UQEhYm+eK3tRNHz57K4Fwgwo7pMxBq8iXsEKsZJassc=
Subject key identifier: 31:35:5E:80:63:AA:B4:90:70:BB:43:AF:44:15:C4:AA:BC:8B:27:AE
Authority key identifier: 49:4F:60:BF:C6:C0:2A:49:E1:81:61:FC:8C:C4:8F:62:78:3C:24:D9
Certificate issuer: /CN=494f60bfc6c02a49e18161fc8cc48f62783c24d9
Certificate serial: 018B2167C6DD06A52C8E812ED9B213906141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU9gv8bAKknhgWH8jMSPYng8JNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/acfcd6-68e7-4106-a7cb-45a90978449a/1/SU9gv8bAKknhgWH8jMSPYng8JNk.mft
Manifest number: 088F
Signing time: Thu 12 Oct 2023 01:02:11 +0000
Manifest this update: Thu 12 Oct 2023 01:02:11 +0000
Manifest next update: Fri 13 Oct 2023 01:02:11 +0000
Files and hashes: 1: 0-a0vl4QMEaW8XU3CalTAV9CxsQ.roa (hash: jVrW40breor81XDyyxPWxAyiZ9bXxrs4mDAZFi7hXdg=)
2: SU9gv8bAKknhgWH8jMSPYng8JNk.crl (hash: wZG25ffdnCxzUrtbmD4qwE51B1qlDOCMTSzZxT/B5AU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:67:c6:dd:06:a5:2c:8e:81:2e:d9:b2:13:90:61:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494f60bfc6c02a49e18161fc8cc48f62783c24d9
Validity
Not Before: Oct 12 01:02:11 2023 GMT
Not After : Oct 13 01:02:11 2023 GMT
Subject: CN=31355e8063aab49070bb43af4415c4aabc8b27ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:db:de:95:29:93:07:57:f5:a8:d5:48:89:
49:b1:59:c9:e4:e3:05:f9:9f:0f:20:04:87:8f:51:
ee:e1:22:73:93:58:b1:b0:32:83:65:28:9c:41:ef:
5f:18:7b:a0:8e:16:24:13:87:5c:f2:0b:1a:2c:21:
45:07:94:df:ed:74:3c:c2:3d:d9:6a:4c:ea:8b:fc:
6f:3f:ea:f4:16:54:58:a9:63:b6:04:b4:0e:28:ae:
45:65:00:41:bc:7a:b6:dd:fa:44:f4:f3:6b:52:10:
fe:ba:1c:0a:76:0e:6d:55:d0:2d:53:e9:b8:a6:b7:
60:9f:0c:6a:40:eb:d7:29:08:94:43:08:04:71:43:
72:44:52:b0:a0:6e:36:ca:c1:c6:9d:00:b5:2c:e9:
81:2b:fc:15:00:98:5b:25:6d:35:6c:f2:b8:e2:8d:
cb:62:69:bc:59:8a:c4:81:b4:de:88:f0:a8:6e:ca:
11:fe:6e:21:f2:b9:68:fe:e2:a2:5a:a7:95:de:7b:
55:f6:ee:fa:11:2e:d0:45:b5:b8:d0:be:ed:33:de:
e8:81:43:15:47:2e:10:5c:bc:4a:c9:70:8b:57:ab:
3b:57:8a:5e:e1:a0:6e:f1:8b:62:f4:87:41:89:ee:
db:c6:c9:de:54:b1:13:06:b8:72:57:e7:af:a9:b2:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:5E:80:63:AA:B4:90:70:BB:43:AF:44:15:C4:AA:BC:8B:27:AE
X509v3 Authority Key Identifier:
keyid:49:4F:60:BF:C6:C0:2A:49:E1:81:61:FC:8C:C4:8F:62:78:3C:24:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU9gv8bAKknhgWH8jMSPYng8JNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/acfcd6-68e7-4106-a7cb-45a90978449a/1/SU9gv8bAKknhgWH8jMSPYng8JNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/acfcd6-68e7-4106-a7cb-45a90978449a/1/SU9gv8bAKknhgWH8jMSPYng8JNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:56:90:a2:0c:74:5f:a2:5c:f3:fc:12:b8:57:6f:6e:c2:81:
f1:1b:1d:2a:ce:c5:61:13:7f:e4:c5:9e:d3:af:75:34:69:21:
51:44:15:01:2c:31:bc:69:9d:bd:2e:7a:7a:2a:58:c3:17:d4:
88:74:96:c4:7d:4e:9d:50:ec:f5:35:dd:fb:f7:45:91:93:ea:
03:f5:83:b7:1d:a5:15:83:9e:5c:e1:35:39:b0:48:5c:39:da:
18:ab:54:5a:59:d2:b9:f4:03:2c:c8:45:ff:e2:de:02:67:dc:
07:c1:d9:53:d9:55:db:ab:d7:db:f8:4a:06:6b:e8:2b:97:56:
0f:d6:36:fe:91:a0:1a:b5:20:83:e9:73:1f:f1:88:0e:37:c1:
ac:32:ca:b6:11:e5:89:be:02:73:31:59:ab:6a:25:9b:0d:5e:
fe:ef:35:6a:8e:01:37:e7:b6:d4:40:f4:ae:5e:ae:54:fb:6b:
00:42:3a:5f:c8:e7:63:90:55:94:5a:f5:be:d3:1a:92:74:44:
14:a9:31:4f:be:d3:01:6b:dd:eb:c9:47:e3:54:de:1f:e0:e6:
43:2c:79:40:aa:b5:03:46:3d:9e:21:5f:02:83:c9:dd:3d:45:
5d:ba:13:be:66:43:d1:25:32:c8:10:5d:6e:68:86:94:85:60:
e9:36:c3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYshZ8bdBqUsjoEu2bITkGFBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGY2MGJmYzZjMDJhNDllMTgxNjFmYzhjYzQ4ZjYyNzgz
YzI0ZDkwHhcNMjMxMDEyMDEwMjExWhcNMjMxMDEzMDEwMjExWjAzMTEwLwYDVQQD
EygzMTM1NWU4MDYzYWFiNDkwNzBiYjQzYWY0NDE1YzRhYWJjOGIyN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNDb3pUpkwdX9ajVSIlJsVnJ5OMF
+Z8PIASHj1Hu4SJzk1ixsDKDZSicQe9fGHugjhYkE4dc8gsaLCFFB5Tf7XQ8wj3Z
akzqi/xvP+r0FlRYqWO2BLQOKK5FZQBBvHq23fpE9PNrUhD+uhwKdg5tVdAtU+m4
prdgnwxqQOvXKQiUQwgEcUNyRFKwoG42ysHGnQC1LOmBK/wVAJhbJW01bPK44o3L
Ymm8WYrEgbTeiPCobsoR/m4h8rlo/uKiWqeV3ntV9u76ES7QRbW40L7tM97ogUMV
Ry4QXLxKyXCLV6s7V4pe4aBu8Yti9IdBie7bxsneVLETBrhyV+evqbIxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE1XoBjqrSQcLtDr0QVxKq8iyeuMB8GA1UdIwQY
MBaAFElPYL/GwCpJ4YFh/IzEj2J4PCTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1U5Z3Y4YkFLa25oZ1dIOGpNU1BZbmc4Sk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hY2ZjZDYtNjhlNy00MTA2LWE3Y2It
NDVhOTA5Nzg0NDlhLzEvU1U5Z3Y4YkFLa25oZ1dIOGpNU1BZbmc4Sk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hY2ZjZDYtNjhlNy00MTA2LWE3Y2ItNDVhOTA5Nzg0NDlh
LzEvU1U5Z3Y4YkFLa25oZ1dIOGpNU1BZbmc4Sk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1aQogx0
X6Jc8/wSuFdvbsKB8RsdKs7FYRN/5MWe0691NGkhUUQVASwxvGmdvS56eipYwxfU
iHSWxH1OnVDs9TXd+/dFkZPqA/WDtx2lFYOeXOE1ObBIXDnaGKtUWlnSufQDLMhF
/+LeAmfcB8HZU9lV26vX2/hKBmvoK5dWD9Y2/pGgGrUgg+lzH/GIDjfBrDLKthHl
ib4CczFZq2olmw1e/u81ao4BN+e21ED0rl6uVPtrAEI6X8jnY5BVlFr1vtMaknRE
FKkxT77TAWvd68lH41TeH+DmQyx5QKq1A0Y9niFfAoPJ3T1FXboTvmZD0SUyyBBd
bmiGlIVg6TbDcg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:12 2024 by rpki-client on console-ams.rpki-client.org