Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/1GT8vn4ZPSchMHVmNPZHQwdIAVE.mft
File: 1GT8vn4ZPSchMHVmNPZHQwdIAVE.mft (raw, json)
Hash identifier: 8w7v1vTTPXKIpMmFH7R6DZe5bQ/FPFUWkd7id9Jgc+k=
Subject key identifier: 23:13:2F:27:DC:3E:77:F3:11:A6:26:B4:09:4D:69:FF:A0:DA:F8:5A
Authority key identifier: D4:64:FC:BE:7E:19:3D:27:21:30:75:66:34:F6:47:43:07:48:01:51
Certificate issuer: /CN=d464fcbe7e193d272130756634f6474307480151
Certificate serial: 018BB2ABBCB6CAB70566E344368CA299A41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GT8vn4ZPSchMHVmNPZHQwdIAVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/1GT8vn4ZPSchMHVmNPZHQwdIAVE.mft
Manifest number: 0A99
Signing time: Thu 09 Nov 2023 06:01:21 +0000
Manifest this update: Thu 09 Nov 2023 06:01:21 +0000
Manifest next update: Fri 10 Nov 2023 06:01:21 +0000
Files and hashes: 1: 1GT8vn4ZPSchMHVmNPZHQwdIAVE.crl (hash: UCDQJetjpJnqYaLIpZShjCFyKXHYBsktZVi5ssYxTsA=)
2: tdsX-nOdnQAbzakjCYE1wlhMQxg.roa (hash: iYsKWQu9okyHmF2cRynwpcBxo8d3TJxYGEX1l4vZTZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b2:ab:bc:b6:ca:b7:05:66:e3:44:36:8c:a2:99:a4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d464fcbe7e193d272130756634f6474307480151
Validity
Not Before: Nov 9 06:01:21 2023 GMT
Not After : Nov 10 06:01:21 2023 GMT
Subject: CN=23132f27dc3e77f311a626b4094d69ffa0daf85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:49:8f:ee:3a:98:30:c1:db:a4:db:63:6b:
f9:a2:58:6b:5b:0b:62:85:53:77:0b:d8:6c:b9:18:
b5:29:e2:45:21:00:ae:f4:44:6b:bb:8b:29:d6:8e:
2a:11:64:39:a6:af:6f:17:0d:ff:11:36:0c:74:2f:
3e:5a:23:76:1b:d9:e2:b2:3e:cc:48:80:79:87:27:
e6:7e:2b:51:d3:04:24:27:df:b6:08:38:98:0a:15:
1c:1d:ed:f8:e9:e1:39:fc:c4:02:8d:8e:71:48:02:
09:ce:35:5e:26:35:25:0d:d3:d6:80:12:11:00:16:
70:50:42:2a:ce:bc:19:c0:23:8a:bb:ff:8c:8c:f1:
47:9b:8f:e4:a0:2d:15:8b:d9:15:30:3c:d2:f5:de:
65:9c:a1:c5:b6:e1:43:f4:96:98:a4:7f:70:d5:5e:
fd:78:29:a6:08:6e:d2:de:3a:17:ad:bd:b0:20:c4:
c7:26:86:8f:56:0a:0f:89:7e:2c:59:24:10:12:c7:
c7:62:15:17:b7:cd:ed:db:89:2a:99:fd:6c:1b:f7:
a7:ee:ed:e8:22:9f:40:d4:d1:5e:69:3a:dd:c1:06:
96:62:2f:de:41:71:6c:71:68:2a:47:a6:d3:eb:30:
0e:1b:93:48:ce:25:5c:b0:9d:10:f2:e9:a0:59:05:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:13:2F:27:DC:3E:77:F3:11:A6:26:B4:09:4D:69:FF:A0:DA:F8:5A
X509v3 Authority Key Identifier:
keyid:D4:64:FC:BE:7E:19:3D:27:21:30:75:66:34:F6:47:43:07:48:01:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GT8vn4ZPSchMHVmNPZHQwdIAVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/1GT8vn4ZPSchMHVmNPZHQwdIAVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fb012b-a231-4475-bf64-fe1d605f2f05/1/1GT8vn4ZPSchMHVmNPZHQwdIAVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:29:1b:44:e7:a0:f7:ce:e1:b1:87:0c:46:9d:8d:42:33:b9:
8d:f3:df:4c:31:0e:12:09:8e:bb:f6:1f:f9:c3:48:1a:89:45:
31:c4:63:e9:55:e7:54:bf:71:5b:0b:1f:02:84:67:b7:86:59:
e0:a9:ab:ed:47:6c:94:6f:21:77:e6:b3:5a:2e:17:0f:94:8e:
1e:9b:8b:49:cd:90:02:66:c8:6c:4a:3d:e3:42:e4:44:70:fd:
ee:e1:9e:b9:6c:69:67:e0:52:e9:9a:bd:4a:58:cc:45:52:e6:
f7:27:93:a7:b7:9b:26:60:e8:72:d9:b0:9c:2d:f7:63:31:ab:
20:b8:6a:3c:9d:a2:e3:20:ee:d7:45:44:ac:9d:97:72:c4:8d:
a4:e4:b4:da:16:a6:ad:02:32:c5:07:15:80:82:d1:86:82:06:
0c:83:c5:e6:31:7d:25:b0:cd:03:7b:af:97:aa:7c:a0:86:b5:
a8:61:4d:2f:49:d6:a1:b4:d2:1f:21:5a:28:cf:6f:51:53:99:
9b:cf:a8:71:be:cc:5c:d5:3b:76:61:02:53:67:12:c5:c3:b5:
f1:fc:46:fe:6f:5c:b8:c4:b5:47:ee:65:2f:04:3f:02:be:63:
fa:5d:3a:fa:6c:1a:cd:89:96:23:c7:2c:f2:7a:db:62:d4:85:
f9:15:4f:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuyq7y2yrcFZuNENoyimaQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjRmY2JlN2UxOTNkMjcyMTMwNzU2NjM0ZjY0NzQzMDc0
ODAxNTEwHhcNMjMxMTA5MDYwMTIxWhcNMjMxMTEwMDYwMTIxWjAzMTEwLwYDVQQD
EygyMzEzMmYyN2RjM2U3N2YzMTFhNjI2YjQwOTRkNjlmZmEwZGFmODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQVJj+46mDDB26TbY2v5olhrWwti
hVN3C9hsuRi1KeJFIQCu9ERru4sp1o4qEWQ5pq9vFw3/ETYMdC8+WiN2G9nisj7M
SIB5hyfmfitR0wQkJ9+2CDiYChUcHe346eE5/MQCjY5xSAIJzjVeJjUlDdPWgBIR
ABZwUEIqzrwZwCOKu/+MjPFHm4/koC0Vi9kVMDzS9d5lnKHFtuFD9JaYpH9w1V79
eCmmCG7S3joXrb2wIMTHJoaPVgoPiX4sWSQQEsfHYhUXt83t24kqmf1sG/en7u3o
Ip9A1NFeaTrdwQaWYi/eQXFscWgqR6bT6zAOG5NIziVcsJ0Q8umgWQUiewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMTLyfcPnfzEaYmtAlNaf+g2vhaMB8GA1UdIwQY
MBaAFNRk/L5+GT0nITB1ZjT2R0MHSAFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdUOHZuNFpQU2NoTUhWbU5QWkhRd2RJQVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYjAxMmItYTIzMS00NDc1LWJmNjQt
ZmUxZDYwNWYyZjA1LzEvMUdUOHZuNFpQU2NoTUhWbU5QWkhRd2RJQVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYjAxMmItYTIzMS00NDc1LWJmNjQtZmUxZDYwNWYyZjA1
LzEvMUdUOHZuNFpQU2NoTUhWbU5QWkhRd2RJQVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSkbROeg
987hsYcMRp2NQjO5jfPfTDEOEgmOu/Yf+cNIGolFMcRj6VXnVL9xWwsfAoRnt4ZZ
4Kmr7UdslG8hd+azWi4XD5SOHpuLSc2QAmbIbEo940LkRHD97uGeuWxpZ+BS6Zq9
SljMRVLm9yeTp7ebJmDoctmwnC33YzGrILhqPJ2i4yDu10VErJ2XcsSNpOS02ham
rQIyxQcVgILRhoIGDIPF5jF9JbDNA3uvl6p8oIa1qGFNL0nWobTSHyFaKM9vUVOZ
m8+ocb7MXNU7dmECU2cSxcO18fxG/m9cuMS1R+5lLwQ/Ar5j+l06+mwazYmWI8cs
8nrbYtSF+RVPog==
-----END CERTIFICATE-----
Generated at Thu Nov 9 15:48:25 2023 by rpki-client on console-ams.rpki-client.org