Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7129e9-12ec-4a76-aa5c-a63ab541effd/1/dz3QNO_lbRI_0h6wQTNQzof28bw.mft
File: dz3QNO_lbRI_0h6wQTNQzof28bw.mft (raw, json)
Hash identifier: 4koPy/Gfer90W0cWckItao0X5slQpKHzQBf69F7yPmI=
Subject key identifier: 48:D5:FD:1B:96:F2:02:B7:22:37:01:2B:7F:52:73:21:A6:1C:AD:41
Authority key identifier: 77:3D:D0:34:EF:E5:6D:12:3F:D2:1E:B0:41:33:50:CE:87:F6:F1:BC
Certificate issuer: /CN=773dd034efe56d123fd21eb0413350ce87f6f1bc
Certificate serial: 0192AD731C052B091664DE0E651E679B6288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz3QNO_lbRI_0h6wQTNQzof28bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7129e9-12ec-4a76-aa5c-a63ab541effd/1/dz3QNO_lbRI_0h6wQTNQzof28bw.mft
Manifest number: 0B47
Signing time: Mon 21 Oct 2024 05:00:55 +0000
Manifest this update: Mon 21 Oct 2024 05:00:55 +0000
Manifest next update: Tue 22 Oct 2024 05:00:55 +0000
Files and hashes: 1: dz3QNO_lbRI_0h6wQTNQzof28bw.crl (hash: H5gWRcOVZL5VMpOqSxx7O/eC5S5ekOBRRDWhiRiOhxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:73:1c:05:2b:09:16:64:de:0e:65:1e:67:9b:62:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773dd034efe56d123fd21eb0413350ce87f6f1bc
Validity
Not Before: Oct 21 05:00:55 2024 GMT
Not After : Oct 22 05:00:55 2024 GMT
Subject: CN=48d5fd1b96f202b72237012b7f527321a61cad41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:b8:41:43:63:e7:40:4b:9f:84:d2:21:6f:
00:fc:36:66:1f:df:98:5c:23:b7:e5:5b:91:af:d4:
71:42:61:98:04:45:a0:33:bd:8e:9d:e9:5b:2d:a9:
6d:21:8c:a7:55:67:bb:96:00:9f:f5:73:44:af:b6:
c8:1c:04:0a:4b:7e:c3:a5:04:8f:28:cc:8f:b5:c0:
8e:51:6d:69:3a:44:0b:51:83:84:7f:6c:0c:8e:8e:
fa:b2:00:32:56:91:48:dc:f7:01:e3:06:8a:56:36:
49:1e:c9:2b:f7:d0:da:9a:a5:cb:51:9e:8c:9a:06:
d3:5e:17:af:33:c5:cf:15:46:c2:67:4a:b6:a7:67:
61:c9:da:91:de:29:30:86:e3:1d:2d:52:14:da:bf:
ab:42:43:18:f5:bb:50:03:73:ce:fa:c8:28:a1:da:
13:aa:b4:90:d2:91:18:9d:d7:db:fe:21:30:04:cb:
6b:d6:33:a1:3a:84:da:94:91:f8:fc:bc:cc:84:78:
a9:d8:e6:3d:b3:9e:14:9f:72:f0:c0:70:1d:cd:68:
34:a2:21:4c:e5:7d:3a:13:8c:73:1b:d0:5d:b0:64:
e9:80:2c:13:a1:d7:1a:b4:08:24:a6:6f:6b:e9:43:
aa:a1:1c:2d:94:b4:3e:ce:9f:e2:74:de:9c:b8:ad:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:FD:1B:96:F2:02:B7:22:37:01:2B:7F:52:73:21:A6:1C:AD:41
X509v3 Authority Key Identifier:
keyid:77:3D:D0:34:EF:E5:6D:12:3F:D2:1E:B0:41:33:50:CE:87:F6:F1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz3QNO_lbRI_0h6wQTNQzof28bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7129e9-12ec-4a76-aa5c-a63ab541effd/1/dz3QNO_lbRI_0h6wQTNQzof28bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7129e9-12ec-4a76-aa5c-a63ab541effd/1/dz3QNO_lbRI_0h6wQTNQzof28bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fd:5b:9b:3a:1b:b2:38:a2:8c:dd:a5:f6:32:70:b3:16:f5:
db:44:b5:ca:8b:41:e0:20:78:49:af:f2:49:49:03:26:60:16:
dd:ac:75:90:26:c6:b4:02:63:55:41:1f:c7:8c:50:af:bb:be:
cd:9c:d3:d1:de:bc:ee:ef:7c:e9:e9:de:81:97:65:66:d1:66:
f5:d6:c8:eb:ed:e1:db:4f:44:57:d4:ee:00:03:90:78:9f:31:
39:a1:92:28:34:4d:94:cc:ff:dc:ec:b0:06:f3:ec:2e:be:34:
e3:4d:c7:1e:9a:0b:db:18:27:39:aa:ae:d0:70:ba:12:81:08:
1d:4f:19:c7:ce:c3:f6:9e:34:d6:19:8f:72:13:87:cd:75:c1:
d9:f3:3d:5a:0e:07:96:cd:ea:f0:b2:9f:71:9e:3b:71:4f:01:
55:1f:ae:9d:f4:71:94:35:65:54:0a:a1:bd:00:a1:9a:4d:a8:
1e:53:cc:45:cb:ac:17:cb:98:a2:63:22:10:2b:ca:cd:f9:e2:
9a:e2:54:25:a3:31:9b:01:65:b0:97:12:86:4e:6b:28:d0:eb:
38:2d:53:ad:90:49:c0:29:ce:d7:dd:4f:52:bc:d3:46:ac:ef:
91:81:8c:06:e4:0a:d1:12:b7:e2:8f:2a:2c:ce:dc:71:7f:6d:
ae:7f:a7:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKtcxwFKwkWZN4OZR5nm2KIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2RkMDM0ZWZlNTZkMTIzZmQyMWViMDQxMzM1MGNlODdm
NmYxYmMwHhcNMjQxMDIxMDUwMDU1WhcNMjQxMDIyMDUwMDU1WjAzMTEwLwYDVQQD
Eyg0OGQ1ZmQxYjk2ZjIwMmI3MjIzNzAxMmI3ZjUyNzMyMWE2MWNhZDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3i4QUNj50BLn4TSIW8A/DZmH9+Y
XCO35VuRr9RxQmGYBEWgM72OnelbLaltIYynVWe7lgCf9XNEr7bIHAQKS37DpQSP
KMyPtcCOUW1pOkQLUYOEf2wMjo76sgAyVpFI3PcB4waKVjZJHskr99DamqXLUZ6M
mgbTXhevM8XPFUbCZ0q2p2dhydqR3ikwhuMdLVIU2r+rQkMY9btQA3PO+sgoodoT
qrSQ0pEYndfb/iEwBMtr1jOhOoTalJH4/LzMhHip2OY9s54Un3LwwHAdzWg0oiFM
5X06E4xzG9BdsGTpgCwTodcatAgkpm9r6UOqoRwtlLQ+zp/idN6cuK0rCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjV/RuW8gK3IjcBK39ScyGmHK1BMB8GA1UdIwQY
MBaAFHc90DTv5W0SP9IesEEzUM6H9vG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHozUU5PX2xiUklfMGg2d1FUTlF6b2YyOGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83MTI5ZTktMTJlYy00YTc2LWFhNWMt
YTYzYWI1NDFlZmZkLzEvZHozUU5PX2xiUklfMGg2d1FUTlF6b2YyOGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83MTI5ZTktMTJlYy00YTc2LWFhNWMtYTYzYWI1NDFlZmZk
LzEvZHozUU5PX2xiUklfMGg2d1FUTlF6b2YyOGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfv1bmzob
sjiijN2l9jJwsxb120S1yotB4CB4Sa/ySUkDJmAW3ax1kCbGtAJjVUEfx4xQr7u+
zZzT0d687u986enegZdlZtFm9dbI6+3h209EV9TuAAOQeJ8xOaGSKDRNlMz/3Oyw
BvPsLr40403HHpoL2xgnOaqu0HC6EoEIHU8Zx87D9p401hmPchOHzXXB2fM9Wg4H
ls3q8LKfcZ47cU8BVR+unfRxlDVlVAqhvQChmk2oHlPMRcusF8uYomMiECvKzfni
muJUJaMxmwFlsJcShk5rKNDrOC1TrZBJwCnO191PUrzTRqzvkYGMBuQK0RK34o8q
LM7ccX9trn+nXg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:19 2025 by rpki-client