Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1cab3a-6a25-4638-8826-77241b549a84/1/d4hiix6Rq_oJQS-USs-DV966sk4.mft
File: d4hiix6Rq_oJQS-USs-DV966sk4.mft (raw, json)
Hash identifier: ydeEmBb4gCzwGv0xmmptSBEzO75d875G2mv5WdwFsUc=
Subject key identifier: A7:01:14:65:1F:19:54:51:FB:C1:A8:8C:2C:C6:94:4B:3C:19:78:E8
Authority key identifier: 77:88:62:8B:1E:91:AB:FA:09:41:2F:94:4A:CF:83:57:DE:BA:B2:4E
Certificate issuer: /CN=7788628b1e91abfa09412f944acf8357debab24e
Certificate serial: 0193F4E4E4513CE90DBA6B38565F3F375A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4hiix6Rq_oJQS-USs-DV966sk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1cab3a-6a25-4638-8826-77241b549a84/1/d4hiix6Rq_oJQS-USs-DV966sk4.mft
Manifest number: 012E
Signing time: Mon 23 Dec 2024 19:01:01 +0000
Manifest this update: Mon 23 Dec 2024 19:01:01 +0000
Manifest next update: Tue 24 Dec 2024 19:01:01 +0000
Files and hashes: 1: MkHe-N7T6hf_ocfPc1Og33lWi9g.roa (hash: KCBmQuLn/Sy+uoZAk8/Kzm0vuVtyT7fZmah4RQgwCvg=)
2: d4hiix6Rq_oJQS-USs-DV966sk4.crl (hash: 7/mPZG436E3hEhX2fSTn1bspZsXD7SR+swK6SGSOJks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:e4:e4:51:3c:e9:0d:ba:6b:38:56:5f:3f:37:5a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7788628b1e91abfa09412f944acf8357debab24e
Validity
Not Before: Dec 23 19:01:01 2024 GMT
Not After : Dec 24 19:01:01 2024 GMT
Subject: CN=a70114651f195451fbc1a88c2cc6944b3c1978e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:2b:6f:1e:b0:c4:ac:2e:bc:7b:62:24:d1:
18:e0:d2:d8:ca:d7:e1:73:22:c7:47:c8:cd:97:0d:
7e:f9:f2:3a:4d:94:8d:45:db:02:f0:e2:0b:95:da:
32:46:d9:4d:3a:66:c8:3a:f6:a9:cb:7c:f4:9d:ea:
b2:6a:d5:f8:22:63:35:4d:4f:8c:4c:c2:a7:f6:87:
4c:23:cd:07:9c:0e:6f:85:71:a3:b2:e5:12:94:88:
8d:93:ea:a6:92:55:e4:b9:32:3e:d8:9d:64:07:1c:
00:3e:e2:20:65:20:02:29:7c:be:0e:6b:3b:a8:00:
8a:36:76:1d:55:68:5a:c3:00:d6:9a:42:9d:4c:bc:
e1:f8:90:09:74:2f:f0:91:de:04:ee:58:a4:aa:c6:
4d:b6:88:d3:ba:9d:6f:ae:14:ca:00:f3:3a:43:ce:
e2:ab:02:a6:eb:fe:8c:34:74:e7:e8:32:fc:ca:1b:
19:61:5c:42:dd:56:46:86:6f:e0:ae:93:e1:c8:1c:
88:80:63:73:22:64:0c:06:74:46:48:bc:94:a7:1f:
8f:72:cb:63:5e:4f:f5:af:7e:18:e5:15:34:a0:db:
31:85:f2:34:cf:7e:b0:45:29:b9:c2:2b:bf:57:05:
c9:5c:9a:d6:f8:13:bf:70:ce:3a:7c:33:85:45:a7:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:14:65:1F:19:54:51:FB:C1:A8:8C:2C:C6:94:4B:3C:19:78:E8
X509v3 Authority Key Identifier:
keyid:77:88:62:8B:1E:91:AB:FA:09:41:2F:94:4A:CF:83:57:DE:BA:B2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4hiix6Rq_oJQS-USs-DV966sk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1cab3a-6a25-4638-8826-77241b549a84/1/d4hiix6Rq_oJQS-USs-DV966sk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1cab3a-6a25-4638-8826-77241b549a84/1/d4hiix6Rq_oJQS-USs-DV966sk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:15:6a:32:6b:5e:04:0d:57:16:cc:69:46:e1:a2:88:c1:61:
81:09:66:33:60:54:0e:0f:8c:53:30:db:ee:42:f6:80:68:2e:
d3:a1:80:bb:6b:07:2e:41:be:7a:4a:d0:17:6a:20:7c:99:2c:
0e:ea:b5:68:3b:15:22:ea:97:67:ff:ff:a3:6b:e6:89:47:a0:
eb:b4:7f:f3:a2:51:bd:fb:41:3c:4c:9b:9c:e0:0f:47:fc:45:
4f:0b:f5:22:4f:19:b1:c3:cf:7f:84:cc:65:88:7f:a9:50:05:
4c:90:70:9f:5a:c0:55:e6:59:12:27:19:fd:ea:e8:56:c7:04:
46:ef:e1:aa:2b:01:47:67:04:1b:60:e0:49:8a:76:9a:a0:92:
1d:10:ce:2c:33:af:c0:83:ec:19:62:ac:02:3b:3e:c4:6e:8e:
88:cd:c8:47:98:dd:d0:e5:60:96:db:3e:3f:dd:a3:22:6f:42:
db:67:ce:37:cb:02:0c:06:96:87:0e:ca:a6:93:c2:53:bf:36:
e6:54:fa:67:95:eb:a0:5f:06:46:e2:3e:71:15:29:eb:ab:55:
9f:54:22:d8:a8:18:bc:d6:aa:ba:29:5a:f5:c1:cf:a7:05:71:
c3:f5:d7:35:82:a0:87:78:38:32:76:57:fa:4d:74:b1:e3:81:
9d:43:02:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZP05ORRPOkNums4Vl8/N1oVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODg2MjhiMWU5MWFiZmEwOTQxMmY5NDRhY2Y4MzU3ZGVi
YWIyNGUwHhcNMjQxMjIzMTkwMTAxWhcNMjQxMjI0MTkwMTAxWjAzMTEwLwYDVQQD
EyhhNzAxMTQ2NTFmMTk1NDUxZmJjMWE4OGMyY2M2OTQ0YjNjMTk3OGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM4rbx6wxKwuvHtiJNEY4NLYytfh
cyLHR8jNlw1++fI6TZSNRdsC8OILldoyRtlNOmbIOvapy3z0neqyatX4ImM1TU+M
TMKn9odMI80HnA5vhXGjsuUSlIiNk+qmklXkuTI+2J1kBxwAPuIgZSACKXy+Dms7
qACKNnYdVWhawwDWmkKdTLzh+JAJdC/wkd4E7likqsZNtojTup1vrhTKAPM6Q87i
qwKm6/6MNHTn6DL8yhsZYVxC3VZGhm/grpPhyByIgGNzImQMBnRGSLyUpx+Pcstj
Xk/1r34Y5RU0oNsxhfI0z36wRSm5wiu/VwXJXJrW+BO/cM46fDOFRaedHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcBFGUfGVRR+8GojCzGlEs8GXjoMB8GA1UdIwQY
MBaAFHeIYosekav6CUEvlErPg1feurJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRoaWl4NlJxX29KUVMtVVNzLURWOTY2c2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xY2FiM2EtNmEyNS00NjM4LTg4MjYt
NzcyNDFiNTQ5YTg0LzEvZDRoaWl4NlJxX29KUVMtVVNzLURWOTY2c2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xY2FiM2EtNmEyNS00NjM4LTg4MjYtNzcyNDFiNTQ5YTg0
LzEvZDRoaWl4NlJxX29KUVMtVVNzLURWOTY2c2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRVqMmte
BA1XFsxpRuGiiMFhgQlmM2BUDg+MUzDb7kL2gGgu06GAu2sHLkG+ekrQF2ogfJks
Duq1aDsVIuqXZ///o2vmiUeg67R/86JRvftBPEybnOAPR/xFTwv1Ik8ZscPPf4TM
ZYh/qVAFTJBwn1rAVeZZEicZ/eroVscERu/hqisBR2cEG2DgSYp2mqCSHRDOLDOv
wIPsGWKsAjs+xG6OiM3IR5jd0OVglts+P92jIm9C22fON8sCDAaWhw7KppPCU782
5lT6Z5XroF8GRuI+cRUp66tVn1Qi2KgYvNaquila9cHPpwVxw/XXNYKgh3g4MnZX
+k10seOBnUMCqg==
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:15:12 2025 by rpki-client