Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.mft
File: x__X67-pgIMwfGP3F6OrpxB2lqI.mft (raw, json)
Hash identifier: 745iBd+cxZaICda+xT997BhMNvxcEN/6VQ3CGzT0GTM=
Subject key identifier: 3C:08:89:50:24:22:E0:DB:1E:6E:7B:5C:65:9A:0E:6F:20:7B:46:B1
Authority key identifier: C7:FF:D7:EB:BF:A9:80:83:30:7C:63:F7:17:A3:AB:A7:10:76:96:A2
Certificate issuer: /CN=c7ffd7ebbfa98083307c63f717a3aba7107696a2
Certificate serial: 01932F0DACEE2FBBFA112EDD0CAE083D8EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x__X67-pgIMwfGP3F6OrpxB2lqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.mft
Manifest number: 135B
Signing time: Fri 15 Nov 2024 09:00:45 +0000
Manifest this update: Fri 15 Nov 2024 09:00:45 +0000
Manifest next update: Sat 16 Nov 2024 09:00:45 +0000
Files and hashes: 1: VPYISqkvbuEfYw02Pnqg3-ww-pk.roa (hash: iRni9sVy/+az0mnpstP7gsCG+sJ55t8nv+DUS6VcBDo=)
2: x__X67-pgIMwfGP3F6OrpxB2lqI.crl (hash: GxunreGqo3Elt3ff+JgHcMFgHtsYp7qfD2Ulm7pRkgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:0d:ac:ee:2f:bb:fa:11:2e:dd:0c:ae:08:3d:8e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ffd7ebbfa98083307c63f717a3aba7107696a2
Validity
Not Before: Nov 15 09:00:45 2024 GMT
Not After : Nov 16 09:00:45 2024 GMT
Subject: CN=3c0889502422e0db1e6e7b5c659a0e6f207b46b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:34:09:a2:af:22:6c:0c:5d:b1:e1:75:1a:
ed:bf:d4:0d:e5:ae:b9:8d:bb:a4:33:5e:cc:17:24:
6a:3c:d9:05:ea:b1:bc:d6:5e:21:94:24:37:0d:a3:
31:e1:c0:40:b3:34:80:6c:66:52:65:59:39:d4:92:
e9:3b:56:0d:9e:e5:53:7a:39:e4:e0:2a:35:c0:bf:
46:01:2d:8a:0b:db:ff:02:f2:e8:4e:33:b2:fd:4f:
41:79:21:4d:ec:d7:5a:24:3f:c6:f4:38:1b:d5:8c:
d0:ee:73:19:0f:91:66:77:0d:4e:d9:7e:80:57:ae:
7a:a4:b6:c9:31:0c:83:a2:e8:81:53:9d:46:bb:79:
61:86:d1:8d:c0:2e:b5:f2:46:3e:f7:0c:98:d9:54:
64:11:b7:3f:07:a0:c1:93:19:90:f2:ad:bd:75:c4:
0f:c8:a1:00:f0:c1:af:00:17:53:24:72:a0:6b:65:
74:1c:07:b2:c3:5e:99:d1:cd:bf:60:53:d9:ab:20:
74:ab:52:99:e4:04:da:d5:04:fa:f3:f6:d2:5e:e2:
1e:c7:80:f7:4c:78:85:83:96:b2:30:e7:16:59:b4:
95:b5:d1:77:e8:da:d0:ce:8d:ec:a4:fe:f6:69:59:
9a:57:34:f2:3b:3d:ff:ce:f9:3f:e8:65:58:7d:d0:
34:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:08:89:50:24:22:E0:DB:1E:6E:7B:5C:65:9A:0E:6F:20:7B:46:B1
X509v3 Authority Key Identifier:
keyid:C7:FF:D7:EB:BF:A9:80:83:30:7C:63:F7:17:A3:AB:A7:10:76:96:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x__X67-pgIMwfGP3F6OrpxB2lqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d52020-ac08-4dc0-925d-65ab40855de2/1/x__X67-pgIMwfGP3F6OrpxB2lqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a3:64:35:5c:2a:47:c0:0c:10:ac:93:99:b7:87:3f:68:9c:
73:55:93:bb:4a:c9:a0:63:6f:b1:10:42:e5:16:74:b1:8b:fe:
d0:ff:b7:78:1b:ae:05:3a:aa:1b:93:cf:d9:2b:93:2e:e1:17:
e4:49:20:a9:8e:80:da:8b:ac:84:13:13:1a:99:e2:c6:00:c2:
2a:d6:0c:b5:9f:2b:77:9c:16:17:2f:5a:03:6e:3f:0e:07:ff:
28:b9:e8:01:e7:20:91:1f:f6:d6:16:db:df:67:ad:47:5d:c3:
8e:ae:73:47:b3:cc:30:24:9c:1b:b2:e7:89:a3:e7:f8:b5:5d:
3f:c7:c7:3a:a6:51:5e:0e:53:80:2a:77:d2:48:23:cd:b4:91:
29:d0:54:9b:03:aa:7b:a6:9e:ef:45:fc:4a:8f:f8:b9:88:2d:
3f:cb:75:d6:18:5e:22:80:20:91:96:6e:83:5c:f9:8d:fd:d1:
12:ed:e0:e6:35:36:5a:e6:04:07:70:82:fd:cf:f4:db:c2:eb:
4e:e2:80:e8:f3:22:1c:21:6b:30:51:91:17:f6:40:10:1f:8b:
50:4c:9f:ba:0f:5a:be:d6:15:85:98:41:3c:46:1b:f9:88:d2:
d0:5a:0d:c4:88:02:d2:46:ef:c5:74:ea:77:1f:9f:17:c2:c0:
d7:3f:41:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMvDazuL7v6ES7dDK4IPY7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZmZkN2ViYmZhOTgwODMzMDdjNjNmNzE3YTNhYmE3MTA3
Njk2YTIwHhcNMjQxMTE1MDkwMDQ1WhcNMjQxMTE2MDkwMDQ1WjAzMTEwLwYDVQQD
EygzYzA4ODk1MDI0MjJlMGRiMWU2ZTdiNWM2NTlhMGU2ZjIwN2I0NmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j00CaKvImwMXbHhdRrtv9QN5a65
jbukM17MFyRqPNkF6rG81l4hlCQ3DaMx4cBAszSAbGZSZVk51JLpO1YNnuVTejnk
4Co1wL9GAS2KC9v/AvLoTjOy/U9BeSFN7NdaJD/G9Dgb1YzQ7nMZD5Fmdw1O2X6A
V656pLbJMQyDouiBU51Gu3lhhtGNwC618kY+9wyY2VRkEbc/B6DBkxmQ8q29dcQP
yKEA8MGvABdTJHKga2V0HAeyw16Z0c2/YFPZqyB0q1KZ5ATa1QT68/bSXuIex4D3
THiFg5ayMOcWWbSVtdF36NrQzo3spP72aVmaVzTyOz3/zvk/6GVYfdA0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwIiVAkIuDbHm57XGWaDm8ge0axMB8GA1UdIwQY
MBaAFMf/1+u/qYCDMHxj9xejq6cQdpaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9fWDY3LXBnSU13ZkdQM0Y2T3JweEIybHFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNTIwMjAtYWMwOC00ZGMwLTkyNWQt
NjVhYjQwODU1ZGUyLzEveF9fWDY3LXBnSU13ZkdQM0Y2T3JweEIybHFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kNTIwMjAtYWMwOC00ZGMwLTkyNWQtNjVhYjQwODU1ZGUy
LzEveF9fWDY3LXBnSU13ZkdQM0Y2T3JweEIybHFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6NkNVwq
R8AMEKyTmbeHP2icc1WTu0rJoGNvsRBC5RZ0sYv+0P+3eBuuBTqqG5PP2SuTLuEX
5EkgqY6A2oushBMTGpnixgDCKtYMtZ8rd5wWFy9aA24/Dgf/KLnoAecgkR/21hbb
32etR13Djq5zR7PMMCScG7LniaPn+LVdP8fHOqZRXg5TgCp30kgjzbSRKdBUmwOq
e6ae70X8So/4uYgtP8t11hheIoAgkZZug1z5jf3REu3g5jU2WuYEB3CC/c/028Lr
TuKA6PMiHCFrMFGRF/ZAEB+LUEyfug9avtYVhZhBPEYb+YjS0FoNxIgC0kbvxXTq
dx+fF8LA1z9BGQ==
-----END CERTIFICATE-----
Generated at Fri Nov 15 17:21:25 2024 by rpki-client on console-ams.rpki-client.org