Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e894cd-ac96-4e70-aed6-f10d7f9c80ec/1/xB2vJXWTtnCqBwYmA0e_t7akmOo.mft
File: xB2vJXWTtnCqBwYmA0e_t7akmOo.mft (raw, json)
Hash identifier: SV0MGHA118wvTAZ4VF8tP7/5F3Shn+y0Hk2QsBr2gB4=
Subject key identifier: 32:52:8A:8F:4A:2E:FA:05:19:86:81:83:1F:89:81:09:2E:5B:47:8D
Authority key identifier: C4:1D:AF:25:75:93:B6:70:AA:07:06:26:03:47:BF:B7:B6:A4:98:EA
Certificate issuer: /CN=c41daf257593b670aa0706260347bfb7b6a498ea
Certificate serial: 0184F5D1E5CA10BC4698E51E1D9EBC93A225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xB2vJXWTtnCqBwYmA0e_t7akmOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e894cd-ac96-4e70-aed6-f10d7f9c80ec/1/xB2vJXWTtnCqBwYmA0e_t7akmOo.mft
Manifest number: 01A5
Signing time: Fri 09 Dec 2022 07:38:04 +0000
Manifest this update: Fri 09 Dec 2022 07:38:04 +0000
Manifest next update: Sat 10 Dec 2022 07:38:04 +0000
Files and hashes: 1: xB2vJXWTtnCqBwYmA0e_t7akmOo.crl (hash: mRKjA7PIZLg3rXp/ZnUu8yG4a7ZeQCe+jHm693+8f0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f5:d1:e5:ca:10:bc:46:98:e5:1e:1d:9e:bc:93:a2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41daf257593b670aa0706260347bfb7b6a498ea
Validity
Not Before: Dec 9 07:38:04 2022 GMT
Not After : Dec 10 07:38:04 2022 GMT
Subject: CN=32528a8f4a2efa05198681831f8981092e5b478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:62:f8:d7:85:cb:ec:34:df:4f:38:e9:0e:
2e:d8:61:2c:69:99:a5:84:3e:bf:84:a7:a1:41:f4:
08:77:e9:a3:43:a1:e1:cc:59:dc:48:34:31:fe:23:
dc:c4:8b:c8:67:10:46:dd:54:10:88:93:d0:62:2c:
c5:fe:13:d3:17:44:c9:98:74:cc:48:cd:db:0c:a4:
4d:b1:7b:74:9f:7a:0d:dc:c0:bb:36:8e:3a:c6:19:
62:c9:9a:4a:92:49:08:08:85:4a:06:f4:c9:49:36:
65:0e:7d:20:f9:0c:ab:4f:59:14:62:fe:94:97:65:
6a:72:c8:f9:ab:dc:b6:c9:87:0b:56:df:34:dc:e4:
e2:a5:b9:42:d8:11:5b:42:af:50:f2:b6:bb:20:f5:
ea:5f:7e:d3:12:8e:93:17:f4:38:e3:98:41:27:5d:
aa:af:df:6d:c2:2c:ee:ee:5b:d8:48:4f:64:6c:57:
8f:3c:7a:13:fc:45:18:77:a8:04:2b:cc:3e:9b:c8:
9c:50:d9:06:55:32:00:d6:18:f5:e4:b9:ed:50:69:
74:20:84:69:d8:6c:92:c5:34:96:52:57:c7:72:06:
17:9b:62:fb:69:6d:f4:d9:7d:fa:6b:5a:e7:21:e7:
8c:08:cf:d8:69:f8:99:a0:e2:37:6d:3b:5b:41:dc:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:8A:8F:4A:2E:FA:05:19:86:81:83:1F:89:81:09:2E:5B:47:8D
X509v3 Authority Key Identifier:
keyid:C4:1D:AF:25:75:93:B6:70:AA:07:06:26:03:47:BF:B7:B6:A4:98:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xB2vJXWTtnCqBwYmA0e_t7akmOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e894cd-ac96-4e70-aed6-f10d7f9c80ec/1/xB2vJXWTtnCqBwYmA0e_t7akmOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e894cd-ac96-4e70-aed6-f10d7f9c80ec/1/xB2vJXWTtnCqBwYmA0e_t7akmOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ba:0d:91:1a:14:94:5f:ce:e8:eb:7b:59:8d:12:e8:62:72:
8f:cf:14:eb:bb:86:e4:a2:1d:2b:f3:fe:1c:b2:3a:52:9e:76:
b2:2d:5a:8a:d2:62:76:d4:67:35:a4:b0:02:15:32:4e:f4:37:
1a:5c:65:1b:83:09:98:ea:03:a6:d5:f0:79:a9:a6:69:49:2b:
e6:9e:18:0f:c3:3b:81:ca:04:03:89:cd:23:05:0d:a0:5f:56:
74:25:b5:29:7a:08:88:e2:71:9d:9d:91:c0:81:8c:44:12:60:
b7:1c:3e:fd:91:fd:81:e4:87:08:8e:90:9d:45:b7:4d:ef:99:
cc:ef:65:e5:87:75:d0:31:5f:db:ef:e0:ac:1e:30:f4:5e:ce:
44:8c:d4:c0:d5:96:ea:0f:9c:5e:a3:c3:1a:dd:f1:ba:c7:bf:
da:f1:a4:c9:90:59:c3:20:93:ae:e3:64:2b:d6:21:58:44:c8:
6e:46:49:4d:1b:4a:39:c4:39:c1:b6:6a:3c:32:86:82:88:df:
83:27:ce:c9:b2:47:b5:6b:96:44:8b:43:38:66:a4:bd:e9:c4:
cf:2b:d4:9b:9a:65:21:07:b8:ba:18:08:f4:22:18:4d:44:40:
09:e9:db:8f:12:7d:49:56:72:19:96:58:d5:63:dc:6c:ab:5c:
80:45:87:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYT10eXKELxGmOUeHZ68k6IlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MWRhZjI1NzU5M2I2NzBhYTA3MDYyNjAzNDdiZmI3YjZh
NDk4ZWEwHhcNMjIxMjA5MDczODA0WhcNMjIxMjEwMDczODA0WjAzMTEwLwYDVQQD
EygzMjUyOGE4ZjRhMmVmYTA1MTk4NjgxODMxZjg5ODEwOTJlNWI0NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Vi+NeFy+w030846Q4u2GEsaZml
hD6/hKehQfQId+mjQ6HhzFncSDQx/iPcxIvIZxBG3VQQiJPQYizF/hPTF0TJmHTM
SM3bDKRNsXt0n3oN3MC7No46xhliyZpKkkkICIVKBvTJSTZlDn0g+QyrT1kUYv6U
l2Vqcsj5q9y2yYcLVt803OTipblC2BFbQq9Q8ra7IPXqX37TEo6TF/Q445hBJ12q
r99twizu7lvYSE9kbFePPHoT/EUYd6gEK8w+m8icUNkGVTIA1hj15LntUGl0IIRp
2GySxTSWUlfHcgYXm2L7aW302X36a1rnIeeMCM/YafiZoOI3bTtbQdwTLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJSio9KLvoFGYaBgx+JgQkuW0eNMB8GA1UdIwQY
MBaAFMQdryV1k7ZwqgcGJgNHv7e2pJjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEIydkpYV1R0bkNxQndZbUEwZV90N2FrbU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lODk0Y2QtYWM5Ni00ZTcwLWFlZDYt
ZjEwZDdmOWM4MGVjLzEveEIydkpYV1R0bkNxQndZbUEwZV90N2FrbU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lODk0Y2QtYWM5Ni00ZTcwLWFlZDYtZjEwZDdmOWM4MGVj
LzEveEIydkpYV1R0bkNxQndZbUEwZV90N2FrbU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgroNkRoU
lF/O6Ot7WY0S6GJyj88U67uG5KIdK/P+HLI6Up52si1aitJidtRnNaSwAhUyTvQ3
GlxlG4MJmOoDptXweammaUkr5p4YD8M7gcoEA4nNIwUNoF9WdCW1KXoIiOJxnZ2R
wIGMRBJgtxw+/ZH9geSHCI6QnUW3Te+ZzO9l5Yd10DFf2+/grB4w9F7ORIzUwNWW
6g+cXqPDGt3xuse/2vGkyZBZwyCTruNkK9YhWETIbkZJTRtKOcQ5wbZqPDKGgojf
gyfOybJHtWuWRItDOGakvenEzyvUm5plIQe4uhgI9CIYTURACenbjxJ9SVZyGZZY
1WPcbKtcgEWHWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:55 2024 by rpki-client on console-ams.rpki-client.org