Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.mft
File: 0romGKtLYELuJcRnngd15DBtccY.mft (raw, json)
Hash identifier: btFCHo3a9fMlUmquB352DkgRmMLL2HrnNg1gogxsYAQ=
Subject key identifier: 71:24:16:C5:58:FD:5C:B8:37:F1:3D:48:EE:0A:DA:B5:E1:D8:0A:B9
Authority key identifier: D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
Certificate issuer: /CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Certificate serial: 018CC9D610BE52B48C4BEDC6DA77D8EBEDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.mft
Manifest number: 09A8
Signing time: Tue 02 Jan 2024 11:01:38 +0000
Manifest this update: Tue 02 Jan 2024 11:01:38 +0000
Manifest next update: Wed 03 Jan 2024 11:01:38 +0000
Files and hashes: 1: 0romGKtLYELuJcRnngd15DBtccY.crl (hash: PEEcHyxzWJ6ckKCcgVBA2Yx57Lg3YKUbuBcDWhIVg28=)
2: 30eF8SISEtAfjn-BTPJ5vTzW5Ug.roa (hash: lOHMxqFybx+4TtydDQWhvEEGRJI3WuoFfIBD7clZDDc=)
3: A2BB-bUfq8rHrVvMAjMXuxgV2NI.roa (hash: 7XJxitmC1kIRuONMVjJagRLhfwDYAR2U4gOedbbgQtU=)
4: E4whuYUVfLBi9mgIkQQzPyZVX9s.roa (hash: OJUoQ3Y6+LAMOinyPonqHvR/Ir4YclCHH5HMeJJaTzk=)
5: V4oVRr4tkg-o2fncH6l-xs8OZLY.roa (hash: OBmQIPNQyUdT9/CHJ/e/WMbAxmyAGrmG++i5qLatD9M=)
6: o6aU-GN5DZU7nABZUykT40OqZBI.roa (hash: 9HpmSNDcQDKjKBJ/U2pNF1jLznuTYkDfyGetFlSbd9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:d6:10:be:52:b4:8c:4b:ed:c6:da:77:d8:eb:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Validity
Not Before: Jan 2 11:01:38 2024 GMT
Not After : Jan 3 11:01:38 2024 GMT
Subject: CN=712416c558fd5cb837f13d48ee0adab5e1d80ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:0c:79:16:bc:f5:b9:fa:32:eb:13:13:a3:
bd:6f:bc:de:0f:aa:c9:b7:c3:55:9c:e4:cf:7f:70:
69:b8:63:38:19:47:c6:a9:8e:65:70:98:bc:92:ed:
bf:e5:a4:3c:3b:82:32:27:7d:f5:4b:f3:73:62:eb:
f4:8d:64:82:09:bf:7b:34:d4:6c:e2:8c:76:e7:77:
f3:1f:55:df:3b:6d:d4:66:27:22:0e:a0:23:fd:a3:
b3:f3:39:32:4f:02:a3:dd:df:ed:9f:3d:3e:06:b5:
8f:fb:65:bb:72:00:58:35:f2:ce:40:46:4b:07:f4:
f1:aa:ee:15:4e:d3:be:be:bc:a9:0f:b1:2a:a8:07:
ba:60:78:f3:e0:7a:13:b8:a7:36:5d:f5:50:a0:30:
65:65:55:d6:90:3a:ca:fd:f2:ac:42:95:e6:94:8f:
36:70:b6:6c:8b:fb:f3:34:7b:7f:bb:fb:b7:bb:d7:
55:97:71:30:f5:39:23:2d:22:11:65:37:f2:b1:26:
23:31:fe:a8:ea:95:2a:04:04:9d:ad:7b:58:f0:f3:
dc:45:8a:f3:18:cf:e2:d0:cf:dc:f6:40:32:a1:5e:
a3:50:cd:6a:63:19:25:e9:01:94:16:fd:91:bc:69:
53:90:0c:10:32:11:9b:4a:11:6a:1b:01:12:db:f1:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:16:C5:58:FD:5C:B8:37:F1:3D:48:EE:0A:DA:B5:E1:D8:0A:B9
X509v3 Authority Key Identifier:
keyid:D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:65:49:aa:86:73:a6:b6:d8:ef:ed:ff:3a:5e:ee:55:bb:60:
18:6d:8d:a0:26:48:b0:a2:48:73:4b:a1:c4:5f:bc:a8:54:bc:
d7:ea:ef:95:f6:d3:53:04:76:6e:66:b3:6c:73:5e:82:c8:6e:
d9:ae:2b:e5:93:dc:e4:7e:f3:96:fd:78:f9:dd:ba:ec:cb:75:
84:aa:40:ad:14:b0:ac:9b:9d:3d:e0:41:0b:7e:9e:e7:9d:b8:
bd:e6:de:36:18:02:e7:8d:ca:85:d3:4a:7f:9c:ff:c1:a7:95:
07:2f:32:cc:5c:46:bf:30:d2:29:37:eb:6c:d3:c4:d5:00:6c:
3d:08:16:1e:21:2b:a7:81:83:b1:54:cc:71:6d:8e:09:ee:8c:
52:5e:06:f2:9b:95:f7:ab:21:3b:9f:8c:30:8e:c8:18:ee:a2:
28:69:b4:c2:91:eb:f1:bb:26:91:e8:08:99:27:db:af:6b:25:
41:22:73:73:7f:50:12:2d:f4:60:41:eb:1a:0a:c9:36:bc:de:
61:ba:53:f2:8a:19:02:07:36:61:3b:bd:5b:51:f3:75:ca:d6:
13:ec:4c:64:04:c7:27:d6:89:d9:0c:19:24:f0:5f:e6:b9:f6:
4e:8e:dd:2e:b2:ec:05:1a:4b:64:08:b1:3d:f3:a9:b4:f4:ef:
af:12:25:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzJ1hC+UrSMS+3G2nfY6+3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYmEyNjE4YWI0YjYwNDJlZTI1YzQ2NzllMDc3NWU0MzA2
ZDcxYzYwHhcNMjQwMTAyMTEwMTM4WhcNMjQwMTAzMTEwMTM4WjAzMTEwLwYDVQQD
Eyg3MTI0MTZjNTU4ZmQ1Y2I4MzdmMTNkNDhlZTBhZGFiNWUxZDgwYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnoMeRa89bn6MusTE6O9b7zeD6rJ
t8NVnOTPf3BpuGM4GUfGqY5lcJi8ku2/5aQ8O4IyJ331S/NzYuv0jWSCCb97NNRs
4ox253fzH1XfO23UZiciDqAj/aOz8zkyTwKj3d/tnz0+BrWP+2W7cgBYNfLOQEZL
B/Txqu4VTtO+vrypD7EqqAe6YHjz4HoTuKc2XfVQoDBlZVXWkDrK/fKsQpXmlI82
cLZsi/vzNHt/u/u3u9dVl3Ew9TkjLSIRZTfysSYjMf6o6pUqBASdrXtY8PPcRYrz
GM/i0M/c9kAyoV6jUM1qYxkl6QGUFv2RvGlTkAwQMhGbShFqGwES2/FBEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEkFsVY/Vy4N/E9SO4K2rXh2Aq5MB8GA1UdIwQY
MBaAFNK6JhirS2BC7iXEZ54HdeQwbXHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJvbUdLdExZRUx1SmNSbm5nZDE1REJ0Y2NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNjc5OTYtNTRmMS00ZjFlLWE3NjAt
OGUwZDUyOTNhYWM4LzEvMHJvbUdLdExZRUx1SmNSbm5nZDE1REJ0Y2NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hNjc5OTYtNTRmMS00ZjFlLWE3NjAtOGUwZDUyOTNhYWM4
LzEvMHJvbUdLdExZRUx1SmNSbm5nZDE1REJ0Y2NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGVJqoZz
prbY7+3/Ol7uVbtgGG2NoCZIsKJIc0uhxF+8qFS81+rvlfbTUwR2bmazbHNegshu
2a4r5ZPc5H7zlv14+d267Mt1hKpArRSwrJudPeBBC36e5524vebeNhgC543KhdNK
f5z/waeVBy8yzFxGvzDSKTfrbNPE1QBsPQgWHiErp4GDsVTMcW2OCe6MUl4G8puV
96shO5+MMI7IGO6iKGm0wpHr8bsmkegImSfbr2slQSJzc39QEi30YEHrGgrJNrze
YbpT8ooZAgc2YTu9W1HzdcrWE+xMZATHJ9aJ2QwZJPBf5rn2To7dLrLsBRpLZAix
PfOptPTvrxIlyw==
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:56 2024 by rpki-client on console-fra.rpki-client.org