Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/041b0c-f791-4a5c-8e77-01a066f6f693/1/1-07ba6okKFOU9_HfT2-yrCiegtU.mft
File: 1-07ba6okKFOU9_HfT2-yrCiegtU.mft (raw, json)
Hash identifier: C9wbnSiwUASt8HDxCalBK5UnRGPtJOx9XeXBHTO4Ntg=
Subject key identifier: 4D:08:12:CB:2C:8E:22:78:F4:2D:AB:53:74:9C:79:C2:6C:F0:00:FF
Authority key identifier: FB:4E:DB:6B:AA:24:28:53:94:F7:F1:DF:4F:6F:B2:AC:28:9E:82:D5
Certificate issuer: /CN=fb4edb6baa24285394f7f1df4f6fb2ac289e82d5
Certificate serial: 018D5CD2548480887F589C96F9D9D1812840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-07ba6okKFOU9_HfT2-yrCiegtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/041b0c-f791-4a5c-8e77-01a066f6f693/1/1-07ba6okKFOU9_HfT2-yrCiegtU.mft
Manifest number: 08EA
Signing time: Wed 31 Jan 2024 00:01:44 +0000
Manifest this update: Wed 31 Jan 2024 00:01:44 +0000
Manifest next update: Thu 01 Feb 2024 00:01:44 +0000
Files and hashes: 1: 1-07ba6okKFOU9_HfT2-yrCiegtU.crl (hash: onmvy3ZbhcscaS4sTqoXs4vVN5+f9DYrdByCPkyWZYo=)
2: vdmveuueMOrpNTnlBUugAIZcxcU.roa (hash: 3yzSh3ssgYw2fm+JUfN18gzWx0y4NiKPIzKf5tXCZAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5c:d2:54:84:80:88:7f:58:9c:96:f9:d9:d1:81:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4edb6baa24285394f7f1df4f6fb2ac289e82d5
Validity
Not Before: Jan 31 00:01:44 2024 GMT
Not After : Feb 1 00:01:44 2024 GMT
Subject: CN=4d0812cb2c8e2278f42dab53749c79c26cf000ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:c1:49:4d:43:10:20:f8:28:1d:09:6a:72:
4f:69:07:d4:3b:a3:70:96:7a:39:59:5e:19:91:43:
cc:90:d5:35:0f:e2:1e:13:24:56:ac:e5:ad:44:3e:
05:84:c2:3f:04:3d:72:6f:6c:98:c0:e8:a5:d3:08:
78:89:39:4b:7a:f7:72:e6:56:10:9d:2a:62:53:85:
3e:8f:43:6b:9d:44:73:6f:e4:d9:a0:cf:43:bf:35:
42:77:5c:11:89:22:18:65:db:bd:5f:38:86:51:a8:
c8:9f:41:64:58:1f:8c:8f:e9:e1:6e:43:6d:6a:0a:
77:46:00:f4:ff:09:71:c5:09:d8:dd:30:d3:6e:5f:
fc:9f:ae:f0:b5:20:b4:09:05:f1:04:87:46:3d:75:
f8:b1:66:da:66:10:c1:69:f6:cf:88:37:81:03:70:
f6:33:95:5a:31:f6:9c:2d:32:c9:eb:70:8d:b1:69:
91:b5:6b:1d:4a:5e:67:4e:a1:63:a6:2e:7d:bd:f8:
ec:22:88:df:1c:4c:50:26:bb:fc:55:96:d6:ae:ac:
89:ce:ef:fc:5d:7c:9a:05:b5:75:de:96:7e:a0:91:
9d:f0:df:0d:d5:5c:2d:b6:40:fa:c4:9e:07:5d:aa:
25:ad:1b:52:09:6c:25:43:94:c7:01:c2:31:f0:29:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:08:12:CB:2C:8E:22:78:F4:2D:AB:53:74:9C:79:C2:6C:F0:00:FF
X509v3 Authority Key Identifier:
keyid:FB:4E:DB:6B:AA:24:28:53:94:F7:F1:DF:4F:6F:B2:AC:28:9E:82:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-07ba6okKFOU9_HfT2-yrCiegtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/041b0c-f791-4a5c-8e77-01a066f6f693/1/1-07ba6okKFOU9_HfT2-yrCiegtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/041b0c-f791-4a5c-8e77-01a066f6f693/1/1-07ba6okKFOU9_HfT2-yrCiegtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:82:fa:b2:68:7b:de:1e:0a:b4:8a:de:d1:81:b2:91:e2:0d:
27:84:1b:05:32:24:c8:0e:05:c2:4e:ca:ba:3c:ed:8f:d6:39:
f0:58:4a:96:0c:76:8e:6d:38:5b:a6:13:00:80:91:23:5b:11:
b8:9c:9c:99:fc:15:4c:46:0c:3f:64:d7:db:c4:ac:cf:db:19:
c1:9c:09:b4:87:ca:e1:c4:d7:59:23:3e:8f:7a:30:07:0f:00:
d2:52:b4:e5:27:70:7a:ac:c7:cd:5b:5a:07:dd:cf:2b:04:a1:
58:9d:e4:ff:6d:8a:cc:fa:5f:f3:09:7d:58:04:20:5f:84:63:
9a:6e:7d:f2:5a:3d:34:24:19:1a:96:a1:65:54:6d:44:17:1e:
52:c4:ad:29:c5:f3:f5:4e:f8:0a:e7:72:3b:8e:36:72:11:55:
60:13:ee:09:de:16:05:49:cb:3a:87:07:e9:e4:fd:de:0a:c6:
2c:af:6f:34:3a:51:fa:2b:78:be:ae:23:13:33:ea:de:15:d2:
56:e0:7b:40:0c:d1:e8:ac:a9:ba:c4:bb:03:ce:84:c5:6c:dc:
88:6b:33:7f:50:b1:7c:43:8f:a1:d8:30:8d:71:f1:ac:bf:ca:
53:e9:9f:90:ec:bb:b2:a1:17:27:0c:71:c9:bf:a7:08:f7:cf:
7c:0f:96:6d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY1c0lSEgIh/WJyW+dnRgShAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNGVkYjZiYWEyNDI4NTM5NGY3ZjFkZjRmNmZiMmFjMjg5
ZTgyZDUwHhcNMjQwMTMxMDAwMTQ0WhcNMjQwMjAxMDAwMTQ0WjAzMTEwLwYDVQQD
Eyg0ZDA4MTJjYjJjOGUyMjc4ZjQyZGFiNTM3NDljNzljMjZjZjAwMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBfBSU1DECD4KB0JanJPaQfUO6Nw
lno5WV4ZkUPMkNU1D+IeEyRWrOWtRD4FhMI/BD1yb2yYwOil0wh4iTlLevdy5lYQ
nSpiU4U+j0NrnURzb+TZoM9DvzVCd1wRiSIYZdu9XziGUajIn0FkWB+Mj+nhbkNt
agp3RgD0/wlxxQnY3TDTbl/8n67wtSC0CQXxBIdGPXX4sWbaZhDBafbPiDeBA3D2
M5VaMfacLTLJ63CNsWmRtWsdSl5nTqFjpi59vfjsIojfHExQJrv8VZbWrqyJzu/8
XXyaBbV13pZ+oJGd8N8N1VwttkD6xJ4HXaolrRtSCWwlQ5THAcIx8CnBhwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE0IEsssjiJ49C2rU3ScecJs8AD/MB8GA1UdIwQY
MBaAFPtO22uqJChTlPfx309vsqwonoLVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wN2JhNm9rS0ZPVTlfSGZUMi15ckNpZWd0VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMDQxYjBjLWY3OTEtNGE1Yy04ZTc3
LTAxYTA2NmY2ZjY5My8xLzEtMDdiYTZva0tGT1U5X0hmVDIteXJDaWVndFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMwLzA0MWIwYy1mNzkxLTRhNWMtOGU3Ny0wMWEwNjZmNmY2
OTMvMS8xLTA3YmE2b2tLRk9VOV9IZlQyLXlyQ2llZ3RVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4L6
smh73h4KtIre0YGykeINJ4QbBTIkyA4Fwk7Kujztj9Y58FhKlgx2jm04W6YTAICR
I1sRuJycmfwVTEYMP2TX28Ssz9sZwZwJtIfK4cTXWSM+j3owBw8A0lK05SdweqzH
zVtaB93PKwShWJ3k/22KzPpf8wl9WAQgX4Rjmm598lo9NCQZGpahZVRtRBceUsSt
KcXz9U74CudyO442chFVYBPuCd4WBUnLOocH6eT93grGLK9vNDpR+it4vq4jEzPq
3hXSVuB7QAzR6KypusS7A86ExWzciGszf1CxfEOPodgwjXHxrL/KU+mfkOy7sqEX
Jwxxyb+nCPfPfA+WbQ==
-----END CERTIFICATE-----
Generated at Wed Jan 31 12:07:43 2024 by rpki-client on console-fra.rpki-client.org