Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/gX-OjzGgM4mz1pHvWgDoLpieNQ8.mft
File: gX-OjzGgM4mz1pHvWgDoLpieNQ8.mft (raw, json)
Hash identifier: RtCjFjwul8UIkptUNhqiziLpYCRI7T9lmb/+UQ5P81U=
Subject key identifier: 2C:87:16:2D:DF:2F:62:F9:AE:B0:5B:E1:B3:A9:B6:7A:C8:69:D2:BE
Authority key identifier: 81:7F:8E:8F:31:A0:33:89:B3:D6:91:EF:5A:00:E8:2E:98:9E:35:0F
Certificate issuer: /CN=817f8e8f31a03389b3d691ef5a00e82e989e350f
Certificate serial: 018BEA3EC4F17660312B0A9834F65E5FCD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gX-OjzGgM4mz1pHvWgDoLpieNQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/gX-OjzGgM4mz1pHvWgDoLpieNQ8.mft
Manifest number: 0858
Signing time: Mon 20 Nov 2023 01:01:03 +0000
Manifest this update: Mon 20 Nov 2023 01:01:03 +0000
Manifest next update: Tue 21 Nov 2023 01:01:03 +0000
Files and hashes: 1: 1NNnvC6Hf9kDs6ThQz1Bi9s6npI.roa (hash: dJvjOE2c5qePp1S7Epx4ZKdClnyWZo+Y5IcdYipIQBQ=)
2: gX-OjzGgM4mz1pHvWgDoLpieNQ8.crl (hash: 901atv8b/OGZgmaD2qlvZuaiwXcSfGIau6tQ0zZFIMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:3e:c4:f1:76:60:31:2b:0a:98:34:f6:5e:5f:cd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817f8e8f31a03389b3d691ef5a00e82e989e350f
Validity
Not Before: Nov 20 01:01:03 2023 GMT
Not After : Nov 21 01:01:03 2023 GMT
Subject: CN=2c87162ddf2f62f9aeb05be1b3a9b67ac869d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:3d:0a:d7:d8:6b:b7:b6:20:cd:f8:d8:0a:
48:5e:4d:85:d7:28:83:52:46:c8:fd:58:2b:b4:79:
4d:a1:3d:ce:be:6e:8a:8b:ac:05:d0:66:a7:45:b1:
d0:eb:9e:b8:b6:d5:b5:f2:59:1c:db:84:06:e9:bc:
89:95:d9:76:5b:9d:b8:04:1d:4c:80:25:d4:3b:ae:
7e:3a:be:60:59:64:aa:1c:f9:5d:a5:67:2d:ec:a6:
ad:47:89:7b:f4:90:a7:7b:59:99:ff:7c:e1:a0:0f:
0e:b7:62:9c:6a:b6:bf:c8:5d:23:ab:1f:ca:b7:0e:
de:9a:32:4d:b9:a2:57:4f:38:90:e4:ef:bc:d1:0b:
41:f1:19:77:8f:e6:51:a7:8f:51:b1:a1:32:aa:c1:
61:4f:b9:a6:40:a0:9c:83:2e:a2:da:d2:af:f6:0f:
37:e5:59:d2:25:78:98:55:9c:2a:45:bd:82:7d:a2:
71:1d:b3:1f:67:86:9e:7c:3b:fd:50:50:d0:82:63:
a3:ec:24:51:ae:ad:2e:32:c6:ce:8b:ec:42:ea:f1:
0c:f2:86:c7:5d:24:aa:7d:01:5c:70:93:d0:fb:9c:
af:4c:96:56:7a:dc:09:31:9d:de:c6:49:68:18:1b:
b5:87:b3:fa:89:8f:c2:bf:93:f8:f4:aa:cf:0f:34:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:16:2D:DF:2F:62:F9:AE:B0:5B:E1:B3:A9:B6:7A:C8:69:D2:BE
X509v3 Authority Key Identifier:
keyid:81:7F:8E:8F:31:A0:33:89:B3:D6:91:EF:5A:00:E8:2E:98:9E:35:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gX-OjzGgM4mz1pHvWgDoLpieNQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/gX-OjzGgM4mz1pHvWgDoLpieNQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/a66b3b-8c3a-4446-810e-067aec85ca67/1/gX-OjzGgM4mz1pHvWgDoLpieNQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:39:c6:e3:0e:da:cf:7e:6e:5e:f1:04:27:ac:9e:77:fd:18:
88:0a:f8:87:e2:e8:a9:e7:c9:7c:d8:af:df:65:63:5b:af:a1:
92:67:0b:e1:04:55:4a:58:1e:a5:be:ec:38:1e:71:36:98:5b:
9f:13:18:40:09:fe:e3:77:a6:ad:65:f8:43:ff:2d:0c:c9:0a:
2f:de:ce:2b:dd:e2:ed:31:28:8f:53:04:90:3a:2a:cd:2e:c0:
90:37:44:d6:77:aa:e0:b8:26:11:7b:13:18:79:ae:b5:b6:3f:
b6:1b:aa:c6:7e:7b:e1:17:95:b2:39:d9:b2:f4:d0:b8:32:f1:
1e:a5:04:06:e1:f7:60:b4:e7:3c:d6:7b:c6:ee:68:0d:cf:cb:
aa:30:3b:d2:9e:60:34:7d:c6:6b:b1:17:fe:c7:22:66:b6:dd:
db:62:80:8c:0a:c8:40:5b:e8:0c:e5:b9:02:73:b2:d0:e1:7c:
87:43:60:93:41:c4:63:df:61:ac:68:56:80:cb:7e:88:b7:20:
29:c5:64:96:ad:52:04:9b:02:56:3a:a5:51:b8:c0:b9:3f:32:
6c:f7:b8:71:b3:07:62:99:f5:e6:cd:91:64:20:46:cc:90:d1:
5a:da:33:f4:37:21:de:d5:1d:49:30:75:3f:8a:db:c2:4e:d3:
e0:b8:15:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvqPsTxdmAxKwqYNPZeX81vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxN2Y4ZThmMzFhMDMzODliM2Q2OTFlZjVhMDBlODJlOTg5
ZTM1MGYwHhcNMjMxMTIwMDEwMTAzWhcNMjMxMTIxMDEwMTAzWjAzMTEwLwYDVQQD
EygyYzg3MTYyZGRmMmY2MmY5YWViMDViZTFiM2E5YjY3YWM4NjlkMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNI9CtfYa7e2IM342ApIXk2F1yiD
UkbI/VgrtHlNoT3Ovm6Ki6wF0GanRbHQ6564ttW18lkc24QG6byJldl2W524BB1M
gCXUO65+Or5gWWSqHPldpWct7KatR4l79JCne1mZ/3zhoA8Ot2Kcara/yF0jqx/K
tw7emjJNuaJXTziQ5O+80QtB8Rl3j+ZRp49RsaEyqsFhT7mmQKCcgy6i2tKv9g83
5VnSJXiYVZwqRb2CfaJxHbMfZ4aefDv9UFDQgmOj7CRRrq0uMsbOi+xC6vEM8obH
XSSqfQFccJPQ+5yvTJZWetwJMZ3exkloGBu1h7P6iY/Cv5P49KrPDzQIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyHFi3fL2L5rrBb4bOptnrIadK+MB8GA1UdIwQY
MBaAFIF/jo8xoDOJs9aR71oA6C6YnjUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1gtT2p6R2dNNG16MXBIdldnRG9McGllTlE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hNjZiM2ItOGMzYS00NDQ2LTgxMGUt
MDY3YWVjODVjYTY3LzEvZ1gtT2p6R2dNNG16MXBIdldnRG9McGllTlE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hNjZiM2ItOGMzYS00NDQ2LTgxMGUtMDY3YWVjODVjYTY3
LzEvZ1gtT2p6R2dNNG16MXBIdldnRG9McGllTlE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKznG4w7a
z35uXvEEJ6yed/0YiAr4h+LoqefJfNiv32VjW6+hkmcL4QRVSlgepb7sOB5xNphb
nxMYQAn+43emrWX4Q/8tDMkKL97OK93i7TEoj1MEkDoqzS7AkDdE1neq4LgmEXsT
GHmutbY/thuqxn574ReVsjnZsvTQuDLxHqUEBuH3YLTnPNZ7xu5oDc/LqjA70p5g
NH3Ga7EX/sciZrbd22KAjArIQFvoDOW5AnOy0OF8h0Ngk0HEY99hrGhWgMt+iLcg
KcVklq1SBJsCVjqlUbjAuT8ybPe4cbMHYpn15s2RZCBGzJDRWtoz9Dch3tUdSTB1
P4rbwk7T4LgVTQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org