Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/faf163-0983-48ed-a3bd-ae7d31fb05e5/1/p78p2Iaz_fCTuZIlitFYmW8YSys.mft
File: p78p2Iaz_fCTuZIlitFYmW8YSys.mft (raw, json)
Hash identifier: aEjv9Zj82lWnMm1+dYT2Zfeh9mBEA02LjJlSRWbPTss=
Subject key identifier: AB:D8:B6:3C:CB:DA:9E:50:83:D6:74:E5:50:5A:D3:06:73:7F:EC:9C
Authority key identifier: A7:BF:29:D8:86:B3:FD:F0:93:B9:92:25:8A:D1:58:99:6F:18:4B:2B
Certificate issuer: /CN=a7bf29d886b3fdf093b992258ad158996f184b2b
Certificate serial: 018EE57E4FC9A846B296F064818C49564CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p78p2Iaz_fCTuZIlitFYmW8YSys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/faf163-0983-48ed-a3bd-ae7d31fb05e5/1/p78p2Iaz_fCTuZIlitFYmW8YSys.mft
Manifest number: 05A2
Signing time: Tue 16 Apr 2024 06:00:44 +0000
Manifest this update: Tue 16 Apr 2024 06:00:44 +0000
Manifest next update: Wed 17 Apr 2024 06:00:44 +0000
Files and hashes: 1: dDMVuTfzMA5GrQ66IkLbUkNCz9M.roa (hash: L1KciRyySOylutX6mMGyvIvjU5rpCdwpftDZSIiGzd4=)
2: p78p2Iaz_fCTuZIlitFYmW8YSys.crl (hash: 8dfVNP0J89M55ytY9WfCDqAPyaXH7rS9KXGNRR4MgGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e5:7e:4f:c9:a8:46:b2:96:f0:64:81:8c:49:56:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bf29d886b3fdf093b992258ad158996f184b2b
Validity
Not Before: Apr 16 06:00:44 2024 GMT
Not After : Apr 17 06:00:44 2024 GMT
Subject: CN=abd8b63ccbda9e5083d674e5505ad306737fec9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:a0:64:d8:22:28:56:7c:78:39:e3:1e:72:
ae:bf:e6:8b:9c:87:88:24:c9:a8:08:b2:80:58:2d:
60:a0:c6:95:ad:e8:43:0a:0b:02:b8:52:9c:7f:74:
52:cc:63:fa:fe:e3:0f:6c:87:32:81:52:b3:2e:c4:
12:49:0c:e4:16:37:2b:38:d0:d4:8d:0d:d7:ee:fc:
3a:38:b0:df:55:3f:01:90:0a:43:a2:bd:1d:70:2a:
6d:c7:84:0d:c3:32:f5:0a:b4:c7:06:c5:f9:6c:75:
9b:b5:26:61:0b:74:9b:3c:1a:57:ee:b6:0e:f2:d3:
08:5b:d1:3c:bd:83:41:7b:a7:f5:fd:49:11:38:35:
ef:8c:56:01:36:64:ff:c9:18:0a:13:a9:89:50:a7:
f9:83:7b:65:67:41:51:bf:87:6d:91:a3:55:97:7b:
4f:e0:bc:08:f1:22:b9:3f:0e:ce:33:8d:a8:d7:a0:
c4:87:1b:a3:a5:fc:4d:d4:e2:96:65:70:30:cc:a5:
7e:02:92:90:30:9d:6d:b7:5a:87:d8:6e:df:90:9d:
05:17:29:6f:1e:2d:41:a1:6a:b4:e1:fb:d0:9d:1f:
9d:72:69:1a:9d:e7:3a:12:42:87:2c:79:03:06:8f:
cd:42:d7:3e:48:63:dd:35:43:70:2b:b6:14:f1:4f:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D8:B6:3C:CB:DA:9E:50:83:D6:74:E5:50:5A:D3:06:73:7F:EC:9C
X509v3 Authority Key Identifier:
keyid:A7:BF:29:D8:86:B3:FD:F0:93:B9:92:25:8A:D1:58:99:6F:18:4B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p78p2Iaz_fCTuZIlitFYmW8YSys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/faf163-0983-48ed-a3bd-ae7d31fb05e5/1/p78p2Iaz_fCTuZIlitFYmW8YSys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/faf163-0983-48ed-a3bd-ae7d31fb05e5/1/p78p2Iaz_fCTuZIlitFYmW8YSys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:54:37:12:59:fa:aa:0d:12:e0:d1:40:55:43:8e:74:6c:9f:
bb:e3:9c:6f:73:68:55:9b:30:67:95:be:11:b7:c2:18:2e:c0:
a8:3a:00:31:29:30:b7:8c:b9:6e:88:be:cb:fc:4a:dd:f0:85:
0f:af:fe:c5:e8:53:37:b6:76:a2:71:95:e5:1e:f6:bb:3f:80:
f7:9c:65:7b:fb:8a:bf:f0:c7:b4:f0:22:f2:1e:f4:09:98:fd:
5d:ed:11:c3:d9:e8:4b:8b:14:ed:81:b4:08:7a:36:ed:31:3f:
ca:58:bc:68:60:14:d2:b7:f3:cb:a4:62:50:49:85:66:11:4e:
57:e9:97:0c:97:e3:22:1e:89:07:7d:f1:b7:f3:fb:10:2d:81:
34:8e:39:c7:1b:c6:13:3d:f5:c6:83:f3:c5:21:8c:4b:e3:84:
df:b5:49:2e:b2:7a:5a:1b:e3:ab:8c:2e:48:bf:a2:b9:31:2a:
e9:de:ea:e1:80:4d:91:ac:ad:35:54:5f:34:af:b1:4d:b4:f7:
d5:5e:fc:bf:9c:1b:89:6a:d9:2b:22:1e:15:ed:c3:07:cd:7d:
3a:4d:7e:8e:95:cb:17:1c:9a:3d:43:2c:f8:ce:8c:d0:9e:a7:
21:41:b0:e3:2b:57:e4:17:9d:8e:1c:6e:26:c9:f1:07:9d:81:
45:f6:88:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7lfk/JqEaylvBkgYxJVkzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmYyOWQ4ODZiM2ZkZjA5M2I5OTIyNThhZDE1ODk5NmYx
ODRiMmIwHhcNMjQwNDE2MDYwMDQ0WhcNMjQwNDE3MDYwMDQ0WjAzMTEwLwYDVQQD
EyhhYmQ4YjYzY2NiZGE5ZTUwODNkNjc0ZTU1MDVhZDMwNjczN2ZlYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TagZNgiKFZ8eDnjHnKuv+aLnIeI
JMmoCLKAWC1goMaVrehDCgsCuFKcf3RSzGP6/uMPbIcygVKzLsQSSQzkFjcrONDU
jQ3X7vw6OLDfVT8BkApDor0dcCptx4QNwzL1CrTHBsX5bHWbtSZhC3SbPBpX7rYO
8tMIW9E8vYNBe6f1/UkRODXvjFYBNmT/yRgKE6mJUKf5g3tlZ0FRv4dtkaNVl3tP
4LwI8SK5Pw7OM42o16DEhxujpfxN1OKWZXAwzKV+ApKQMJ1tt1qH2G7fkJ0FFylv
Hi1BoWq04fvQnR+dcmkanec6EkKHLHkDBo/NQtc+SGPdNUNwK7YU8U/R+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvYtjzL2p5Qg9Z05VBa0wZzf+ycMB8GA1UdIwQY
MBaAFKe/KdiGs/3wk7mSJYrRWJlvGEsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDc4cDJJYXpfZkNUdVpJbGl0RlltVzhZU3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mYWYxNjMtMDk4My00OGVkLWEzYmQt
YWU3ZDMxZmIwNWU1LzEvcDc4cDJJYXpfZkNUdVpJbGl0RlltVzhZU3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mYWYxNjMtMDk4My00OGVkLWEzYmQtYWU3ZDMxZmIwNWU1
LzEvcDc4cDJJYXpfZkNUdVpJbGl0RlltVzhZU3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFQ3Eln6
qg0S4NFAVUOOdGyfu+Ocb3NoVZswZ5W+EbfCGC7AqDoAMSkwt4y5boi+y/xK3fCF
D6/+xehTN7Z2onGV5R72uz+A95xle/uKv/DHtPAi8h70CZj9Xe0Rw9noS4sU7YG0
CHo27TE/yli8aGAU0rfzy6RiUEmFZhFOV+mXDJfjIh6JB33xt/P7EC2BNI45xxvG
Ez31xoPzxSGMS+OE37VJLrJ6Whvjq4wuSL+iuTEq6d7q4YBNkaytNVRfNK+xTbT3
1V78v5wbiWrZKyIeFe3DB819Ok1+jpXLFxyaPUMs+M6M0J6nIUGw4ytX5Bedjhxu
JsnxB52BRfaIJQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:50 2025 by rpki-client