Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.mft
File: r2UL7dFrTjyYEW7jKxIXT5dIXIo.mft (raw, json)
Hash identifier: UoVDK73jOs8nxNorRfu4cCLV6VE1uaIqknjzNoaIees=
Subject key identifier: D6:1E:A8:87:E9:25:FF:7C:3D:3F:52:E0:EF:0F:90:6C:BF:11:0B:AB
Authority key identifier: AF:65:0B:ED:D1:6B:4E:3C:98:11:6E:E3:2B:12:17:4F:97:48:5C:8A
Certificate issuer: /CN=af650bedd16b4e3c98116ee32b12174f97485c8a
Certificate serial: 01909ACD2FD91337E9A9AB478654EFE8AFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2UL7dFrTjyYEW7jKxIXT5dIXIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.mft
Manifest number: 0CC6
Signing time: Wed 10 Jul 2024 04:00:56 +0000
Manifest this update: Wed 10 Jul 2024 04:00:56 +0000
Manifest next update: Thu 11 Jul 2024 04:00:56 +0000
Files and hashes: 1: 30dt85dzsK5hiPQQKO6L6zwWJn0.roa (hash: 60eMaChme3kJQ6bD0OvFwucjUKUoui0q6xBZTiHUaJs=)
2: r2UL7dFrTjyYEW7jKxIXT5dIXIo.crl (hash: NjHT44lfOd9gpOidxskNDOxY1lEkWAsWam7e2h+oqgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9a:cd:2f:d9:13:37:e9:a9:ab:47:86:54:ef:e8:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af650bedd16b4e3c98116ee32b12174f97485c8a
Validity
Not Before: Jul 10 04:00:56 2024 GMT
Not After : Jul 11 04:00:56 2024 GMT
Subject: CN=d61ea887e925ff7c3d3f52e0ef0f906cbf110bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:22:98:54:0a:d8:a9:8a:0c:88:c1:81:a4:
d6:e1:66:21:af:6a:d5:38:ad:8d:5f:b5:52:0e:ae:
1e:54:2d:8d:b2:e3:49:65:6e:20:4e:18:90:4d:25:
b0:7d:78:0d:59:8a:59:a5:dd:1e:61:86:cd:63:1c:
77:64:66:49:43:72:27:2f:27:22:d5:9c:91:b4:c8:
06:11:71:f5:c8:9b:b6:03:67:cf:c3:27:70:45:32:
3a:16:db:4e:aa:a3:23:76:f6:1f:01:c0:67:6d:5d:
af:da:a0:88:3a:97:10:bb:a3:9c:91:66:8a:4d:41:
d1:8d:75:93:05:97:f6:67:5f:ee:c2:28:bd:37:b5:
c0:eb:81:30:ef:d1:97:ac:6b:10:d7:4e:7a:f3:08:
53:53:50:e6:5b:66:ce:61:b5:28:22:0f:d1:2a:d8:
42:f4:75:81:38:e9:74:d9:7d:03:c3:d8:81:1e:d7:
6c:df:e1:cb:37:6d:fa:c4:3d:4e:60:7a:14:bc:d4:
94:21:e7:bf:ed:0d:95:1c:12:ac:c3:64:d5:69:34:
9a:04:3e:f5:4f:55:e8:fe:19:ba:62:9f:41:96:16:
61:d0:f5:d9:df:33:9f:f7:b2:42:53:91:a0:f0:6b:
3b:91:d7:a4:5b:f8:75:ee:67:e3:24:76:0a:55:8b:
5b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:A8:87:E9:25:FF:7C:3D:3F:52:E0:EF:0F:90:6C:BF:11:0B:AB
X509v3 Authority Key Identifier:
keyid:AF:65:0B:ED:D1:6B:4E:3C:98:11:6E:E3:2B:12:17:4F:97:48:5C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2UL7dFrTjyYEW7jKxIXT5dIXIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/361f9a-c94b-4411-9b65-6af6072754a3/1/r2UL7dFrTjyYEW7jKxIXT5dIXIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:1a:e4:2b:d4:91:59:29:32:1e:f1:b5:f2:0d:66:4c:b2:
5d:74:77:84:03:53:55:37:e1:c0:1c:67:79:9b:b7:47:80:eb:
91:e7:e8:9e:8a:31:79:b2:50:05:d3:e7:98:0e:81:b6:f8:b5:
9d:d4:b7:94:7f:47:38:77:d2:70:c8:91:5c:c8:a9:b1:1b:50:
1e:11:c9:be:91:e5:85:c9:2f:4b:4b:34:fa:61:24:63:46:4f:
98:09:16:a9:4b:7f:c4:98:f5:91:66:db:bb:d6:22:a3:35:3b:
d4:fa:fb:2a:b5:17:68:82:aa:1f:7d:05:a3:c6:bb:f4:7a:56:
13:42:58:28:f4:ca:5f:b1:a2:81:d9:4e:d0:b5:bf:cd:c6:f6:
07:d5:74:63:6a:aa:91:b9:16:4e:60:82:ab:57:c0:3c:34:a4:
3c:40:2b:64:4e:59:2a:ac:63:c5:91:8e:95:e9:69:c3:81:67:
a7:9e:1c:3e:68:c7:d7:a1:76:a4:0a:17:38:4b:57:af:35:c2:
54:e8:53:ef:08:a0:de:40:2f:94:18:fa:31:da:5b:3f:f7:69:
2a:f8:46:45:dd:66:3c:e3:2f:77:79:4d:7f:fc:af:ae:ad:8e:
cf:ba:a7:ef:57:24:8c:2c:42:97:a8:2b:92:51:27:dd:81:69:
c0:be:ee:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCazS/ZEzfpqatHhlTv6K/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNjUwYmVkZDE2YjRlM2M5ODExNmVlMzJiMTIxNzRmOTc0
ODVjOGEwHhcNMjQwNzEwMDQwMDU2WhcNMjQwNzExMDQwMDU2WjAzMTEwLwYDVQQD
EyhkNjFlYTg4N2U5MjVmZjdjM2QzZjUyZTBlZjBmOTA2Y2JmMTEwYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw40imFQK2KmKDIjBgaTW4WYhr2rV
OK2NX7VSDq4eVC2NsuNJZW4gThiQTSWwfXgNWYpZpd0eYYbNYxx3ZGZJQ3InLyci
1ZyRtMgGEXH1yJu2A2fPwydwRTI6FttOqqMjdvYfAcBnbV2v2qCIOpcQu6OckWaK
TUHRjXWTBZf2Z1/uwii9N7XA64Ew79GXrGsQ10568whTU1DmW2bOYbUoIg/RKthC
9HWBOOl02X0Dw9iBHtds3+HLN236xD1OYHoUvNSUIee/7Q2VHBKsw2TVaTSaBD71
T1Xo/hm6Yp9BlhZh0PXZ3zOf97JCU5Gg8Gs7kdekW/h17mfjJHYKVYtbawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYeqIfpJf98PT9S4O8PkGy/EQurMB8GA1UdIwQY
MBaAFK9lC+3Ra048mBFu4ysSF0+XSFyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJVTDdkRnJUanlZRVc3akt4SVhUNWRJWElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjFmOWEtYzk0Yi00NDExLTliNjUt
NmFmNjA3Mjc1NGEzLzEvcjJVTDdkRnJUanlZRVc3akt4SVhUNWRJWElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zNjFmOWEtYzk0Yi00NDExLTliNjUtNmFmNjA3Mjc1NGEz
LzEvcjJVTDdkRnJUanlZRVc3akt4SVhUNWRJWElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidca5CvU
kVkpMh7xtfINZkyyXXR3hANTVTfhwBxneZu3R4DrkefonooxebJQBdPnmA6Btvi1
ndS3lH9HOHfScMiRXMipsRtQHhHJvpHlhckvS0s0+mEkY0ZPmAkWqUt/xJj1kWbb
u9YiozU71Pr7KrUXaIKqH30Fo8a79HpWE0JYKPTKX7GigdlO0LW/zcb2B9V0Y2qq
kbkWTmCCq1fAPDSkPEArZE5ZKqxjxZGOlelpw4Fnp54cPmjH16F2pAoXOEtXrzXC
VOhT7wig3kAvlBj6MdpbP/dpKvhGRd1mPOMvd3lNf/yvrq2Oz7qn71ckjCxCl6gr
klEn3YFpwL7u3Q==
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:05 2025 by rpki-client