Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.mft
File: od17CslI1JsP4W6DkfIX3iGbfes.mft (raw, json)
Hash identifier: oYexvDx/PwnP5ckuW0yUAGl9OiUgZpYq43YUllyenrk=
Subject key identifier: 76:7B:17:B0:40:BE:CC:55:DD:58:37:29:CB:C5:F7:C2:6E:A3:33:9C
Authority key identifier: A1:DD:7B:0A:C9:48:D4:9B:0F:E1:6E:83:91:F2:17:DE:21:9B:7D:EB
Certificate issuer: /CN=a1dd7b0ac948d49b0fe16e8391f217de219b7deb
Certificate serial: 02367073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od17CslI1JsP4W6DkfIX3iGbfes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.mft
Manifest number: 02EA
Signing time: Tue 12 Apr 2022 01:16:23 +0000
Manifest this update: Tue 12 Apr 2022 01:16:23 +0000
Manifest next update: Wed 13 Apr 2022 01:16:23 +0000
Files and hashes: 1: UXLY--UISCvTcoSoMEIY5mT54t0.roa (hash: qP8L7WFbFuwHTnUibUVQ1k9ljEGOeWE54o9NWcPXi9Y=)
2: od17CslI1JsP4W6DkfIX3iGbfes.crl (hash: Ylt+3DFOFoKQE6fLqmgL3Bd+ceFa8oIV0UXVKfmCaww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37122163 (0x2367073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dd7b0ac948d49b0fe16e8391f217de219b7deb
Validity
Not Before: Apr 12 01:16:23 2022 GMT
Not After : Apr 13 01:16:23 2022 GMT
Subject: CN=767b17b040becc55dd583729cbc5f7c26ea3339c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:aa:76:7e:8e:48:93:cb:7e:4a:87:da:37:
b9:13:13:d3:b9:cd:5c:47:74:d1:9b:d7:92:eb:b7:
fa:b2:78:9d:29:f8:3c:e2:43:a6:1d:32:11:fb:a7:
69:29:2f:e9:7b:2b:a2:fa:1c:43:25:c3:02:b2:2c:
b1:4c:9b:6f:3e:fa:0a:fc:9f:82:62:e1:0e:f3:f9:
ba:b9:38:da:9d:4e:cf:c4:46:f0:e3:95:b7:7a:8c:
76:ea:1b:46:f4:0e:bf:4d:33:1f:60:f5:0d:f4:e5:
f1:a7:9e:2d:ec:91:94:6c:b3:54:4b:b0:94:75:b8:
a8:09:05:b7:5f:da:97:ef:e3:ec:08:f5:e0:fa:11:
df:a8:87:cc:96:c3:55:3f:cb:5c:5c:74:f4:34:b4:
68:6b:53:cf:8c:1b:9b:e9:0b:4d:54:f8:f3:45:77:
e1:5c:e3:26:ba:bb:32:ba:f7:e4:f2:09:20:87:a2:
47:28:1e:b6:53:9b:e5:d1:2e:8d:35:64:07:9b:96:
09:82:8f:fb:34:6f:73:43:fe:b2:69:49:e8:19:88:
3e:a2:ff:37:a1:df:b5:66:36:1e:64:13:ac:02:e2:
a1:49:83:4a:0b:1b:6f:e2:4a:a5:a9:67:c0:43:91:
32:94:8e:5a:e0:d9:6c:8c:30:ca:4f:e1:44:5b:6c:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7B:17:B0:40:BE:CC:55:DD:58:37:29:CB:C5:F7:C2:6E:A3:33:9C
X509v3 Authority Key Identifier:
keyid:A1:DD:7B:0A:C9:48:D4:9B:0F:E1:6E:83:91:F2:17:DE:21:9B:7D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od17CslI1JsP4W6DkfIX3iGbfes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a6:60:dc:ec:89:64:07:f4:5c:ad:f3:45:a4:3a:d2:c7:2d:
81:48:ad:9b:a0:de:43:06:7d:a0:de:e1:0e:c3:6e:61:04:9e:
d5:84:f3:ee:5e:3e:45:ee:98:ca:25:ff:6a:34:08:7a:ff:ce:
67:a0:80:24:38:eb:a8:dc:15:a1:ca:da:66:6d:24:71:0d:2b:
6f:cb:19:c8:52:b7:28:54:cf:e5:6a:d1:44:5a:1e:f6:34:72:
50:a3:04:36:4b:2d:f3:2d:3c:13:7b:d5:16:23:b7:d2:9c:19:
7f:d5:9e:8b:ae:3a:7b:e3:91:2a:fd:b2:42:3b:9c:41:45:c5:
aa:99:fc:9f:44:cd:ec:c9:87:73:64:72:b9:7f:36:dd:78:46:
73:a6:06:19:17:ce:5c:3c:09:ca:64:e2:aa:97:bf:c1:bc:80:
49:09:83:80:e3:09:ff:ba:5c:ea:88:c6:e7:ca:1e:51:41:12:
26:35:e6:af:52:39:aa:e8:ff:e8:dd:90:ad:9f:8e:5b:40:f6:
b1:f6:b1:5a:00:5c:4c:92:34:64:91:7d:da:6f:a8:93:88:93:
be:a8:a2:54:8d:7c:0e:5d:84:07:4a:bb:01:d4:49:41:71:8f:
67:ef:88:5a:5d:65:f2:11:50:e7:0d:e2:15:68:52:4a:ca:90:
0a:fe:6b:7c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEAjZwczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MWRkN2IwYWM5NDhkNDliMGZlMTZlODM5MWYyMTdkZTIxOWI3ZGViMB4XDTIyMDQx
MjAxMTYyM1oXDTIyMDQxMzAxMTYyM1owMzExMC8GA1UEAxMoNzY3YjE3YjA0MGJl
Y2M1NWRkNTgzNzI5Y2JjNWY3YzI2ZWEzMzM5YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKB5qnZ+jkiTy35Kh9o3uRMT07nNXEd00ZvXkuu3+rJ4nSn4
POJDph0yEfunaSkv6XsrovocQyXDArIssUybbz76CvyfgmLhDvP5urk42p1Oz8RG
8OOVt3qMduobRvQOv00zH2D1DfTl8aeeLeyRlGyzVEuwlHW4qAkFt1/al+/j7Aj1
4PoR36iHzJbDVT/LXFx09DS0aGtTz4wbm+kLTVT480V34VzjJrq7Mrr35PIJIIei
RygetlOb5dEujTVkB5uWCYKP+zRvc0P+smlJ6BmIPqL/N6HftWY2HmQTrALioUmD
Sgsbb+JKpalnwEORMpSOWuDZbIwwyk/hRFtsqYsCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBR2exewQL7MVd1YNynLxffCbqMznDAfBgNVHSMEGDAWgBSh3XsKyUjUmw/h
boOR8hfeIZt96zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29kMTdDc2xJMUpzUDRXNkRrZklYM2lHYmZlcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDIvYmZhMzM2LTRlNjMtNGRhOS04MDYzLWU1ZjNkMWExNzUxZC8x
L29kMTdDc2xJMUpzUDRXNkRrZklYM2lHYmZlcy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIv
YmZhMzM2LTRlNjMtNGRhOS04MDYzLWU1ZjNkMWExNzUxZC8xL29kMTdDc2xJMUpz
UDRXNkRrZklYM2lHYmZlcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACamYNzsiWQH9Fyt80WkOtLHLYFI
rZug3kMGfaDe4Q7DbmEEntWE8+5ePkXumMol/2o0CHr/zmeggCQ466jcFaHK2mZt
JHENK2/LGchStyhUz+Vq0URaHvY0clCjBDZLLfMtPBN71RYjt9KcGX/VnouuOnvj
kSr9skI7nEFFxaqZ/J9EzezJh3Nkcrl/Nt14RnOmBhkXzlw8Ccpk4qqXv8G8gEkJ
g4DjCf+6XOqIxufKHlFBEiY15q9SOaro/+jdkK2fjltA9rH2sVoAXEySNGSRfdpv
qJOIk76oolSNfA5dhAdKuwHUSUFxj2fviFpdZfIRUOcN4hVoUkrKkAr+a3w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:07 2024 by rpki-client on console-fra.rpki-client.org