Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.mft
File: CnCRE0Rw8E7eK8-xrw9YrCtfEvM.mft (raw, json)
Hash identifier: YP7MH09EQsSgptRMa4YRCF7EIoOnPnxMoirPXD8UXHs=
Subject key identifier: 7E:0A:69:DA:E9:28:5C:FD:24:7B:D8:66:17:8E:CE:07:AD:3A:BB:94
Authority key identifier: 0A:70:91:13:44:70:F0:4E:DE:2B:CF:B1:AF:0F:58:AC:2B:5F:12:F3
Certificate issuer: /CN=0a7091134470f04ede2bcfb1af0f58ac2b5f12f3
Certificate serial: 018BB808C9A00A3C3170D77170CE99D62216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.mft
Manifest number: 084D
Signing time: Fri 10 Nov 2023 07:01:05 +0000
Manifest this update: Fri 10 Nov 2023 07:01:05 +0000
Manifest next update: Sat 11 Nov 2023 07:01:05 +0000
Files and hashes: 1: CnCRE0Rw8E7eK8-xrw9YrCtfEvM.crl (hash: HhBKMooOMdQNypRLe2pdVAAnbnGVJvMOegs65pAyRVc=)
2: QsNMkQK3CrW4TqGCXwGqNiwqiSk.roa (hash: 17N/ynGDJ68XbTYaiFydIDIxLvuO8fFTDTSX1ZKAZlM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:08:c9:a0:0a:3c:31:70:d7:71:70:ce:99:d6:22:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7091134470f04ede2bcfb1af0f58ac2b5f12f3
Validity
Not Before: Nov 10 07:01:05 2023 GMT
Not After : Nov 11 07:01:05 2023 GMT
Subject: CN=7e0a69dae9285cfd247bd866178ece07ad3abb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:83:e2:58:5c:85:a2:ec:48:45:df:3c:fa:
55:f6:c8:61:35:78:e0:e1:33:82:d2:61:39:c6:0e:
4b:9c:f2:45:3d:c4:43:83:5a:93:27:7b:de:2c:7f:
ff:3f:21:1c:0a:37:dd:8a:d8:e1:85:5c:94:7b:ae:
65:47:5f:c9:54:2e:7d:c4:a5:fd:ad:fe:5d:e4:8b:
d7:14:b5:fd:5d:d9:e5:94:dd:5a:93:89:dd:d5:f6:
89:6c:26:3b:3d:1d:e1:ea:37:45:5f:4d:b2:14:1c:
aa:dd:60:d4:62:ae:f7:c7:41:fa:8d:74:73:f7:da:
85:58:9b:69:0d:0d:ba:33:9b:c6:f4:b7:e9:f4:bd:
6c:0b:0b:6c:29:2e:be:b9:e0:db:12:04:6e:e1:2e:
a6:80:9a:00:1b:22:86:a2:bb:2d:d5:04:f0:7e:da:
0d:a4:83:a4:d7:01:5b:8b:30:49:dc:e6:97:52:d3:
87:0b:7a:42:e4:da:37:93:02:3f:e9:3c:59:37:e7:
9d:95:b7:b6:89:78:b9:79:5f:26:86:74:e0:84:71:
65:57:7e:3e:ea:b5:3a:61:af:14:06:40:c3:79:0e:
f7:c5:22:bd:54:79:63:02:28:b1:02:40:75:9f:85:
eb:9e:b7:e1:61:72:7f:40:97:d8:c2:d9:76:a0:be:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:69:DA:E9:28:5C:FD:24:7B:D8:66:17:8E:CE:07:AD:3A:BB:94
X509v3 Authority Key Identifier:
keyid:0A:70:91:13:44:70:F0:4E:DE:2B:CF:B1:AF:0F:58:AC:2B:5F:12:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/163fd6-f9d5-477c-94db-0eeb564305c1/1/CnCRE0Rw8E7eK8-xrw9YrCtfEvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:80:e9:0c:41:f4:b4:cc:fb:77:e9:42:bf:06:9a:66:3b:
01:e0:33:42:a6:80:4e:fa:23:98:6a:a7:0a:eb:20:c6:db:3f:
8a:de:8c:e3:89:bd:d9:93:e6:69:e1:b1:be:1f:69:8f:08:36:
92:5d:07:75:f6:7a:b3:80:82:47:0d:30:bb:5f:80:52:39:f0:
b4:57:74:16:02:4d:42:48:46:5c:4e:21:76:e1:2f:fd:3c:8b:
45:0d:4a:dd:40:a1:25:be:ee:63:ea:33:8c:48:fe:65:59:82:
eb:36:e0:00:36:1c:fd:03:c7:eb:67:2a:29:62:37:f6:16:1a:
9b:9e:70:c2:b4:0d:ba:51:f1:17:13:5b:2d:9f:df:e4:a8:e9:
cd:de:3b:3b:3f:25:8d:19:e2:f1:09:74:21:c4:99:20:f6:21:
0b:17:c4:82:78:fa:11:11:81:23:81:74:20:70:48:e2:f1:64:
fd:9f:bd:54:c5:3f:db:4a:10:cb:68:c9:30:64:43:15:09:f3:
45:23:04:5d:b4:f5:1d:d1:ba:f7:71:00:75:f7:e1:58:78:8c:
ef:d8:92:da:d7:06:0f:66:dc:8b:73:be:3b:e0:48:09:30:27:
a2:fd:85:66:a2:79:b4:7e:54:e5:b0:2f:1a:1c:52:5c:91:69:
16:86:fc:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYu4CMmgCjwxcNdxcM6Z1iIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzA5MTEzNDQ3MGYwNGVkZTJiY2ZiMWFmMGY1OGFjMmI1
ZjEyZjMwHhcNMjMxMTEwMDcwMTA1WhcNMjMxMTExMDcwMTA1WjAzMTEwLwYDVQQD
Eyg3ZTBhNjlkYWU5Mjg1Y2ZkMjQ3YmQ4NjYxNzhlY2UwN2FkM2FiYjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0iD4lhchaLsSEXfPPpV9shhNXjg
4TOC0mE5xg5LnPJFPcRDg1qTJ3veLH//PyEcCjfditjhhVyUe65lR1/JVC59xKX9
rf5d5IvXFLX9XdnllN1ak4nd1faJbCY7PR3h6jdFX02yFByq3WDUYq73x0H6jXRz
99qFWJtpDQ26M5vG9Lfp9L1sCwtsKS6+ueDbEgRu4S6mgJoAGyKGorst1QTwftoN
pIOk1wFbizBJ3OaXUtOHC3pC5No3kwI/6TxZN+edlbe2iXi5eV8mhnTghHFlV34+
6rU6Ya8UBkDDeQ73xSK9VHljAiixAkB1n4XrnrfhYXJ/QJfYwtl2oL4h6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4KadrpKFz9JHvYZheOzgetOruUMB8GA1UdIwQY
MBaAFApwkRNEcPBO3ivPsa8PWKwrXxLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25DUkUwUnc4RTdlSzgteHJ3OVlyQ3RmRXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xNjNmZDYtZjlkNS00NzdjLTk0ZGIt
MGVlYjU2NDMwNWMxLzEvQ25DUkUwUnc4RTdlSzgteHJ3OVlyQ3RmRXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8xNjNmZDYtZjlkNS00NzdjLTk0ZGItMGVlYjU2NDMwNWMx
LzEvQ25DUkUwUnc4RTdlSzgteHJ3OVlyQ3RmRXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/WA6QxB
9LTM+3fpQr8GmmY7AeAzQqaATvojmGqnCusgxts/it6M44m92ZPmaeGxvh9pjwg2
kl0HdfZ6s4CCRw0wu1+AUjnwtFd0FgJNQkhGXE4hduEv/TyLRQ1K3UChJb7uY+oz
jEj+ZVmC6zbgADYc/QPH62cqKWI39hYam55wwrQNulHxFxNbLZ/f5Kjpzd47Oz8l
jRni8Ql0IcSZIPYhCxfEgnj6ERGBI4F0IHBI4vFk/Z+9VMU/20oQy2jJMGRDFQnz
RSMEXbT1HdG693EAdffhWHiM79iS2tcGD2bci3O+O+BICTAnov2FZqJ5tH5U5bAv
GhxSXJFpFob8uw==
-----END CERTIFICATE-----
Generated at Fri Nov 10 09:01:49 2023 by rpki-client on console-fra.rpki-client.org