Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/XzJmgaFhKYrbnsUzWapBpWp3Xm0.mft
File: XzJmgaFhKYrbnsUzWapBpWp3Xm0.mft (raw, json)
Hash identifier: 2Jv163nyE07RR54w15zN9+Bhq5CScmfgzzYX1nIVxbM=
Subject key identifier: 8F:1D:16:60:8D:3E:07:29:D1:50:CA:59:01:03:A5:C0:A7:21:A3:06
Authority key identifier: 5F:32:66:81:A1:61:29:8A:DB:9E:C5:33:59:AA:41:A5:6A:77:5E:6D
Certificate issuer: /CN=5f326681a161298adb9ec53359aa41a56a775e6d
Certificate serial: 0186E3D025BE88B5E784A98DECC133B21D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzJmgaFhKYrbnsUzWapBpWp3Xm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/XzJmgaFhKYrbnsUzWapBpWp3Xm0.mft
Manifest number: 0C9A
Signing time: Wed 15 Mar 2023 05:48:34 +0000
Manifest this update: Wed 15 Mar 2023 05:48:34 +0000
Manifest next update: Thu 16 Mar 2023 05:48:34 +0000
Files and hashes: 1: SSF7yUUS357qmCuS080X2n44c6o.roa (hash: ZJ5dLqmMb90pVRSetviqhhRS0PRzMr4/UFSEjxAoCI8=)
2: XzJmgaFhKYrbnsUzWapBpWp3Xm0.crl (hash: rRs3TIkRO8atzmg5zhhtBALyb3Ea6GUs0oPuDmMqdd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e3:d0:25:be:88:b5:e7:84:a9:8d:ec:c1:33:b2:1d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f326681a161298adb9ec53359aa41a56a775e6d
Validity
Not Before: Mar 15 05:48:34 2023 GMT
Not After : Mar 16 05:48:34 2023 GMT
Subject: CN=8f1d16608d3e0729d150ca590103a5c0a721a306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:71:97:a4:aa:a9:b1:6d:76:08:8b:9a:2a:
e6:19:9c:46:d5:e6:28:d9:c3:49:21:1d:25:e3:55:
b1:ac:2c:94:f2:b8:bf:f4:cb:6c:87:d1:ff:2d:0a:
a4:3e:ae:7c:b6:e7:3b:ca:d1:01:83:18:dd:9b:56:
4a:e0:36:cd:93:d6:3f:76:fe:32:8c:d1:f4:45:c8:
37:ad:93:33:22:69:f0:3f:10:f1:f4:95:e2:93:9a:
e4:34:39:04:c5:17:5c:b1:ee:4c:f8:43:c3:5a:fb:
57:4f:6a:e5:11:ae:81:de:44:a8:27:de:36:5c:d2:
f4:72:0d:14:98:96:ac:d5:31:e2:9f:3f:ae:e9:67:
55:94:3b:2d:42:7b:3f:18:cd:30:4c:4b:8e:f8:18:
05:82:fa:1d:c6:c8:d9:7f:7c:f3:55:86:19:f5:51:
11:1f:38:e2:78:18:40:d9:2d:db:22:a3:65:27:96:
0f:35:d1:dc:53:92:98:96:ea:00:43:46:fa:e0:44:
cd:26:4a:a4:05:5b:ce:4a:c9:fd:5e:57:d2:12:8a:
96:a3:8e:72:41:5a:d7:09:2f:20:f1:dd:ab:d8:d7:
ce:1b:8e:4c:55:8d:1e:e5:05:21:f3:cc:88:fc:a4:
26:2a:3c:a0:5a:33:0c:ef:60:73:12:76:50:08:eb:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1D:16:60:8D:3E:07:29:D1:50:CA:59:01:03:A5:C0:A7:21:A3:06
X509v3 Authority Key Identifier:
keyid:5F:32:66:81:A1:61:29:8A:DB:9E:C5:33:59:AA:41:A5:6A:77:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzJmgaFhKYrbnsUzWapBpWp3Xm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/XzJmgaFhKYrbnsUzWapBpWp3Xm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ff8091-b193-4cfc-9ef0-463de0f6969f/1/XzJmgaFhKYrbnsUzWapBpWp3Xm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e0:12:e2:82:1e:f8:b5:cb:df:f5:52:c6:43:e4:a3:af:59:
f6:65:47:40:72:b9:84:bc:43:30:0b:ea:87:0b:78:6f:1e:0a:
50:f6:38:24:67:24:aa:0d:0e:d8:c6:ec:06:53:60:c5:d4:2c:
b2:04:8c:36:6c:08:7a:fb:a9:15:f4:88:ca:0a:9e:1a:a4:e9:
42:e3:45:2e:68:06:7d:32:d3:61:c7:2c:f3:0c:9b:fc:7f:4b:
e1:30:d7:2a:b0:3e:e3:14:01:94:c7:f3:5d:ed:d7:49:36:15:
20:16:36:73:b8:bb:bd:31:1f:00:58:3c:dd:d1:6c:15:ed:be:
36:75:ed:86:c5:d9:75:07:31:3e:f6:81:27:74:e8:dd:8a:76:
57:36:9d:24:5c:3a:d2:3f:f3:4d:02:f9:ff:41:f7:87:df:33:
8f:63:e0:d4:01:3e:b7:5c:e2:ef:19:af:4e:d1:12:73:92:bf:
76:5e:29:3e:0a:44:5a:ec:89:5e:8d:fb:d5:1f:ef:7c:10:27:
13:05:47:6f:04:16:21:a7:03:3c:4f:0c:f1:aa:f9:e3:0b:5b:
b4:93:46:20:a3:bc:53:4d:3f:7a:5e:7f:b1:ce:6a:39:33:e9:
06:fc:e2:77:39:0b:c9:18:75:05:be:0e:9c:8c:54:27:82:67:
34:2f:f6:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYbj0CW+iLXnhKmN7MEzsh1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMzI2NjgxYTE2MTI5OGFkYjllYzUzMzU5YWE0MWE1NmE3
NzVlNmQwHhcNMjMwMzE1MDU0ODM0WhcNMjMwMzE2MDU0ODM0WjAzMTEwLwYDVQQD
Eyg4ZjFkMTY2MDhkM2UwNzI5ZDE1MGNhNTkwMTAzYTVjMGE3MjFhMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoJxl6SqqbFtdgiLmirmGZxG1eYo
2cNJIR0l41WxrCyU8ri/9Mtsh9H/LQqkPq58tuc7ytEBgxjdm1ZK4DbNk9Y/dv4y
jNH0Rcg3rZMzImnwPxDx9JXik5rkNDkExRdcse5M+EPDWvtXT2rlEa6B3kSoJ942
XNL0cg0UmJas1THinz+u6WdVlDstQns/GM0wTEuO+BgFgvodxsjZf3zzVYYZ9VER
HzjieBhA2S3bIqNlJ5YPNdHcU5KYluoAQ0b64ETNJkqkBVvOSsn9XlfSEoqWo45y
QVrXCS8g8d2r2NfOG45MVY0e5QUh88yI/KQmKjygWjMM72BzEnZQCOtmZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8dFmCNPgcp0VDKWQEDpcCnIaMGMB8GA1UdIwQY
MBaAFF8yZoGhYSmK257FM1mqQaVqd15tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHpKbWdhRmhLWXJibnNVeldhcEJwV3AzWG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mZjgwOTEtYjE5My00Y2ZjLTllZjAt
NDYzZGUwZjY5NjlmLzEvWHpKbWdhRmhLWXJibnNVeldhcEJwV3AzWG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mZjgwOTEtYjE5My00Y2ZjLTllZjAtNDYzZGUwZjY5Njlm
LzEvWHpKbWdhRmhLWXJibnNVeldhcEJwV3AzWG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOAS4oIe
+LXL3/VSxkPko69Z9mVHQHK5hLxDMAvqhwt4bx4KUPY4JGckqg0O2MbsBlNgxdQs
sgSMNmwIevupFfSIygqeGqTpQuNFLmgGfTLTYccs8wyb/H9L4TDXKrA+4xQBlMfz
Xe3XSTYVIBY2c7i7vTEfAFg83dFsFe2+NnXthsXZdQcxPvaBJ3To3Yp2VzadJFw6
0j/zTQL5/0H3h98zj2Pg1AE+t1zi7xmvTtESc5K/dl4pPgpEWuyJXo371R/vfBAn
EwVHbwQWIacDPE8M8ar54wtbtJNGIKO8U00/el5/sc5qOTPpBvzidzkLyRh1Bb4O
nIxUJ4JnNC/2NQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:18 2024 by rpki-client on console-fra.rpki-client.org