Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b30aa1-0dc2-4626-8cd1-6f03557518c9/1/2coGphmdRAW902Dv1UOfZGCrjBE.mft
File: 2coGphmdRAW902Dv1UOfZGCrjBE.mft (raw, json)
Hash identifier: jk5lL5ABAyDViFV8o4ZZyjd8bWfv+yowVeg4vWgAQFQ=
Subject key identifier: 50:68:EE:64:30:85:E8:28:84:8D:BB:62:76:DF:3A:D8:1D:44:F0:B4
Authority key identifier: D9:CA:06:A6:19:9D:44:05:BD:D3:60:EF:D5:43:9F:64:60:AB:8C:11
Certificate issuer: /CN=d9ca06a6199d4405bdd360efd5439f6460ab8c11
Certificate serial: 019352074985633526A13F9A898427F1D273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2coGphmdRAW902Dv1UOfZGCrjBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b30aa1-0dc2-4626-8cd1-6f03557518c9/1/2coGphmdRAW902Dv1UOfZGCrjBE.mft
Manifest number: 0A9C
Signing time: Fri 22 Nov 2024 04:00:29 +0000
Manifest this update: Fri 22 Nov 2024 04:00:29 +0000
Manifest next update: Sat 23 Nov 2024 04:00:29 +0000
Files and hashes: 1: 2coGphmdRAW902Dv1UOfZGCrjBE.crl (hash: l8xL6Wg7AxHj2CW34eHGFFq7Bl354LTGrU76eSNaVB4=)
2: DvcKeUMEUAaI8htM47WqmZwalOw.roa (hash: bC/OL7bJ/o3ZwPWpLbKNZG3m8wCtYAtAM0N6pdZmr9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:49:85:63:35:26:a1:3f:9a:89:84:27:f1:d2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ca06a6199d4405bdd360efd5439f6460ab8c11
Validity
Not Before: Nov 22 04:00:29 2024 GMT
Not After : Nov 23 04:00:29 2024 GMT
Subject: CN=5068ee643085e828848dbb6276df3ad81d44f0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:de:cc:77:73:bc:ea:20:92:a2:da:56:62:
b2:bb:c4:82:4b:71:0a:bd:e4:0e:98:d1:cd:60:52:
58:f1:14:06:be:b5:8e:7d:71:68:ed:9f:5b:d0:94:
c2:e9:b8:94:b8:27:9e:54:16:98:2d:03:9e:63:f7:
6a:cc:16:35:de:de:26:88:c3:55:61:55:97:e2:d9:
59:08:8e:c0:94:11:dd:7d:87:45:f3:4d:6b:21:fd:
e9:48:dd:8d:fe:a2:1a:4f:b1:07:6a:42:a0:79:99:
c9:b4:fa:09:79:69:b2:3b:ba:01:ce:c9:7b:c5:e8:
80:a9:2c:3d:2c:4e:b7:9f:3b:75:2e:97:bf:84:aa:
2c:9e:2f:34:de:98:f0:85:a8:97:80:ee:1a:a9:4e:
d7:4c:49:74:a0:88:80:79:de:d9:a2:8a:0c:5e:5d:
73:da:4b:de:34:10:11:6a:85:57:73:d8:da:23:9d:
33:be:3c:49:75:00:14:d3:e5:87:07:19:a2:f5:e6:
18:fe:5a:a9:38:aa:c1:00:72:ab:b5:6d:24:85:d3:
cf:a8:3d:bf:46:bb:87:12:85:83:b8:ca:83:c0:05:
c2:48:82:6e:9d:60:52:42:f6:96:81:08:10:d1:af:
f2:3e:a5:78:4f:3e:b9:97:97:13:86:19:2d:62:b6:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:EE:64:30:85:E8:28:84:8D:BB:62:76:DF:3A:D8:1D:44:F0:B4
X509v3 Authority Key Identifier:
keyid:D9:CA:06:A6:19:9D:44:05:BD:D3:60:EF:D5:43:9F:64:60:AB:8C:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2coGphmdRAW902Dv1UOfZGCrjBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b30aa1-0dc2-4626-8cd1-6f03557518c9/1/2coGphmdRAW902Dv1UOfZGCrjBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b30aa1-0dc2-4626-8cd1-6f03557518c9/1/2coGphmdRAW902Dv1UOfZGCrjBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:61:95:72:81:17:ce:3d:cf:f8:6d:1a:9d:d9:c7:60:03:1d:
1d:35:e6:38:b5:8b:67:7c:2a:28:4b:70:66:64:f8:10:5b:a1:
b2:29:f2:bb:c6:62:f1:46:2a:13:57:b8:8d:ab:35:64:b7:73:
79:e1:97:79:40:2b:83:9d:cd:55:b6:d8:35:1d:07:87:84:78:
9a:55:24:2a:97:e9:90:64:fe:f5:be:98:93:ec:68:24:cc:7d:
21:15:bd:9e:3e:91:eb:6d:20:a0:89:b7:e4:c3:0c:84:cc:1d:
e1:5c:1d:2c:f0:4f:e7:0f:64:72:f1:28:a9:83:9d:43:dd:8f:
ff:f1:1e:db:44:d6:1b:86:c8:28:01:4d:47:98:58:7b:cb:4e:
80:9a:a1:2f:19:95:41:bc:20:f9:32:1f:aa:95:88:33:75:95:
fe:c1:17:24:4e:b7:69:80:07:39:b7:98:c3:64:7b:36:3c:a9:
b8:d3:7a:ab:be:ae:5a:99:34:a6:09:24:ff:44:89:8c:0c:ef:
8b:e4:db:ad:8c:21:38:82:07:7f:2f:19:c5:dc:54:66:92:63:
79:b5:3d:86:57:af:66:6c:b9:cb:2c:4c:b1:93:62:50:f7:37:
33:b8:00:dc:28:87:b2:70:b5:9d:be:4b:80:7e:8b:3b:78:aa:
bc:c1:e1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSB0mFYzUmoT+aiYQn8dJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Y2EwNmE2MTk5ZDQ0MDViZGQzNjBlZmQ1NDM5ZjY0NjBh
YjhjMTEwHhcNMjQxMTIyMDQwMDI5WhcNMjQxMTIzMDQwMDI5WjAzMTEwLwYDVQQD
Eyg1MDY4ZWU2NDMwODVlODI4ODQ4ZGJiNjI3NmRmM2FkODFkNDRmMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotnezHdzvOogkqLaVmKyu8SCS3EK
veQOmNHNYFJY8RQGvrWOfXFo7Z9b0JTC6biUuCeeVBaYLQOeY/dqzBY13t4miMNV
YVWX4tlZCI7AlBHdfYdF801rIf3pSN2N/qIaT7EHakKgeZnJtPoJeWmyO7oBzsl7
xeiAqSw9LE63nzt1Lpe/hKosni803pjwhaiXgO4aqU7XTEl0oIiAed7ZoooMXl1z
2kveNBARaoVXc9jaI50zvjxJdQAU0+WHBxmi9eYY/lqpOKrBAHKrtW0khdPPqD2/
RruHEoWDuMqDwAXCSIJunWBSQvaWgQgQ0a/yPqV4Tz65l5cThhktYrZEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBo7mQwhegohI27YnbfOtgdRPC0MB8GA1UdIwQY
MBaAFNnKBqYZnUQFvdNg79VDn2Rgq4wRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmNvR3BobWRSQVc5MDJEdjFVT2ZaR0NyakJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMzBhYTEtMGRjMi00NjI2LThjZDEt
NmYwMzU1NzUxOGM5LzEvMmNvR3BobWRSQVc5MDJEdjFVT2ZaR0NyakJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iMzBhYTEtMGRjMi00NjI2LThjZDEtNmYwMzU1NzUxOGM5
LzEvMmNvR3BobWRSQVc5MDJEdjFVT2ZaR0NyakJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2GVcoEX
zj3P+G0andnHYAMdHTXmOLWLZ3wqKEtwZmT4EFuhsinyu8Zi8UYqE1e4jas1ZLdz
eeGXeUArg53NVbbYNR0Hh4R4mlUkKpfpkGT+9b6Yk+xoJMx9IRW9nj6R620goIm3
5MMMhMwd4VwdLPBP5w9kcvEoqYOdQ92P//Ee20TWG4bIKAFNR5hYe8tOgJqhLxmV
Qbwg+TIfqpWIM3WV/sEXJE63aYAHObeYw2R7NjypuNN6q76uWpk0pgkk/0SJjAzv
i+TbrYwhOIIHfy8ZxdxUZpJjebU9hlevZmy5yyxMsZNiUPc3M7gA3CiHsnC1nb5L
gH6LO3iqvMHhBw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:03 2025 by rpki-client