Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/73a494-5fca-4b28-bf3e-b341c1db129c/1/Cm5DKzsPXt6iPAiFLkm0gTPAsxc.mft
File: Cm5DKzsPXt6iPAiFLkm0gTPAsxc.mft (raw, json)
Hash identifier: 1D00lmXZJqX8fNfIaw0uoFocddvK805D3ahf9RkcmY0=
Subject key identifier: F2:9B:15:18:13:FE:F3:2E:1C:7B:19:09:4C:A5:EB:0C:76:04:DE:64
Authority key identifier: 0A:6E:43:2B:3B:0F:5E:DE:A2:3C:08:85:2E:49:B4:81:33:C0:B3:17
Certificate issuer: /CN=0a6e432b3b0f5edea23c08852e49b48133c0b317
Certificate serial: 01884D0D6A7384B11191AE3B424505A8A4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cm5DKzsPXt6iPAiFLkm0gTPAsxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/73a494-5fca-4b28-bf3e-b341c1db129c/1/Cm5DKzsPXt6iPAiFLkm0gTPAsxc.mft
Manifest number: 01
Signing time: Wed 24 May 2023 09:18:24 +0000
Manifest this update: Wed 24 May 2023 09:18:24 +0000
Manifest next update: Thu 25 May 2023 09:18:24 +0000
Files and hashes: 1: Cm5DKzsPXt6iPAiFLkm0gTPAsxc.crl (hash: r8Hv+MuKZ0mH28+WRWukARPYNJfNpO4EF5wDelqJewA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:0d:6a:73:84:b1:11:91:ae:3b:42:45:05:a8:a4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a6e432b3b0f5edea23c08852e49b48133c0b317
Validity
Not Before: May 24 09:18:24 2023 GMT
Not After : May 25 09:18:24 2023 GMT
Subject: CN=f29b151813fef32e1c7b19094ca5eb0c7604de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:fd:58:79:9a:05:ec:33:3e:83:50:2b:58:
12:a4:0d:29:55:35:b6:c8:27:39:0c:9b:07:59:87:
c2:c6:b9:2b:75:3f:c0:74:2a:d5:6f:e4:98:c1:ca:
ac:ff:82:b3:76:06:2c:7e:c4:d9:67:1d:a4:78:09:
40:19:42:e0:ea:fd:2f:51:92:f5:63:e3:4b:ee:4d:
60:fb:ee:26:d2:ad:32:bc:4c:51:0a:23:e9:f1:58:
85:be:ce:98:28:eb:e3:70:c8:83:42:90:2f:90:2f:
92:75:ed:ee:ea:40:05:f9:58:98:15:2f:f9:85:2b:
7b:41:a7:c6:06:01:56:a2:23:69:8c:ff:48:a3:1a:
61:5a:3a:94:01:f9:de:73:f0:2b:6b:96:e0:12:0f:
d4:68:ac:bd:5b:23:f1:cc:e7:c3:02:f1:5e:ad:1b:
b8:6c:fd:9e:62:6c:4d:5b:cf:02:0b:e6:06:c2:d2:
68:28:c5:fc:ab:56:82:51:0e:9e:88:76:67:8e:8b:
c2:09:35:ce:c1:21:d1:cc:71:4d:ee:6c:9b:b9:1b:
2c:c6:19:5f:2b:36:1f:f7:bd:b6:12:f7:a0:b2:be:
72:25:23:03:f2:44:48:d3:d3:a1:23:e3:d5:30:30:
2d:b9:22:09:45:79:1d:94:a7:a5:d0:48:52:a5:26:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9B:15:18:13:FE:F3:2E:1C:7B:19:09:4C:A5:EB:0C:76:04:DE:64
X509v3 Authority Key Identifier:
keyid:0A:6E:43:2B:3B:0F:5E:DE:A2:3C:08:85:2E:49:B4:81:33:C0:B3:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cm5DKzsPXt6iPAiFLkm0gTPAsxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/73a494-5fca-4b28-bf3e-b341c1db129c/1/Cm5DKzsPXt6iPAiFLkm0gTPAsxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/73a494-5fca-4b28-bf3e-b341c1db129c/1/Cm5DKzsPXt6iPAiFLkm0gTPAsxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:56:62:32:61:ca:20:1f:29:dc:a1:3e:bb:2c:b9:3c:73:b4:
31:d0:48:ec:97:a9:5b:57:f1:ad:9a:aa:85:df:ca:a8:3c:e5:
cf:44:07:ed:f7:5b:67:75:d6:f7:72:f3:ef:13:0a:45:20:fe:
9e:20:cb:03:44:9b:0b:53:1f:39:60:1b:9b:50:8c:55:62:9f:
b3:c5:8d:54:a6:b9:6c:ab:dd:2d:c4:17:67:d4:34:2c:5b:b3:
5e:68:e8:25:08:fe:fa:69:90:e7:52:1b:1d:42:51:ce:84:8e:
aa:a6:84:41:d7:59:a1:03:88:9b:be:73:07:1b:1d:51:28:ec:
8c:1c:74:70:f0:55:df:57:de:56:d8:72:1f:1e:24:47:31:67:
a8:90:3c:aa:7f:6d:d9:5b:0d:6a:fb:12:3a:82:c9:ef:8b:3b:
bb:4d:13:e0:a0:cf:1f:fd:c5:0d:86:3d:e7:4b:54:24:54:90:
10:d8:81:83:f8:c9:f8:5e:2f:76:18:c0:da:48:d7:2c:ed:2a:
14:e8:67:49:1d:22:0a:f7:4b:f5:77:ca:19:d5:ba:6c:2d:70:
31:5d:76:6e:e0:76:a8:fc:d6:f6:61:c3:14:00:e6:21:a4:ed:
7a:60:9d:06:ba:75:5a:ae:38:74:46:56:a6:be:80:43:64:32:
54:7c:d4:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYhNDWpzhLERka47QkUFqKSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNmU0MzJiM2IwZjVlZGVhMjNjMDg4NTJlNDliNDgxMzNj
MGIzMTcwHhcNMjMwNTI0MDkxODI0WhcNMjMwNTI1MDkxODI0WjAzMTEwLwYDVQQD
EyhmMjliMTUxODEzZmVmMzJlMWM3YjE5MDk0Y2E1ZWIwYzc2MDRkZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCv9WHmaBewzPoNQK1gSpA0pVTW2
yCc5DJsHWYfCxrkrdT/AdCrVb+SYwcqs/4KzdgYsfsTZZx2keAlAGULg6v0vUZL1
Y+NL7k1g++4m0q0yvExRCiPp8ViFvs6YKOvjcMiDQpAvkC+Sde3u6kAF+ViYFS/5
hSt7QafGBgFWoiNpjP9IoxphWjqUAfnec/Ara5bgEg/UaKy9WyPxzOfDAvFerRu4
bP2eYmxNW88CC+YGwtJoKMX8q1aCUQ6eiHZnjovCCTXOwSHRzHFN7mybuRssxhlf
KzYf9722Evegsr5yJSMD8kRI09OhI+PVMDAtuSIJRXkdlKel0EhSpSZVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKbFRgT/vMuHHsZCUyl6wx2BN5kMB8GA1UdIwQY
MBaAFApuQys7D17eojwIhS5JtIEzwLMXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ201REt6c1BYdDZpUEFpRkxrbTBnVFBBc3hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83M2E0OTQtNWZjYS00YjI4LWJmM2Ut
YjM0MWMxZGIxMjljLzEvQ201REt6c1BYdDZpUEFpRkxrbTBnVFBBc3hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83M2E0OTQtNWZjYS00YjI4LWJmM2UtYjM0MWMxZGIxMjlj
LzEvQ201REt6c1BYdDZpUEFpRkxrbTBnVFBBc3hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1ZiMmHK
IB8p3KE+uyy5PHO0MdBI7JepW1fxrZqqhd/KqDzlz0QH7fdbZ3XW93Lz7xMKRSD+
niDLA0SbC1MfOWAbm1CMVWKfs8WNVKa5bKvdLcQXZ9Q0LFuzXmjoJQj++mmQ51Ib
HUJRzoSOqqaEQddZoQOIm75zBxsdUSjsjBx0cPBV31feVthyHx4kRzFnqJA8qn9t
2VsNavsSOoLJ74s7u00T4KDPH/3FDYY950tUJFSQENiBg/jJ+F4vdhjA2kjXLO0q
FOhnSR0iCvdL9XfKGdW6bC1wMV12buB2qPzW9mHDFADmIaTtemCdBrp1Wq44dEZW
pr6AQ2QyVHzUUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:54 2024 by rpki-client on console-fra.rpki-client.org