Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/d61183-2bea-4dd0-b2b2-c3e7b6e14f58/1/0KFNCwitQSsA1YbeqInubaxPXe8.mft
File: 0KFNCwitQSsA1YbeqInubaxPXe8.mft (raw, json)
Hash identifier: Th7ELzQ2O2iUpIULjaGyPpCr7/r9D5QQeOzIvjEAdFA=
Subject key identifier: AF:CC:4F:D1:53:ED:DF:DB:16:92:0F:1C:5C:A7:B6:95:A7:88:25:56
Authority key identifier: D0:A1:4D:0B:08:AD:41:2B:00:D5:86:DE:A8:89:EE:6D:AC:4F:5D:EF
Certificate issuer: /CN=d0a14d0b08ad412b00d586dea889ee6dac4f5def
Certificate serial: 018E30647380A2A564E18612D1C97B81CADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFNCwitQSsA1YbeqInubaxPXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/d61183-2bea-4dd0-b2b2-c3e7b6e14f58/1/0KFNCwitQSsA1YbeqInubaxPXe8.mft
Manifest number: 04F3
Signing time: Tue 12 Mar 2024 02:01:13 +0000
Manifest this update: Tue 12 Mar 2024 02:01:13 +0000
Manifest next update: Wed 13 Mar 2024 02:01:13 +0000
Files and hashes: 1: 0KFNCwitQSsA1YbeqInubaxPXe8.crl (hash: 5TLdZ+Mw3EetZQzpBoO1j1FXDXfoUCYQo3Kg+D+NE/4=)
2: 5KfOePFpwhVeTsupVvFI4KOG81g.roa (hash: AqVXHByd0nvTqr7+HKo4AFF5KSSe49UiLbiDuHDtDxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:30:64:73:80:a2:a5:64:e1:86:12:d1:c9:7b:81:ca:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a14d0b08ad412b00d586dea889ee6dac4f5def
Validity
Not Before: Mar 12 02:01:13 2024 GMT
Not After : Mar 13 02:01:13 2024 GMT
Subject: CN=afcc4fd153eddfdb16920f1c5ca7b695a7882556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:10:b3:ff:24:40:cb:1d:aa:99:69:86:52:
70:eb:f4:a4:aa:bf:8f:82:b7:9c:5f:de:f7:2e:4a:
a6:2b:ac:83:22:15:30:6c:7d:45:80:9a:15:52:9d:
22:30:61:d1:9d:fe:1c:16:de:fc:44:51:3a:4c:99:
e0:42:8e:eb:40:59:7a:e2:16:f6:c7:1b:71:41:05:
da:28:5a:cd:17:20:07:1c:63:a8:05:f6:cc:dc:83:
d9:e7:af:dc:63:e4:73:44:e3:85:ea:ff:81:a7:78:
f1:55:97:2e:92:8f:b1:71:ed:ce:6e:dd:5e:84:56:
f3:18:04:91:5c:65:fc:eb:62:9a:82:33:da:20:0f:
14:cc:7b:d3:c3:8c:86:a3:b3:f9:ba:ac:20:95:97:
af:c3:c7:3d:ff:50:31:38:73:f4:8e:ed:91:e6:23:
76:b8:8a:02:af:d5:47:a2:cb:5c:2c:ca:6d:81:92:
24:67:7a:ed:7d:54:63:64:4b:d9:c5:23:4f:94:22:
1a:37:01:14:72:61:a9:00:a8:a4:65:50:7a:44:2d:
23:1f:1d:25:a8:22:54:02:bb:59:ca:39:ff:a8:0b:
01:e5:ba:54:9c:1f:d3:1b:7a:ee:40:33:54:fd:c4:
7d:ea:f5:8d:2b:a6:7d:89:68:56:cf:16:81:f8:cf:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CC:4F:D1:53:ED:DF:DB:16:92:0F:1C:5C:A7:B6:95:A7:88:25:56
X509v3 Authority Key Identifier:
keyid:D0:A1:4D:0B:08:AD:41:2B:00:D5:86:DE:A8:89:EE:6D:AC:4F:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFNCwitQSsA1YbeqInubaxPXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d61183-2bea-4dd0-b2b2-c3e7b6e14f58/1/0KFNCwitQSsA1YbeqInubaxPXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d61183-2bea-4dd0-b2b2-c3e7b6e14f58/1/0KFNCwitQSsA1YbeqInubaxPXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b0:28:69:c2:ef:fa:d4:49:e7:33:bd:da:0e:d5:0a:47:24:
ef:a7:80:48:64:15:86:a4:41:fa:61:3a:72:3c:1d:5a:dd:53:
05:98:78:79:a4:95:f7:3b:73:26:66:f3:52:7b:b2:9e:1d:af:
8b:49:34:b8:29:67:54:45:bc:fc:37:1b:e4:f9:41:33:2d:6e:
3e:e7:cc:f1:c3:49:87:c6:fb:b7:36:0b:96:52:5c:87:f7:5d:
b2:fd:f5:7f:e8:78:27:af:0f:ca:36:0b:cc:52:bb:1c:40:1b:
87:d1:8e:76:fc:16:2c:a0:de:ef:fd:ce:d5:79:33:bc:aa:71:
41:f9:46:66:84:56:d4:8f:a8:67:8a:74:78:98:29:d8:c7:df:
61:04:9e:54:db:56:13:d3:b5:46:5c:94:e4:ca:82:f8:29:00:
d4:dc:20:9d:55:e3:12:90:4b:90:83:f0:36:19:3a:85:cd:52:
bf:87:5c:b9:14:ed:45:e3:4b:3a:f2:f8:59:5b:35:8b:e7:25:
b2:94:3e:f8:e5:9d:a9:25:f0:76:a8:f8:2d:73:26:aa:70:ba:
02:01:37:2f:6a:20:2d:d4:23:f8:92:8a:4b:ee:9d:da:23:f1:
aa:bb:9a:4d:c8:76:e1:2c:ac:7e:68:a1:25:40:bc:7f:87:24:
20:e0:a3:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY4wZHOAoqVk4YYS0cl7gcrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTE0ZDBiMDhhZDQxMmIwMGQ1ODZkZWE4ODllZTZkYWM0
ZjVkZWYwHhcNMjQwMzEyMDIwMTEzWhcNMjQwMzEzMDIwMTEzWjAzMTEwLwYDVQQD
EyhhZmNjNGZkMTUzZWRkZmRiMTY5MjBmMWM1Y2E3YjY5NWE3ODgyNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8cQs/8kQMsdqplphlJw6/Skqr+P
grecX973LkqmK6yDIhUwbH1FgJoVUp0iMGHRnf4cFt78RFE6TJngQo7rQFl64hb2
xxtxQQXaKFrNFyAHHGOoBfbM3IPZ56/cY+RzROOF6v+Bp3jxVZcuko+xce3Obt1e
hFbzGASRXGX862KagjPaIA8UzHvTw4yGo7P5uqwglZevw8c9/1AxOHP0ju2R5iN2
uIoCr9VHostcLMptgZIkZ3rtfVRjZEvZxSNPlCIaNwEUcmGpAKikZVB6RC0jHx0l
qCJUArtZyjn/qAsB5bpUnB/TG3ruQDNU/cR96vWNK6Z9iWhWzxaB+M/rRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/MT9FT7d/bFpIPHFyntpWniCVWMB8GA1UdIwQY
MBaAFNChTQsIrUErANWG3qiJ7m2sT13vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtGTkN3aXRRU3NBMVliZXFJbnViYXhQWGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kNjExODMtMmJlYS00ZGQwLWIyYjIt
YzNlN2I2ZTE0ZjU4LzEvMEtGTkN3aXRRU3NBMVliZXFJbnViYXhQWGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9kNjExODMtMmJlYS00ZGQwLWIyYjItYzNlN2I2ZTE0ZjU4
LzEvMEtGTkN3aXRRU3NBMVliZXFJbnViYXhQWGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbAoacLv
+tRJ5zO92g7VCkck76eASGQVhqRB+mE6cjwdWt1TBZh4eaSV9ztzJmbzUnuynh2v
i0k0uClnVEW8/Dcb5PlBMy1uPufM8cNJh8b7tzYLllJch/ddsv31f+h4J68PyjYL
zFK7HEAbh9GOdvwWLKDe7/3O1XkzvKpxQflGZoRW1I+oZ4p0eJgp2MffYQSeVNtW
E9O1RlyU5MqC+CkA1NwgnVXjEpBLkIPwNhk6hc1Sv4dcuRTtReNLOvL4WVs1i+cl
spQ++OWdqSXwdqj4LXMmqnC6AgE3L2ogLdQj+JKKS+6d2iPxqruaTch24Sysfmih
JUC8f4ckIOCjOg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:25 2025 by rpki-client