Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/PUcJ2L11c6sd8iM7dB3vL4TJT-4.mft
File: PUcJ2L11c6sd8iM7dB3vL4TJT-4.mft (raw, json)
Hash identifier: T6abXABs21CBdfokbMf3kmWv72zfya0ssdHXJ2xQIsM=
Subject key identifier: FC:A6:C6:8A:C5:A6:1D:6A:41:F3:EE:64:30:09:6C:0B:31:5E:E7:51
Authority key identifier: 3D:47:09:D8:BD:75:73:AB:1D:F2:23:3B:74:1D:EF:2F:84:C9:4F:EE
Certificate issuer: /CN=3d4709d8bd7573ab1df2233b741def2f84c94fee
Certificate serial: 018A63B647386A1D0BBED1A47F8114E4100D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUcJ2L11c6sd8iM7dB3vL4TJT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/PUcJ2L11c6sd8iM7dB3vL4TJT-4.mft
Manifest number: 0864
Signing time: Tue 05 Sep 2023 05:00:04 +0000
Manifest this update: Tue 05 Sep 2023 05:00:04 +0000
Manifest next update: Wed 06 Sep 2023 05:00:04 +0000
Files and hashes: 1: 1WTa6GZDbG9wNPOpc3gc46KRBWA.roa (hash: LWfX+cjBCasq0DdnYYIokAp/94/n4xTPG6wIoCv96C4=)
2: PUcJ2L11c6sd8iM7dB3vL4TJT-4.crl (hash: VCojl9HN+fnk0klR80OJjbz0NTeuNP7fUWbo89Tt9lU=)
3: pMzY1i9Rl66cj50aOjBeyN3iOQI.roa (hash: MxKIxKZwRYYzq0S76hDs3ibLgTswS7jOZd7KpE7OqYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:b6:47:38:6a:1d:0b:be:d1:a4:7f:81:14:e4:10:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4709d8bd7573ab1df2233b741def2f84c94fee
Validity
Not Before: Sep 5 05:00:04 2023 GMT
Not After : Sep 6 05:00:04 2023 GMT
Subject: CN=fca6c68ac5a61d6a41f3ee6430096c0b315ee751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:4c:80:ca:45:dc:3c:97:57:c0:c1:cd:5d:
3f:75:21:ad:46:b7:1f:75:70:87:cd:1d:45:a3:c1:
27:20:90:d6:aa:e5:77:d2:81:1a:89:4c:e0:37:42:
58:cd:d7:78:d3:96:a5:62:43:5f:46:11:61:3f:11:
d1:b2:df:7e:e8:e6:dc:4f:73:95:0c:cb:68:7f:44:
3f:a1:c3:2f:43:78:08:92:69:53:cb:bb:f5:8a:4c:
9d:88:d0:5c:ab:f0:26:81:76:70:d8:0b:07:68:b5:
7f:e9:7a:a1:2f:1a:75:57:a5:4c:e1:61:cb:ae:5f:
aa:7d:9a:58:45:97:81:38:0b:99:78:ee:72:15:3a:
20:ed:1a:ec:db:19:65:bc:2a:66:ef:36:b1:6b:1c:
7f:69:72:63:96:b4:65:1c:be:c8:f6:9b:28:c3:6a:
76:87:4c:4e:27:34:62:fd:1f:13:9a:ca:41:a9:f6:
5b:ad:b5:4c:17:10:37:02:c8:cf:24:fd:6b:b5:19:
28:f2:30:fa:d6:38:6f:05:c3:2d:9c:1a:8f:65:14:
dc:b3:6d:9f:88:dd:45:7e:8a:aa:f9:ab:0c:85:28:
07:5b:f9:49:52:cc:f7:0b:99:63:85:04:ea:e9:a2:
69:41:07:23:76:5b:df:53:66:f3:10:33:6b:a9:af:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:C6:8A:C5:A6:1D:6A:41:F3:EE:64:30:09:6C:0B:31:5E:E7:51
X509v3 Authority Key Identifier:
keyid:3D:47:09:D8:BD:75:73:AB:1D:F2:23:3B:74:1D:EF:2F:84:C9:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUcJ2L11c6sd8iM7dB3vL4TJT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/PUcJ2L11c6sd8iM7dB3vL4TJT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/PUcJ2L11c6sd8iM7dB3vL4TJT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:42:05:5a:f6:90:fb:dd:d5:b7:68:98:08:67:68:19:dd:0c:
95:76:6b:38:31:f3:63:4f:b2:95:2c:e5:20:f7:f4:d7:8f:ab:
3a:98:84:17:37:ec:b3:33:42:91:b0:18:eb:2b:2c:d6:9a:02:
07:73:c3:4e:29:e3:55:3a:b4:ab:c6:fa:09:60:f9:c0:20:8d:
49:83:8b:0f:a4:a0:9a:ac:61:32:59:fe:f4:22:e0:a4:8e:be:
51:2d:63:5b:15:f5:a4:6a:24:5b:82:51:f7:ef:ae:67:ba:39:
b6:3a:bd:3e:59:56:58:22:9e:0b:75:7c:b1:15:d6:9a:7e:8d:
90:4f:62:4b:30:25:dc:d9:e7:90:77:9e:b4:57:9e:30:c3:34:
1c:5b:3f:c6:4c:7f:7f:be:1e:ce:91:98:5c:39:78:b6:c0:0a:
9b:5d:0b:64:0e:41:eb:9c:0e:02:06:a5:02:5b:e0:e4:cf:46:
9f:e3:86:cd:cc:42:57:a3:51:51:dc:0d:06:2c:46:09:1e:99:
bc:1a:0f:70:c8:fd:54:78:4c:55:f3:76:1d:3e:e1:e0:a9:57:
9a:63:4a:57:b4:77:5a:f4:25:c4:cd:70:c7:3f:31:f4:1c:0c:
60:05:74:0a:d6:b3:db:1a:91:21:a1:3e:01:aa:07:29:f1:c3:
b7:af:1a:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYpjtkc4ah0LvtGkf4EU5BANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNDcwOWQ4YmQ3NTczYWIxZGYyMjMzYjc0MWRlZjJmODRj
OTRmZWUwHhcNMjMwOTA1MDUwMDA0WhcNMjMwOTA2MDUwMDA0WjAzMTEwLwYDVQQD
EyhmY2E2YzY4YWM1YTYxZDZhNDFmM2VlNjQzMDA5NmMwYjMxNWVlNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFxMgMpF3DyXV8DBzV0/dSGtRrcf
dXCHzR1Fo8EnIJDWquV30oEaiUzgN0JYzdd405alYkNfRhFhPxHRst9+6ObcT3OV
DMtof0Q/ocMvQ3gIkmlTy7v1ikydiNBcq/AmgXZw2AsHaLV/6XqhLxp1V6VM4WHL
rl+qfZpYRZeBOAuZeO5yFTog7Rrs2xllvCpm7zaxaxx/aXJjlrRlHL7I9psow2p2
h0xOJzRi/R8TmspBqfZbrbVMFxA3AsjPJP1rtRko8jD61jhvBcMtnBqPZRTcs22f
iN1Ffoqq+asMhSgHW/lJUsz3C5ljhQTq6aJpQQcjdlvfU2bzEDNrqa+HnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPymxorFph1qQfPuZDAJbAsxXudRMB8GA1UdIwQY
MBaAFD1HCdi9dXOrHfIjO3Qd7y+EyU/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFVjSjJMMTFjNnNkOGlNN2RCM3ZMNFRKVC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yMzhjNmEtYzY3MS00YTM0LTkzNGEt
NTA1ZDY4MWQ2MTcyLzEvUFVjSjJMMTFjNnNkOGlNN2RCM3ZMNFRKVC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yMzhjNmEtYzY3MS00YTM0LTkzNGEtNTA1ZDY4MWQ2MTcy
LzEvUFVjSjJMMTFjNnNkOGlNN2RCM3ZMNFRKVC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkIFWvaQ
+93Vt2iYCGdoGd0MlXZrODHzY0+ylSzlIPf014+rOpiEFzfsszNCkbAY6yss1poC
B3PDTinjVTq0q8b6CWD5wCCNSYOLD6SgmqxhMln+9CLgpI6+US1jWxX1pGokW4JR
9++uZ7o5tjq9PllWWCKeC3V8sRXWmn6NkE9iSzAl3NnnkHeetFeeMMM0HFs/xkx/
f74ezpGYXDl4tsAKm10LZA5B65wOAgalAlvg5M9Gn+OGzcxCV6NRUdwNBixGCR6Z
vBoPcMj9VHhMVfN2HT7h4KlXmmNKV7R3WvQlxM1wxz8x9BwMYAV0Ctaz2xqRIaE+
AaoHKfHDt68azA==
-----END CERTIFICATE-----
Generated at Tue Sep 5 13:28:17 2023 by rpki-client on console-fra.rpki-client.org