Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cb36cd-cf38-4e1a-8e1e-41ec4c047141/1/fxkhhxHgiVXu5Rn5-_n0NhktdOg.mft
File: fxkhhxHgiVXu5Rn5-_n0NhktdOg.mft (raw, json)
Hash identifier: MiN/FsP6xb88JW/VbLuZybxyrCbZV7OFI86GwdTl/bw=
Subject key identifier: 8C:B2:A9:05:3A:D0:FC:7D:66:BE:41:E0:2B:52:96:3E:3F:AA:B5:AA
Authority key identifier: 7F:19:21:87:11:E0:89:55:EE:E5:19:F9:FB:F9:F4:36:19:2D:74:E8
Certificate issuer: /CN=7f19218711e08955eee519f9fbf9f436192d74e8
Certificate serial: 018D1B5EFBC77CD048B6CD778AB3DD61D905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxkhhxHgiVXu5Rn5-_n0NhktdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cb36cd-cf38-4e1a-8e1e-41ec4c047141/1/fxkhhxHgiVXu5Rn5-_n0NhktdOg.mft
Manifest number: 11
Signing time: Thu 18 Jan 2024 07:00:26 +0000
Manifest this update: Thu 18 Jan 2024 07:00:26 +0000
Manifest next update: Fri 19 Jan 2024 07:00:26 +0000
Files and hashes: 1: fxkhhxHgiVXu5Rn5-_n0NhktdOg.crl (hash: dMs1j9rygCkz5YyEhI9VPqNepeLD4/RBkNiijANgRYs=)
2: t7eyyvMahOhqtIpz8wiJYVEVVFM.roa (hash: +Og6QGcpkm892UO6dxLdE218hEAh6vEiv+QX4RrmVgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1b:5e:fb:c7:7c:d0:48:b6:cd:77:8a:b3:dd:61:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f19218711e08955eee519f9fbf9f436192d74e8
Validity
Not Before: Jan 18 07:00:26 2024 GMT
Not After : Jan 19 07:00:26 2024 GMT
Subject: CN=8cb2a9053ad0fc7d66be41e02b52963e3faab5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:4c:24:08:00:d9:18:cd:7e:2f:da:ca:8e:
92:3a:bb:f1:5e:1b:ee:60:09:c0:da:85:cb:66:c0:
0e:b8:4b:a1:54:fb:33:12:d3:d4:85:7a:e5:c9:00:
73:b1:0d:2b:f1:67:e7:3f:e3:82:c6:c9:7b:fa:d9:
c4:e9:ee:6a:fb:54:43:2c:dc:c6:40:a1:2f:bc:42:
dd:8d:67:dd:fa:cd:eb:61:b6:de:3f:45:f1:bb:b0:
a9:d3:af:57:3d:fc:54:11:6f:cd:c7:65:94:99:5c:
74:a1:85:2c:9f:13:9b:88:8a:48:f0:5a:5b:26:12:
18:e0:7c:9d:c7:af:ed:b7:1e:4b:ca:58:0b:f5:58:
2a:d3:71:06:2a:a1:f3:ad:f4:e7:7a:3a:f9:f7:26:
61:74:a7:e1:46:b6:b0:50:ba:63:5d:54:91:fc:c9:
17:cc:a8:d6:98:c7:08:78:45:74:97:95:d9:63:ad:
c0:9d:60:42:ee:6e:e6:9a:72:ed:a5:ab:c6:a3:5f:
bb:b8:fb:d5:27:e3:c4:ca:63:63:08:7f:58:be:93:
65:b8:70:44:34:1c:7c:91:05:c9:2e:26:2f:1f:2a:
f0:2c:26:a9:81:a6:1a:f5:fc:19:13:fd:bf:c8:0d:
a0:97:5e:50:86:cb:f6:53:b2:59:6e:cc:14:4b:14:
df:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:A9:05:3A:D0:FC:7D:66:BE:41:E0:2B:52:96:3E:3F:AA:B5:AA
X509v3 Authority Key Identifier:
keyid:7F:19:21:87:11:E0:89:55:EE:E5:19:F9:FB:F9:F4:36:19:2D:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxkhhxHgiVXu5Rn5-_n0NhktdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cb36cd-cf38-4e1a-8e1e-41ec4c047141/1/fxkhhxHgiVXu5Rn5-_n0NhktdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cb36cd-cf38-4e1a-8e1e-41ec4c047141/1/fxkhhxHgiVXu5Rn5-_n0NhktdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a7:89:bc:5a:e1:9d:52:f0:98:ba:f9:02:2f:62:43:66:dc:
3c:17:76:f6:f2:75:78:66:64:04:d1:f5:ce:c2:72:ad:c4:23:
09:ac:71:b4:5a:5f:44:99:80:47:1d:2a:ff:6a:7a:e6:23:0e:
f3:f9:34:2c:bc:14:77:7f:d1:de:25:73:38:75:26:94:76:58:
eb:5e:49:05:56:fc:8f:8e:ca:9b:39:7d:57:57:d8:00:fc:7c:
47:72:a2:0b:08:14:79:b5:45:5e:4c:9e:07:66:92:ef:ec:f6:
50:47:54:65:b1:15:ea:e7:d2:8a:31:7e:b9:72:68:e3:ee:1a:
e5:0a:9b:54:91:68:0e:2f:3b:2e:45:a1:7b:ba:4d:b9:64:c2:
f8:07:97:70:4e:da:9f:9c:e6:bd:c5:39:79:1d:c7:dd:c4:a0:
d3:1f:98:bc:eb:6e:8b:d3:d4:ca:4d:ed:76:7a:44:bb:6f:e7:
d9:5e:a5:28:a9:a7:ad:3c:55:56:a4:0c:6d:94:0c:16:3b:1d:
9e:87:18:d0:58:5f:86:2d:35:8b:e7:54:2f:77:64:fb:c7:4d:
e1:19:06:74:4c:53:ba:67:05:a8:06:fb:8d:1b:c2:6c:0e:2f:
5d:cb:7a:4f:c0:71:88:06:33:ff:6e:fe:c3:c9:88:28:13:87:
d1:06:f9:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY0bXvvHfNBIts13irPdYdkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTkyMTg3MTFlMDg5NTVlZWU1MTlmOWZiZjlmNDM2MTky
ZDc0ZTgwHhcNMjQwMTE4MDcwMDI2WhcNMjQwMTE5MDcwMDI2WjAzMTEwLwYDVQQD
Eyg4Y2IyYTkwNTNhZDBmYzdkNjZiZTQxZTAyYjUyOTYzZTNmYWFiNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOpMJAgA2RjNfi/ayo6SOrvxXhvu
YAnA2oXLZsAOuEuhVPszEtPUhXrlyQBzsQ0r8WfnP+OCxsl7+tnE6e5q+1RDLNzG
QKEvvELdjWfd+s3rYbbeP0Xxu7Cp069XPfxUEW/Nx2WUmVx0oYUsnxObiIpI8Fpb
JhIY4Hydx6/ttx5LylgL9Vgq03EGKqHzrfTnejr59yZhdKfhRrawULpjXVSR/MkX
zKjWmMcIeEV0l5XZY63AnWBC7m7mmnLtpavGo1+7uPvVJ+PEymNjCH9YvpNluHBE
NBx8kQXJLiYvHyrwLCapgaYa9fwZE/2/yA2gl15Qhsv2U7JZbswUSxTfOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyyqQU60Px9Zr5B4CtSlj4/qrWqMB8GA1UdIwQY
MBaAFH8ZIYcR4IlV7uUZ+fv59DYZLXToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhraGh4SGdpVlh1NVJuNS1fbjBOaGt0ZE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jYjM2Y2QtY2YzOC00ZTFhLThlMWUt
NDFlYzRjMDQ3MTQxLzEvZnhraGh4SGdpVlh1NVJuNS1fbjBOaGt0ZE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jYjM2Y2QtY2YzOC00ZTFhLThlMWUtNDFlYzRjMDQ3MTQx
LzEvZnhraGh4SGdpVlh1NVJuNS1fbjBOaGt0ZE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKeJvFrh
nVLwmLr5Ai9iQ2bcPBd29vJ1eGZkBNH1zsJyrcQjCaxxtFpfRJmARx0q/2p65iMO
8/k0LLwUd3/R3iVzOHUmlHZY615JBVb8j47Kmzl9V1fYAPx8R3KiCwgUebVFXkye
B2aS7+z2UEdUZbEV6ufSijF+uXJo4+4a5QqbVJFoDi87LkWhe7pNuWTC+AeXcE7a
n5zmvcU5eR3H3cSg0x+YvOtui9PUyk3tdnpEu2/n2V6lKKmnrTxVVqQMbZQMFjsd
nocY0Fhfhi01i+dUL3dk+8dN4RkGdExTumcFqAb7jRvCbA4vXct6T8BxiAYz/27+
w8mIKBOH0Qb5Gw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:23 2025 by rpki-client