Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.mft
File: IvoceuLmneV2nDlpsLD49SW1qwU.mft (raw, json)
Hash identifier: g6b61iE8/kqu/5wczub8YbeEme9rjodr1MOBRgfkGGo=
Subject key identifier: BB:23:A2:E6:54:AC:02:9E:AB:FA:A3:86:12:7F:5E:67:03:CA:18:A5
Authority key identifier: 22:FA:1C:7A:E2:E6:9D:E5:76:9C:39:69:B0:B0:F8:F5:25:B5:AB:05
Certificate issuer: /CN=22fa1c7ae2e69de5769c3969b0b0f8f525b5ab05
Certificate serial: 018E73FBA14210AF6164111C8D443C05D70E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvoceuLmneV2nDlpsLD49SW1qwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.mft
Manifest number: 02AC
Signing time: Mon 25 Mar 2024 05:00:54 +0000
Manifest this update: Mon 25 Mar 2024 05:00:54 +0000
Manifest next update: Tue 26 Mar 2024 05:00:54 +0000
Files and hashes: 1: IvoceuLmneV2nDlpsLD49SW1qwU.crl (hash: TIjUl3vtAhKLp30TG1olFhY+Thpkjenye8jlZ7gucFU=)
2: vlR8nKaATk_z_r9H0ES_iscFHs4.roa (hash: ED9K9xqYedBzpjELbl6txrapano9jZMXiYBkMZragcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:73:fb:a1:42:10:af:61:64:11:1c:8d:44:3c:05:d7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fa1c7ae2e69de5769c3969b0b0f8f525b5ab05
Validity
Not Before: Mar 25 05:00:54 2024 GMT
Not After : Mar 26 05:00:54 2024 GMT
Subject: CN=bb23a2e654ac029eabfaa386127f5e6703ca18a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:53:76:56:5b:a8:37:7e:82:c6:1e:04:aa:4b:
ad:7a:21:33:14:7e:e0:f2:f8:6f:91:fc:34:85:34:
25:a7:08:17:36:33:42:85:cb:f6:f9:7b:6c:38:83:
8d:6f:f0:71:65:6c:63:c9:5b:8a:9c:ae:0c:e0:a1:
9e:54:99:63:be:11:b4:88:56:00:8c:32:e8:09:6d:
cd:b9:54:12:e0:44:0b:be:09:72:19:cf:35:c6:f8:
08:73:68:99:ac:c1:65:0b:15:c0:62:1a:05:1c:52:
f8:64:1e:5e:0a:d5:a2:35:cd:c2:85:f3:c7:c1:da:
60:7b:f8:b7:53:8f:9a:10:28:1a:99:4d:48:e2:50:
8f:ac:6c:a3:3e:e3:15:46:84:93:78:78:cb:7e:ba:
25:0b:ea:cb:96:cb:79:3f:42:31:42:e0:7a:3e:03:
2a:af:19:ca:2a:0b:dc:54:73:82:66:01:f5:12:7d:
37:af:f6:f2:e3:b2:c8:d9:64:ca:58:8e:e3:8a:fa:
78:2a:65:2c:9f:80:8d:7e:8d:94:5e:eb:71:5a:1f:
cb:94:1b:ba:47:0a:28:7f:36:49:a2:52:b9:0b:76:
ae:98:80:d3:94:0e:8f:dc:59:82:83:6d:1f:bc:71:
21:55:31:44:85:bd:18:73:2d:e1:c4:df:7f:bc:56:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:23:A2:E6:54:AC:02:9E:AB:FA:A3:86:12:7F:5E:67:03:CA:18:A5
X509v3 Authority Key Identifier:
keyid:22:FA:1C:7A:E2:E6:9D:E5:76:9C:39:69:B0:B0:F8:F5:25:B5:AB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvoceuLmneV2nDlpsLD49SW1qwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/292a74-95a0-4279-a4b1-0ba7de7b945e/1/IvoceuLmneV2nDlpsLD49SW1qwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f5:13:99:40:7d:ca:14:f7:6d:06:f7:e2:7b:52:4e:82:ea:
ce:f3:bd:ec:1a:30:3b:83:de:47:7c:a4:d2:d0:d8:54:24:96:
3b:bc:8d:dd:1a:16:56:20:c2:19:30:bf:f3:15:4f:c3:fe:9c:
12:ca:4d:ac:63:b1:8f:d3:66:de:e6:9d:99:cc:55:52:20:84:
fc:ba:8f:e3:ab:9f:d6:ae:9c:a2:1f:c0:fe:f2:c3:0c:e6:00:
07:d9:48:ee:85:c7:ac:96:d7:b6:7e:80:22:14:cc:51:e5:f6:
8e:2e:62:f4:04:ef:93:a5:89:4a:20:a2:5a:b1:3c:90:82:f8:
30:9c:5e:cd:83:68:e9:cb:6d:75:74:8c:f4:c3:51:cd:c7:67:
70:31:89:df:3d:35:b6:7c:25:c7:80:f4:ba:52:26:f6:8d:9c:
3a:a8:0b:e3:55:8d:59:53:2b:26:3e:7f:82:97:c4:ec:f7:e5:
b3:ea:58:a3:4b:94:28:7e:14:56:bd:56:55:dd:41:13:ee:c8:
72:d0:48:ba:ad:10:30:d3:c0:50:46:c3:1c:6f:56:5d:be:a6:
1a:96:20:8a:ca:4c:48:25:0d:ac:41:1a:34:fb:ca:ae:f7:91:
21:79:11:bc:ca:76:ce:43:7b:0a:b0:04:7d:5d:71:58:6a:4c:
60:bc:28:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY5z+6FCEK9hZBEcjUQ8BdcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmExYzdhZTJlNjlkZTU3NjljMzk2OWIwYjBmOGY1MjVi
NWFiMDUwHhcNMjQwMzI1MDUwMDU0WhcNMjQwMzI2MDUwMDU0WjAzMTEwLwYDVQQD
EyhiYjIzYTJlNjU0YWMwMjllYWJmYWEzODYxMjdmNWU2NzAzY2ExOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1N2VluoN36Cxh4EqkuteiEzFH7g
8vhvkfw0hTQlpwgXNjNChcv2+XtsOIONb/BxZWxjyVuKnK4M4KGeVJljvhG0iFYA
jDLoCW3NuVQS4EQLvglyGc81xvgIc2iZrMFlCxXAYhoFHFL4ZB5eCtWiNc3ChfPH
wdpge/i3U4+aECgamU1I4lCPrGyjPuMVRoSTeHjLfrolC+rLlst5P0IxQuB6PgMq
rxnKKgvcVHOCZgH1En03r/by47LI2WTKWI7jivp4KmUsn4CNfo2UXutxWh/LlBu6
RwoofzZJolK5C3aumIDTlA6P3FmCg20fvHEhVTFEhb0Ycy3hxN9/vFY5lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsjouZUrAKeq/qjhhJ/XmcDyhilMB8GA1UdIwQY
MBaAFCL6HHri5p3ldpw5abCw+PUltasFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZvY2V1TG1uZVYybkRscHNMRDQ5U1cxcXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8yOTJhNzQtOTVhMC00Mjc5LWE0YjEt
MGJhN2RlN2I5NDVlLzEvSXZvY2V1TG1uZVYybkRscHNMRDQ5U1cxcXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8yOTJhNzQtOTVhMC00Mjc5LWE0YjEtMGJhN2RlN2I5NDVl
LzEvSXZvY2V1TG1uZVYybkRscHNMRDQ5U1cxcXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/UTmUB9
yhT3bQb34ntSToLqzvO97BowO4PeR3yk0tDYVCSWO7yN3RoWViDCGTC/8xVPw/6c
EspNrGOxj9Nm3uadmcxVUiCE/LqP46uf1q6coh/A/vLDDOYAB9lI7oXHrJbXtn6A
IhTMUeX2ji5i9ATvk6WJSiCiWrE8kIL4MJxezYNo6cttdXSM9MNRzcdncDGJ3z01
tnwlx4D0ulIm9o2cOqgL41WNWVMrJj5/gpfE7Pfls+pYo0uUKH4UVr1WVd1BE+7I
ctBIuq0QMNPAUEbDHG9WXb6mGpYgispMSCUNrEEaNPvKrveRIXkRvMp2zkN7CrAE
fV1xWGpMYLwoDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:42 2024 by rpki-client on console-fra.rpki-client.org