Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e6d996-87d9-4fdc-b654-46705881b161/1/0ZE0K5g2itS-gypn41XbJ1yNo60.mft
File: 0ZE0K5g2itS-gypn41XbJ1yNo60.mft (raw, json)
Hash identifier: qhWJfGDiN5Ac2Ka6WW72Op5SwA5XHvACI7XCM+xoiFc=
Subject key identifier: 59:1A:80:EC:8D:EF:6A:63:73:30:C3:70:C6:62:C0:16:BF:07:BB:EE
Authority key identifier: D1:91:34:2B:98:36:8A:D4:BE:83:2A:67:E3:55:DB:27:5C:8D:A3:AD
Certificate issuer: /CN=d191342b98368ad4be832a67e355db275c8da3ad
Certificate serial: 018BA85E6F444C5CBB3AB5E814F52D82A12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZE0K5g2itS-gypn41XbJ1yNo60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e6d996-87d9-4fdc-b654-46705881b161/1/0ZE0K5g2itS-gypn41XbJ1yNo60.mft
Manifest number: 065D
Signing time: Tue 07 Nov 2023 06:00:42 +0000
Manifest this update: Tue 07 Nov 2023 06:00:42 +0000
Manifest next update: Wed 08 Nov 2023 06:00:42 +0000
Files and hashes: 1: 0ZE0K5g2itS-gypn41XbJ1yNo60.crl (hash: hwuXAEebij87SrnLlYrYNtWD32z+JUgdIc+Ecn4XU5k=)
2: dTxU0pY0HzQ4OYyIZFnXCkPDET8.roa (hash: jxf7cKGzeoJjzHn1/sWIp2JZv0wMn+3s8vxtuvmtJCc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:5e:6f:44:4c:5c:bb:3a:b5:e8:14:f5:2d:82:a1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191342b98368ad4be832a67e355db275c8da3ad
Validity
Not Before: Nov 7 06:00:42 2023 GMT
Not After : Nov 8 06:00:42 2023 GMT
Subject: CN=591a80ec8def6a637330c370c662c016bf07bbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:9e:9b:55:7d:a1:7a:81:54:bc:79:a1:bf:
4e:d4:45:5a:65:ef:2d:c4:6c:2a:d1:82:b4:a4:04:
ab:22:83:7d:4a:19:7e:18:a1:9a:6e:d9:78:d1:8d:
42:ca:d7:1f:1a:59:7b:76:af:ab:77:93:46:c3:18:
ec:87:f7:d5:ee:1e:6d:f0:1a:fc:50:0e:b9:17:cc:
a0:c5:9e:8a:8b:66:65:9d:f3:3e:33:49:3e:6f:d8:
8e:02:bc:09:75:76:2f:82:92:3b:c6:b4:5e:d5:65:
6e:9d:1d:a3:2d:13:4c:5e:60:5f:59:89:1e:1e:31:
c6:ae:5d:4d:0b:59:69:49:b5:0d:13:8f:59:be:82:
e7:18:84:6e:0a:ba:30:55:df:f4:10:1d:ef:e5:86:
ae:71:33:ff:5d:e8:55:1f:77:89:d8:41:5a:e6:d4:
c1:9c:5f:a0:ad:26:48:ed:79:58:95:37:d0:47:cf:
b3:c7:18:fe:39:63:d1:57:af:b7:4b:06:27:3c:c3:
a4:cb:27:6b:4e:67:0c:42:80:15:a9:3f:12:c5:5a:
d8:a2:ad:b4:4c:c7:9c:40:2c:88:a6:8f:a9:09:cb:
cb:96:4e:b9:3e:d7:a5:3b:20:18:43:80:4e:7f:fb:
6a:f2:83:5f:33:1d:6a:37:84:55:a4:db:97:f8:79:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1A:80:EC:8D:EF:6A:63:73:30:C3:70:C6:62:C0:16:BF:07:BB:EE
X509v3 Authority Key Identifier:
keyid:D1:91:34:2B:98:36:8A:D4:BE:83:2A:67:E3:55:DB:27:5C:8D:A3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZE0K5g2itS-gypn41XbJ1yNo60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e6d996-87d9-4fdc-b654-46705881b161/1/0ZE0K5g2itS-gypn41XbJ1yNo60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e6d996-87d9-4fdc-b654-46705881b161/1/0ZE0K5g2itS-gypn41XbJ1yNo60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b0:f0:d6:60:6c:c6:7e:ff:2b:b5:ba:9d:7a:91:f6:83:c7:
b0:5b:15:64:91:1d:4c:d5:fb:b1:9a:4b:c4:c6:af:03:1b:c1:
dd:0b:53:e4:67:12:c8:6e:d3:fd:d5:94:32:20:42:92:df:c7:
30:e1:e1:03:c5:dc:dd:03:03:86:39:8c:ee:85:c8:61:55:73:
5d:9a:3a:5b:08:4d:3c:42:07:df:fd:52:28:49:90:4f:50:51:
c3:5b:1b:7c:b7:fa:64:ec:b3:f7:16:c7:3c:88:5e:b5:9f:ca:
1f:80:1e:97:d5:4a:64:d9:f1:ad:8b:ab:a0:07:3d:d1:10:ae:
ee:8e:04:92:2c:eb:92:c7:12:4c:c1:10:0d:a1:0f:ae:e7:de:
74:cb:c4:7e:db:bf:a8:8c:1a:a6:ae:f4:02:76:6a:76:70:cf:
23:36:6a:3a:d0:86:11:89:87:3c:4e:0b:ab:cd:77:aa:71:39:
6e:f4:e9:17:ca:e0:9e:72:fa:de:80:2a:76:a4:a1:35:b4:0c:
10:a2:64:53:a1:74:81:9c:70:97:76:a5:0d:57:f5:e4:3a:3b:
71:bd:60:51:3c:91:dd:f3:85:85:bb:c1:23:eb:fa:52:d1:74:
80:8b:85:2a:1e:7b:cd:ba:6c:76:0a:b2:09:ed:61:3a:af:81:
cf:02:0d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuoXm9ETFy7OrXoFPUtgqEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTEzNDJiOTgzNjhhZDRiZTgzMmE2N2UzNTVkYjI3NWM4
ZGEzYWQwHhcNMjMxMTA3MDYwMDQyWhcNMjMxMTA4MDYwMDQyWjAzMTEwLwYDVQQD
Eyg1OTFhODBlYzhkZWY2YTYzNzMzMGMzNzBjNjYyYzAxNmJmMDdiYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIKem1V9oXqBVLx5ob9O1EVaZe8t
xGwq0YK0pASrIoN9Shl+GKGabtl40Y1CytcfGll7dq+rd5NGwxjsh/fV7h5t8Br8
UA65F8ygxZ6Ki2ZlnfM+M0k+b9iOArwJdXYvgpI7xrRe1WVunR2jLRNMXmBfWYke
HjHGrl1NC1lpSbUNE49ZvoLnGIRuCrowVd/0EB3v5YaucTP/XehVH3eJ2EFa5tTB
nF+grSZI7XlYlTfQR8+zxxj+OWPRV6+3SwYnPMOkyydrTmcMQoAVqT8SxVrYoq20
TMecQCyIpo+pCcvLlk65PtelOyAYQ4BOf/tq8oNfMx1qN4RVpNuX+HleCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkagOyN72pjczDDcMZiwBa/B7vuMB8GA1UdIwQY
MBaAFNGRNCuYNorUvoMqZ+NV2ydcjaOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpFMEs1ZzJpdFMtZ3lwbjQxWGJKMXlObzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lNmQ5OTYtODdkOS00ZmRjLWI2NTQt
NDY3MDU4ODFiMTYxLzEvMFpFMEs1ZzJpdFMtZ3lwbjQxWGJKMXlObzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lNmQ5OTYtODdkOS00ZmRjLWI2NTQtNDY3MDU4ODFiMTYx
LzEvMFpFMEs1ZzJpdFMtZ3lwbjQxWGJKMXlObzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7Dw1mBs
xn7/K7W6nXqR9oPHsFsVZJEdTNX7sZpLxMavAxvB3QtT5GcSyG7T/dWUMiBCkt/H
MOHhA8Xc3QMDhjmM7oXIYVVzXZo6WwhNPEIH3/1SKEmQT1BRw1sbfLf6ZOyz9xbH
PIhetZ/KH4Ael9VKZNnxrYuroAc90RCu7o4EkizrkscSTMEQDaEPrufedMvEftu/
qIwapq70AnZqdnDPIzZqOtCGEYmHPE4Lq813qnE5bvTpF8rgnnL63oAqdqShNbQM
EKJkU6F0gZxwl3alDVf15Do7cb1gUTyR3fOFhbvBI+v6UtF0gIuFKh57zbpsdgqy
Ce1hOq+BzwINeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 7 14:04:28 2023 by rpki-client on console-ams.rpki-client.org