Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/050e29-b5ee-4c28-901f-79e5f0bc5f90/1/n1oEGvXIykVobB6qxcqkaHYk0tg.mft
File: n1oEGvXIykVobB6qxcqkaHYk0tg.mft (raw, json)
Hash identifier: AnvpHK/YoRtMludEnjKqG/m6xfLIalFGmKQfTsGq2/8=
Subject key identifier: 70:37:29:A7:8E:D1:5B:2C:BE:6B:3E:CE:72:FC:3F:8A:6D:F6:3D:AD
Authority key identifier: 9F:5A:04:1A:F5:C8:CA:45:68:6C:1E:AA:C5:CA:A4:68:76:24:D2:D8
Certificate issuer: /CN=9f5a041af5c8ca45686c1eaac5caa4687624d2d8
Certificate serial: 018C39A3E32CA50C05C190DC46421C31EA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1oEGvXIykVobB6qxcqkaHYk0tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/050e29-b5ee-4c28-901f-79e5f0bc5f90/1/n1oEGvXIykVobB6qxcqkaHYk0tg.mft
Manifest number: 0869
Signing time: Tue 05 Dec 2023 11:01:30 +0000
Manifest this update: Tue 05 Dec 2023 11:01:30 +0000
Manifest next update: Wed 06 Dec 2023 11:01:30 +0000
Files and hashes: 1: WpPZgaEioFBlZTDO_0CFBUY9-EU.roa (hash: EhzhK/zwAOx2cJbcI1XmgRAgOOazcFBakqNP6I7GHno=)
2: n1oEGvXIykVobB6qxcqkaHYk0tg.crl (hash: lvUbhhIEM4TsXD+OFyTqFngVrWdO8I8eSOjLaila9lA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:a3:e3:2c:a5:0c:05:c1:90:dc:46:42:1c:31:ea:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5a041af5c8ca45686c1eaac5caa4687624d2d8
Validity
Not Before: Dec 5 11:01:30 2023 GMT
Not After : Dec 6 11:01:30 2023 GMT
Subject: CN=703729a78ed15b2cbe6b3ece72fc3f8a6df63dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:da:eb:d6:83:2d:16:68:9b:fd:02:41:fb:b8:
63:76:48:59:d5:4b:7a:3f:b2:e9:9d:e6:b8:a2:e7:
2f:79:42:52:12:77:a6:03:b8:96:6a:c4:ae:a7:83:
3c:d2:ea:50:76:e4:85:9d:7b:26:88:49:8a:ae:b9:
02:bd:25:ee:08:40:ff:e8:6f:d4:f3:a7:d5:cc:71:
38:23:df:f2:7f:59:a0:2f:2e:92:24:9f:77:3d:10:
4f:77:d4:a5:76:a4:c3:e2:6b:3c:db:92:60:99:4d:
fc:ee:2f:28:69:10:c8:c8:6c:e7:33:cf:15:a4:f9:
85:e5:38:75:9e:d2:d6:3a:d9:18:1f:46:8f:33:b6:
a4:a1:6a:67:77:d3:5b:cb:e5:eb:1b:84:17:f5:9f:
37:21:eb:c8:20:9f:da:34:7f:3b:29:4b:87:c0:a2:
4e:3b:d0:0f:15:09:58:9f:16:c1:4e:c4:e2:ca:61:
cc:39:a6:63:bf:87:b6:92:4d:c4:41:85:65:e2:f7:
0f:8a:f6:98:98:5a:64:99:8b:e1:74:48:21:67:c7:
51:f3:13:a4:c1:fa:bc:14:9b:e4:bb:f1:64:e7:61:
a0:c5:14:73:ce:15:e9:58:47:9b:5f:78:e2:c2:36:
fa:a3:3e:0e:24:ad:d8:f9:13:a4:01:31:83:57:c0:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:29:A7:8E:D1:5B:2C:BE:6B:3E:CE:72:FC:3F:8A:6D:F6:3D:AD
X509v3 Authority Key Identifier:
keyid:9F:5A:04:1A:F5:C8:CA:45:68:6C:1E:AA:C5:CA:A4:68:76:24:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1oEGvXIykVobB6qxcqkaHYk0tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/050e29-b5ee-4c28-901f-79e5f0bc5f90/1/n1oEGvXIykVobB6qxcqkaHYk0tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/050e29-b5ee-4c28-901f-79e5f0bc5f90/1/n1oEGvXIykVobB6qxcqkaHYk0tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c8:d2:72:5b:80:51:2d:4b:93:0f:e7:19:74:a2:97:05:63:
68:36:f7:11:45:e1:d7:d9:2c:0b:8b:e4:53:29:1d:ad:cd:87:
a1:68:2a:ef:9e:68:24:d1:b8:ba:6f:96:0a:30:c3:01:ea:65:
0a:be:f3:72:5b:db:31:59:3d:a4:4f:50:60:56:60:5d:f2:8c:
a5:d1:0e:82:86:1f:6d:fb:4f:7b:1f:69:35:e4:93:d6:33:2b:
cc:2d:50:7c:f8:1c:c1:68:a8:f2:c7:1c:7e:87:34:c5:72:29:
8c:44:50:0a:e0:c9:c1:f6:f2:38:8f:e7:08:69:d9:a1:35:77:
bb:e7:ec:9d:50:45:a6:0d:b8:8a:1b:39:d4:e0:14:e9:55:c1:
66:d8:00:3d:b2:ac:c6:7b:20:bc:5f:01:15:56:f0:19:4b:8f:
a9:3c:32:d8:2d:35:f3:0b:c1:34:ec:d6:5b:4a:7a:9b:6a:8f:
fb:c9:7b:5c:ba:41:dc:8d:ec:eb:45:c2:af:63:8f:c9:5e:15:
40:56:bd:0e:3a:fc:43:83:c0:83:87:0b:14:1f:de:9f:30:37:
b0:a5:4e:0a:87:37:ca:22:b4:b0:9a:ec:8c:c1:bb:e9:7f:92:
0c:fd:14:89:35:6c:b8:f0:84:18:6e:70:00:85:ed:f7:33:ad:
64:aa:1c:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYw5o+MspQwFwZDcRkIcMepWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWEwNDFhZjVjOGNhNDU2ODZjMWVhYWM1Y2FhNDY4NzYy
NGQyZDgwHhcNMjMxMjA1MTEwMTMwWhcNMjMxMjA2MTEwMTMwWjAzMTEwLwYDVQQD
Eyg3MDM3MjlhNzhlZDE1YjJjYmU2YjNlY2U3MmZjM2Y4YTZkZjYzZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNrr1oMtFmib/QJB+7hjdkhZ1Ut6
P7Lpnea4oucveUJSEnemA7iWasSup4M80upQduSFnXsmiEmKrrkCvSXuCED/6G/U
86fVzHE4I9/yf1mgLy6SJJ93PRBPd9SldqTD4ms825JgmU387i8oaRDIyGznM88V
pPmF5Th1ntLWOtkYH0aPM7akoWpnd9Nby+XrG4QX9Z83IevIIJ/aNH87KUuHwKJO
O9APFQlYnxbBTsTiymHMOaZjv4e2kk3EQYVl4vcPivaYmFpkmYvhdEghZ8dR8xOk
wfq8FJvku/Fk52GgxRRzzhXpWEebX3jiwjb6oz4OJK3Y+ROkATGDV8AmAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA3KaeO0Vssvms+znL8P4pt9j2tMB8GA1UdIwQY
MBaAFJ9aBBr1yMpFaGweqsXKpGh2JNLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFvRUd2WEl5a1ZvYkI2cXhjcWthSFlrMHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wNTBlMjktYjVlZS00YzI4LTkwMWYt
NzllNWYwYmM1ZjkwLzEvbjFvRUd2WEl5a1ZvYkI2cXhjcWthSFlrMHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wNTBlMjktYjVlZS00YzI4LTkwMWYtNzllNWYwYmM1Zjkw
LzEvbjFvRUd2WEl5a1ZvYkI2cXhjcWthSFlrMHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMjScluA
US1Lkw/nGXSilwVjaDb3EUXh19ksC4vkUykdrc2HoWgq755oJNG4um+WCjDDAepl
Cr7zclvbMVk9pE9QYFZgXfKMpdEOgoYfbftPex9pNeST1jMrzC1QfPgcwWio8scc
foc0xXIpjERQCuDJwfbyOI/nCGnZoTV3u+fsnVBFpg24ihs51OAU6VXBZtgAPbKs
xnsgvF8BFVbwGUuPqTwy2C018wvBNOzWW0p6m2qP+8l7XLpB3I3s60XCr2OPyV4V
QFa9Djr8Q4PAg4cLFB/enzA3sKVOCoc3yiK0sJrsjMG76X+SDP0UiTVsuPCEGG5w
AIXt9zOtZKocug==
-----END CERTIFICATE-----
Generated at Tue Dec 5 14:36:30 2023 by rpki-client on console-fra.rpki-client.org