Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.mft
File: 1-xG9XERMI5wZh3bzYODxAMm12AI.mft (raw, json)
Hash identifier: eTKG4NxoIlDakpqTKrrcN5i1ALaymNy8OIePGTYBjp0=
Subject key identifier: C2:27:DA:26:86:68:4C:05:CB:65:C1:95:2C:A8:36:A5:BD:AB:86:BB
Authority key identifier: FB:11:BD:5C:44:4C:23:9C:19:87:76:F3:60:E0:F1:00:C9:B5:D8:02
Certificate issuer: /CN=fb11bd5c444c239c198776f360e0f100c9b5d802
Certificate serial: 018B8F43A2AE33289170A3C72E2ED8DBDA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xG9XERMI5wZh3bzYODxAMm12AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.mft
Manifest number: 0875
Signing time: Thu 02 Nov 2023 09:00:56 +0000
Manifest this update: Thu 02 Nov 2023 09:00:56 +0000
Manifest next update: Fri 03 Nov 2023 09:00:56 +0000
Files and hashes: 1: 1-xG9XERMI5wZh3bzYODxAMm12AI.crl (hash: JPsWKMAW6hbapA5a78DdAWXz93kHrH4hSZP3FH3DIEA=)
2: D5i_3XasEum-_a8kKL7-XwihGTs.roa (hash: +5SFXYGyMbIGbAgQCd96ISkPB3nQ8myWyijc1fjh+hA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:a2:ae:33:28:91:70:a3:c7:2e:2e:d8:db:da:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb11bd5c444c239c198776f360e0f100c9b5d802
Validity
Not Before: Nov 2 09:00:56 2023 GMT
Not After : Nov 3 09:00:56 2023 GMT
Subject: CN=c227da2686684c05cb65c1952ca836a5bdab86bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:27:08:70:c9:10:4b:72:9b:09:b4:16:7a:
c7:9a:5f:4c:b9:e2:6a:eb:17:4e:6a:13:56:19:6c:
93:0c:cc:3c:d1:db:3d:24:3d:2d:de:51:76:09:b0:
71:ab:91:86:23:6b:d9:07:cb:a3:8d:7c:ae:b0:a9:
d9:f8:c7:3a:9c:e0:55:b1:0e:1d:ad:b3:2e:10:00:
0e:e1:90:d7:c8:0d:ff:75:33:d1:a2:9f:a0:1e:61:
ec:09:63:91:11:e5:86:ca:fa:65:ff:15:7f:3e:94:
05:29:24:cb:58:9c:d3:b7:5c:ce:cd:de:a7:55:39:
4e:f2:48:67:7c:2a:b1:c8:fd:da:c5:5e:9d:fb:ce:
ac:e9:04:1b:4b:72:45:3c:33:dd:79:8c:41:c8:7d:
a8:0f:1a:20:ba:ee:7d:fc:37:2e:6f:bc:ea:c7:17:
4e:52:e7:cd:c2:57:24:78:0a:af:7b:e4:10:f6:13:
bb:25:3f:95:0d:f2:7c:45:9d:ff:19:1a:33:a9:0e:
eb:89:c0:4e:db:8a:10:95:6e:23:78:1f:b5:5e:a5:
f8:99:66:81:7f:c7:af:11:08:15:cd:d3:64:14:dc:
53:34:2b:c7:e6:a6:ed:81:0b:25:2c:aa:40:24:3d:
de:86:22:d4:ce:50:b2:6a:1a:7d:42:23:01:22:da:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:27:DA:26:86:68:4C:05:CB:65:C1:95:2C:A8:36:A5:BD:AB:86:BB
X509v3 Authority Key Identifier:
keyid:FB:11:BD:5C:44:4C:23:9C:19:87:76:F3:60:E0:F1:00:C9:B5:D8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xG9XERMI5wZh3bzYODxAMm12AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:07:84:79:be:16:5a:81:95:d1:a1:bc:d0:8d:a0:af:5d:6c:
c2:f1:7a:f0:44:22:72:f9:e5:7c:8f:55:c3:ba:df:95:36:95:
0a:fa:f5:1b:21:f1:5e:f3:ba:fe:5f:92:76:4b:18:7c:d5:68:
08:30:71:c0:42:83:6f:03:be:f7:8d:19:f1:4c:e8:30:5d:84:
74:18:ef:ff:c4:85:34:f3:d7:58:bc:ab:b8:a3:95:31:2a:e8:
49:24:10:00:1e:62:47:fe:f8:81:7b:1f:40:3b:34:6b:6f:6b:
04:d6:fb:32:18:89:e1:30:cb:53:85:51:45:90:a4:16:16:99:
a9:a8:5b:d7:8a:26:f4:58:d1:5f:16:4f:9a:47:e1:a4:ae:0b:
1f:05:30:2a:f9:97:48:3f:b3:65:a6:27:81:a5:b3:af:4d:a3:
57:07:83:d0:7f:d3:69:ff:92:d4:7e:29:93:5d:a6:b4:64:df:
d2:9a:fc:af:db:e2:43:f1:df:71:89:2e:c2:2c:e0:bd:ed:78:
d6:d6:d7:62:fe:12:55:34:c0:d6:86:d7:c9:77:14:2e:b4:aa:
31:4c:a9:c5:0e:ae:d9:28:c0:a9:a4:cd:9a:34:f1:7c:0f:53:
9d:72:95:61:eb:60:be:26:68:ed:73:e6:b3:9a:cf:d6:5f:28:
b9:a4:81:06
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYuPQ6KuMyiRcKPHLi7Y29p1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTFiZDVjNDQ0YzIzOWMxOTg3NzZmMzYwZTBmMTAwYzli
NWQ4MDIwHhcNMjMxMTAyMDkwMDU2WhcNMjMxMTAzMDkwMDU2WjAzMTEwLwYDVQQD
EyhjMjI3ZGEyNjg2Njg0YzA1Y2I2NWMxOTUyY2E4MzZhNWJkYWI4NmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPknCHDJEEtymwm0FnrHml9MueJq
6xdOahNWGWyTDMw80ds9JD0t3lF2CbBxq5GGI2vZB8ujjXyusKnZ+Mc6nOBVsQ4d
rbMuEAAO4ZDXyA3/dTPRop+gHmHsCWOREeWGyvpl/xV/PpQFKSTLWJzTt1zOzd6n
VTlO8khnfCqxyP3axV6d+86s6QQbS3JFPDPdeYxByH2oDxoguu59/Dcub7zqxxdO
UufNwlckeAqve+QQ9hO7JT+VDfJ8RZ3/GRozqQ7ricBO24oQlW4jeB+1XqX4mWaB
f8evEQgVzdNkFNxTNCvH5qbtgQslLKpAJD3ehiLUzlCyahp9QiMBItpB3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMIn2iaGaEwFy2XBlSyoNqW9q4a7MB8GA1UdIwQY
MBaAFPsRvVxETCOcGYd282Dg8QDJtdgCMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14RzlYRVJNSTV3WmgzYnpZT0R4QU1tMTJBSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMmFjOGEyLWYxY2MtNGY4NS05MGM5
LTRlYmVjMDExYTI4OC8xLzEteEc5WEVSTUk1d1poM2J6WU9EeEFNbTEyQUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IzLzJhYzhhMi1mMWNjLTRmODUtOTBjOS00ZWJlYzAxMWEy
ODgvMS8xLXhHOVhFUk1JNXdaaDNiellPRHhBTW0xMkFJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgeE
eb4WWoGV0aG80I2gr11swvF68EQicvnlfI9Vw7rflTaVCvr1GyHxXvO6/l+SdksY
fNVoCDBxwEKDbwO+940Z8UzoMF2EdBjv/8SFNPPXWLyruKOVMSroSSQQAB5iR/74
gXsfQDs0a29rBNb7MhiJ4TDLU4VRRZCkFhaZqahb14om9FjRXxZPmkfhpK4LHwUw
KvmXSD+zZaYngaWzr02jVweD0H/Taf+S1H4pk12mtGTf0pr8r9viQ/HfcYkuwizg
ve141tbXYv4SVTTA1obXyXcULrSqMUypxQ6u2SjAqaTNmjTxfA9TnXKVYetgviZo
7XPms5rP1l8ouaSBBg==
-----END CERTIFICATE-----
Generated at Thu Nov 2 14:44:48 2023 by rpki-client on console-fra.rpki-client.org