Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.mft
File: fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.mft (raw, json)
Hash identifier: YgzgaWzsR2D2VpchgpNWpMt0haHJ2IKnvVbs+7IIXkA=
Subject key identifier: 33:66:F7:C7:38:05:67:5E:39:BE:4C:3C:7D:05:E1:4A:2C:FD:EE:8F
Authority key identifier: 7C:36:48:FB:31:49:0E:5F:07:0A:32:9A:60:11:E5:7D:59:D9:E0:74
Certificate issuer: /CN=7c3648fb31490e5f070a329a6011e57d59d9e074
Certificate serial: 018B65D9D1A524EC26BABF08157CDF0CA3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.mft
Manifest number: 0F52
Signing time: Wed 25 Oct 2023 08:00:55 +0000
Manifest this update: Wed 25 Oct 2023 08:00:55 +0000
Manifest next update: Thu 26 Oct 2023 08:00:55 +0000
Files and hashes: 1: fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.crl (hash: yXwK3qvX4N4loTPIjssyc4qNc7cx8eUnancMy8HXqmc=)
2: sildmE4NJylr9PQfg33XYPssWGg.roa (hash: PbLrIOvYdTLRuuCvWc+EIpkqf+ZcF4DcU7J6Br0nCZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:d9:d1:a5:24:ec:26:ba:bf:08:15:7c:df:0c:a3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3648fb31490e5f070a329a6011e57d59d9e074
Validity
Not Before: Oct 25 08:00:55 2023 GMT
Not After : Oct 26 08:00:55 2023 GMT
Subject: CN=3366f7c73805675e39be4c3c7d05e14a2cfdee8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:e6:e4:c0:ea:db:86:69:cd:20:6f:43:04:
a5:47:8d:b0:4f:eb:8f:c6:4a:83:68:0c:4e:8d:a3:
1b:80:cd:4a:4c:ca:b4:1d:39:e0:3c:c7:79:5f:51:
61:d5:43:ac:3e:cf:c5:52:45:8b:02:18:35:cb:56:
52:2f:dc:e4:03:b7:2a:ef:3b:5b:19:ee:f4:d6:8b:
a5:7b:6f:49:2c:09:1e:ab:e4:eb:91:4b:80:ed:99:
c4:aa:09:a1:e9:c6:93:43:75:ca:92:55:b0:c8:14:
3a:39:44:ca:84:61:7f:3d:0f:dc:25:af:1f:ab:95:
a2:e2:ef:69:72:09:9c:7f:a2:fb:bf:65:93:40:4e:
64:c1:e6:01:ef:96:2b:ef:b9:15:78:59:9d:0d:70:
e0:9d:5b:72:74:5c:04:0a:bc:5f:0e:ae:3b:66:fc:
c9:2d:45:66:a5:56:17:4e:8b:5e:cc:39:b2:42:e0:
69:21:5f:a0:51:eb:8d:e9:e9:d7:b5:ac:a9:2b:f9:
c4:5b:87:9a:a2:3e:7b:e1:7a:14:00:e5:71:36:e6:
e6:42:ca:03:c6:2d:94:78:0c:b0:30:51:8c:c5:cc:
1f:54:28:f2:0f:9a:f9:01:fc:56:4d:2e:c0:04:34:
25:41:95:bc:a4:07:e9:e9:7b:58:dc:c3:15:c9:a4:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:66:F7:C7:38:05:67:5E:39:BE:4C:3C:7D:05:E1:4A:2C:FD:EE:8F
X509v3 Authority Key Identifier:
keyid:7C:36:48:FB:31:49:0E:5F:07:0A:32:9A:60:11:E5:7D:59:D9:E0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c2f486-3ac9-48f3-8b7f-5958b3e64d19/1/fDZI-zFJDl8HCjKaYBHlfVnZ4HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b0:61:fa:50:1c:0d:90:03:8b:d4:f8:d0:b2:8a:5f:f6:a6:
cd:20:5b:fe:c5:ed:c0:a5:b9:ac:68:76:0f:72:e5:a3:7f:32:
35:29:4c:e8:2c:d4:dc:1c:a6:a7:04:41:cf:6e:a2:9b:01:97:
6a:af:f5:bf:e0:b0:76:fd:57:76:d9:91:87:5f:ff:97:85:01:
84:6f:28:12:3a:ea:5e:8f:83:2e:df:ee:2b:46:58:1e:8c:17:
2e:fb:61:85:b4:57:f1:aa:7c:9f:e7:e4:fd:46:e1:fe:9a:ae:
a3:13:01:ca:26:f0:62:88:3a:b0:f7:72:4a:0c:25:87:f2:33:
45:50:f1:91:f2:ce:6c:cb:b2:b3:59:ad:fe:58:3c:f8:a6:da:
e0:0a:92:74:35:70:61:eb:d5:55:e4:9f:ba:9c:11:45:ab:82:
fd:85:d2:85:62:db:71:ea:e3:66:b7:0a:b2:a4:72:4c:d0:cf:
e5:94:04:db:26:35:34:bb:d0:e0:a5:3e:de:ec:9c:c2:e7:e4:
21:5f:81:74:bb:10:d9:ef:36:a8:b1:6e:86:23:ab:50:de:56:
55:be:50:c8:32:11:9a:35:9e:93:eb:b0:3b:1b:b0:39:73:e4:
c9:7c:7b:82:bc:df:db:f4:76:fd:8d:97:94:0e:26:a6:3e:1c:
2e:f9:bf:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYtl2dGlJOwmur8IFXzfDKPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMzY0OGZiMzE0OTBlNWYwNzBhMzI5YTYwMTFlNTdkNTlk
OWUwNzQwHhcNMjMxMDI1MDgwMDU1WhcNMjMxMDI2MDgwMDU1WjAzMTEwLwYDVQQD
EygzMzY2ZjdjNzM4MDU2NzVlMzliZTRjM2M3ZDA1ZTE0YTJjZmRlZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv7m5MDq24ZpzSBvQwSlR42wT+uP
xkqDaAxOjaMbgM1KTMq0HTngPMd5X1Fh1UOsPs/FUkWLAhg1y1ZSL9zkA7cq7ztb
Ge701oule29JLAkeq+TrkUuA7ZnEqgmh6caTQ3XKklWwyBQ6OUTKhGF/PQ/cJa8f
q5Wi4u9pcgmcf6L7v2WTQE5kweYB75Yr77kVeFmdDXDgnVtydFwECrxfDq47ZvzJ
LUVmpVYXTotezDmyQuBpIV+gUeuN6enXtaypK/nEW4eaoj574XoUAOVxNubmQsoD
xi2UeAywMFGMxcwfVCjyD5r5AfxWTS7ABDQlQZW8pAfp6XtY3MMVyaRp5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNm98c4BWdeOb5MPH0F4Uos/e6PMB8GA1UdIwQY
MBaAFHw2SPsxSQ5fBwoymmAR5X1Z2eB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkRaSS16RkpEbDhIQ2pLYVlCSGxmVm5aNEhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMmY0ODYtM2FjOS00OGYzLThiN2Yt
NTk1OGIzZTY0ZDE5LzEvZkRaSS16RkpEbDhIQ2pLYVlCSGxmVm5aNEhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jMmY0ODYtM2FjOS00OGYzLThiN2YtNTk1OGIzZTY0ZDE5
LzEvZkRaSS16RkpEbDhIQ2pLYVlCSGxmVm5aNEhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULBh+lAc
DZADi9T40LKKX/amzSBb/sXtwKW5rGh2D3Llo38yNSlM6CzU3BympwRBz26imwGX
aq/1v+Cwdv1XdtmRh1//l4UBhG8oEjrqXo+DLt/uK0ZYHowXLvthhbRX8ap8n+fk
/Ubh/pquoxMByibwYog6sPdySgwlh/IzRVDxkfLObMuys1mt/lg8+Kba4AqSdDVw
YevVVeSfupwRRauC/YXShWLbcerjZrcKsqRyTNDP5ZQE2yY1NLvQ4KU+3uycwufk
IV+BdLsQ2e82qLFuhiOrUN5WVb5QyDIRmjWek+uwOxuwOXPkyXx7grzf2/R2/Y2X
lA4mpj4cLvm/3Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:54 2025 by rpki-client