Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5f83db-efae-4091-b347-746543ccf489/1/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.mft
File: 1-9lnaznQ9ErBAV0AnwJkJGAtEvc.mft (raw, json)
Hash identifier: Gfdf4bzqBZaP9F5luJAG1f0Kmhg1mVUCwu/6bWp92Ic=
Subject key identifier: E0:A8:ED:04:29:7E:34:A7:B3:0D:39:AC:5C:79:AF:ED:0F:55:05:72
Authority key identifier: FB:D9:67:6B:39:D0:F4:4A:C1:01:5D:00:9F:02:64:24:60:2D:12:F7
Certificate issuer: /CN=fbd9676b39d0f44ac1015d009f026424602d12f7
Certificate serial: 01920D2924261C954294680F398AC303AA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5f83db-efae-4091-b347-746543ccf489/1/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.mft
Manifest number: 12C6
Signing time: Fri 20 Sep 2024 02:00:52 +0000
Manifest this update: Fri 20 Sep 2024 02:00:52 +0000
Manifest next update: Sat 21 Sep 2024 02:00:52 +0000
Files and hashes: 1: 1-9lnaznQ9ErBAV0AnwJkJGAtEvc.crl (hash: CT1XW3pOplfVyHP9F4nsLY+a3BrwPnfKNaQS/O6YevE=)
2: h_r6bXwwXve5SSblJ6DfR5uWSec.roa (hash: 8SO3K8+ihgYOtniqcX1WBR+jehxG/FZtox44DjqgBgA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0d:29:24:26:1c:95:42:94:68:0f:39:8a:c3:03:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd9676b39d0f44ac1015d009f026424602d12f7
Validity
Not Before: Sep 20 02:00:52 2024 GMT
Not After : Sep 21 02:00:52 2024 GMT
Subject: CN=e0a8ed04297e34a7b30d39ac5c79afed0f550572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d8:91:ce:66:05:7c:62:4d:6c:9c:d2:b4:d3:
d9:1e:a6:b8:f5:db:ed:20:bb:d7:45:8a:34:c7:fe:
95:7e:2d:3f:be:81:82:28:e5:98:70:cb:48:4b:6e:
c6:7b:e6:dc:99:eb:5e:07:9d:5e:dd:7a:3a:d6:09:
a9:5d:da:4a:2c:57:5f:00:86:0e:dd:d6:01:fa:52:
e4:b0:5a:d4:02:8d:ec:28:c3:e2:20:d6:5c:ef:51:
0f:6d:1a:08:f1:af:c0:26:a4:13:be:63:0b:22:b5:
5e:8a:0b:93:53:0a:f2:ae:84:38:66:84:5d:a0:d6:
36:53:07:1e:45:02:5b:ff:19:e5:13:54:b7:85:61:
db:fe:84:ed:9f:ab:d8:10:87:00:0b:9a:a0:d8:10:
7a:d6:f2:ec:9e:64:60:1a:99:be:99:99:3d:11:cd:
e2:b5:d6:7e:fb:f8:4c:45:3b:15:91:ad:bf:18:7b:
a4:c2:c3:31:c1:ee:4c:f7:b4:0e:72:33:a5:fd:3b:
d1:58:f0:14:61:ec:b7:64:7b:1a:a7:75:b8:99:a3:
73:b7:da:2c:cd:78:19:30:15:7c:aa:4d:ed:e4:3d:
94:cf:d6:a5:1a:22:eb:5c:21:45:e7:38:db:90:7f:
1b:83:e7:8d:52:d0:fb:36:a9:2e:08:79:26:e9:9b:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A8:ED:04:29:7E:34:A7:B3:0D:39:AC:5C:79:AF:ED:0F:55:05:72
X509v3 Authority Key Identifier:
keyid:FB:D9:67:6B:39:D0:F4:4A:C1:01:5D:00:9F:02:64:24:60:2D:12:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5f83db-efae-4091-b347-746543ccf489/1/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5f83db-efae-4091-b347-746543ccf489/1/1-9lnaznQ9ErBAV0AnwJkJGAtEvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a6:68:7d:a4:af:f4:fe:85:ca:99:55:78:d3:4b:09:d9:e5:
b6:20:27:79:c0:52:1a:53:4b:97:9d:51:d8:54:69:1c:5a:bd:
c6:b2:2f:b5:5e:70:f1:1a:8f:5b:d4:e6:d5:c6:1b:f7:0c:4c:
68:82:e1:60:89:3e:9a:75:5b:7e:23:a0:77:6b:dc:a3:11:6b:
b6:14:a7:d1:aa:82:95:41:81:2d:a0:bf:a6:8b:4a:d7:fa:b6:
af:14:0b:7c:4c:f8:54:79:f8:56:e9:0d:94:84:29:ac:cf:e9:
4e:73:ee:97:d4:65:f7:c0:2a:68:74:d0:9b:dd:0d:98:c2:f6:
57:c3:af:cf:1e:5d:c0:e4:45:fd:11:12:88:df:6c:b9:f7:f3:
0a:77:33:ca:33:dd:e2:88:38:3d:60:1c:ca:0e:b2:d5:ae:d3:
32:ed:b3:b2:22:ba:21:2b:31:8a:ef:1d:17:06:fe:0b:0c:c1:
86:a2:e0:e0:26:04:2c:7c:0d:bb:8b:d3:a3:72:6b:f1:4c:38:
f4:2c:e5:84:bd:95:01:de:77:7d:66:ff:47:30:87:7c:2e:7e:
cc:81:a9:2a:c2:b6:91:48:c8:a6:45:b7:e6:73:a0:9d:28:ff:
03:ac:8a:ae:cc:46:ff:f5:be:94:82:f9:01:20:cd:1d:0c:39:
72:89:4a:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZINKSQmHJVClGgPOYrDA6p0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZDk2NzZiMzlkMGY0NGFjMTAxNWQwMDlmMDI2NDI0NjAy
ZDEyZjcwHhcNMjQwOTIwMDIwMDUyWhcNMjQwOTIxMDIwMDUyWjAzMTEwLwYDVQQD
EyhlMGE4ZWQwNDI5N2UzNGE3YjMwZDM5YWM1Yzc5YWZlZDBmNTUwNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdiRzmYFfGJNbJzStNPZHqa49dvt
ILvXRYo0x/6Vfi0/voGCKOWYcMtIS27Ge+bcmeteB51e3Xo61gmpXdpKLFdfAIYO
3dYB+lLksFrUAo3sKMPiINZc71EPbRoI8a/AJqQTvmMLIrVeiguTUwryroQ4ZoRd
oNY2UwceRQJb/xnlE1S3hWHb/oTtn6vYEIcAC5qg2BB61vLsnmRgGpm+mZk9Ec3i
tdZ++/hMRTsVka2/GHukwsMxwe5M97QOcjOl/TvRWPAUYey3ZHsap3W4maNzt9os
zXgZMBV8qk3t5D2Uz9alGiLrXCFF5zjbkH8bg+eNUtD7NqkuCHkm6ZtXAwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOCo7QQpfjSnsw05rFx5r+0PVQVyMB8GA1UdIwQY
MBaAFPvZZ2s50PRKwQFdAJ8CZCRgLRL3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05bG5hem5ROUVyQkFWMEFud0prSkdBdEV2Yy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNWY4M2RiLWVmYWUtNDA5MS1iMzQ3
LTc0NjU0M2NjZjQ4OS8xLzEtOWxuYXpuUTlFckJBVjBBbndKa0pHQXRFdmMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M0LzVmODNkYi1lZmFlLTQwOTEtYjM0Ny03NDY1NDNjY2Y0
ODkvMS8xLTlsbmF6blE5RXJCQVYwQW53SmtKR0F0RXZjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaZo
faSv9P6FyplVeNNLCdnltiAnecBSGlNLl51R2FRpHFq9xrIvtV5w8RqPW9Tm1cYb
9wxMaILhYIk+mnVbfiOgd2vcoxFrthSn0aqClUGBLaC/potK1/q2rxQLfEz4VHn4
VukNlIQprM/pTnPul9Rl98AqaHTQm90NmML2V8Ovzx5dwORF/RESiN9suffzCncz
yjPd4og4PWAcyg6y1a7TMu2zsiK6ISsxiu8dFwb+CwzBhqLg4CYELHwNu4vTo3Jr
8Uw49CzlhL2VAd53fWb/RzCHfC5+zIGpKsK2kUjIpkW35nOgnSj/A6yKrsxG//W+
lIL5ASDNHQw5colKNg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:04 2025 by rpki-client