Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/rj9hclnw6hqnlagjpBB5cdVQrVo.mft
File: rj9hclnw6hqnlagjpBB5cdVQrVo.mft (raw, json)
Hash identifier: o0kajZsPF6N5EsFlYg1LwWnuH08omfaN87wXsy+Wrpw=
Subject key identifier: B4:36:BC:CB:76:E7:84:89:E5:DB:2E:C9:26:77:E5:B4:3F:1B:20:61
Authority key identifier: AE:3F:61:72:59:F0:EA:1A:A7:95:A8:23:A4:10:79:71:D5:50:AD:5A
Certificate issuer: /CN=ae3f617259f0ea1aa795a823a4107971d550ad5a
Certificate serial: 018B7E18EFDF6ADF248751C39AD150BC02AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rj9hclnw6hqnlagjpBB5cdVQrVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/rj9hclnw6hqnlagjpBB5cdVQrVo.mft
Manifest number: 0335
Signing time: Mon 30 Oct 2023 01:00:45 +0000
Manifest this update: Mon 30 Oct 2023 01:00:45 +0000
Manifest next update: Tue 31 Oct 2023 01:00:45 +0000
Files and hashes: 1: VOi6P1t1QSVZ8Cfoa3-sgZtJXOc.roa (hash: EarpdlaxI3BAXLFAsjiM9ZfIRPCnpSlKdq4TrAewDA8=)
2: rj9hclnw6hqnlagjpBB5cdVQrVo.crl (hash: uV/BkXX9IqdXQl/wi0WatFsx+GxHeGuhaBifbeB2k68=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7e:18:ef:df:6a:df:24:87:51:c3:9a:d1:50:bc:02:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3f617259f0ea1aa795a823a4107971d550ad5a
Validity
Not Before: Oct 30 01:00:45 2023 GMT
Not After : Oct 31 01:00:45 2023 GMT
Subject: CN=b436bccb76e78489e5db2ec92677e5b43f1b2061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:f8:33:54:30:e6:97:5b:50:a1:a2:5c:22:
03:fa:69:a3:a3:f7:bb:58:3a:05:b1:3d:2c:a0:6b:
06:15:01:f7:50:6e:7c:39:b8:8e:a6:45:3d:02:5f:
c6:cf:50:cd:44:e7:29:cc:c4:2f:98:b9:ce:31:b7:
33:3b:50:39:8d:3d:d0:03:89:8e:18:c7:6b:2a:3f:
a3:d2:97:8b:7b:43:19:24:43:ad:38:8b:ae:c6:7a:
55:f4:10:a2:09:b8:4b:ab:d8:78:bd:b3:c6:fe:f8:
0a:8b:31:5c:73:b9:72:6c:8d:fc:36:68:a4:84:99:
c4:a5:f0:99:c2:26:bb:e4:16:b8:82:f9:e9:07:36:
e9:50:1d:44:6f:e7:b6:e0:9b:09:48:bf:73:65:1a:
1a:3f:fb:e6:c9:2a:e1:73:99:4c:85:6d:03:ff:af:
04:88:39:05:5c:2d:84:a9:1a:70:19:db:7f:e8:1d:
b9:90:ad:2e:cc:a0:8f:24:cc:bd:79:af:0a:47:2b:
95:99:64:d0:3f:1d:31:b6:49:b2:7e:85:f6:4e:00:
fb:43:8c:66:f2:78:33:f0:68:ac:32:6d:36:9a:6d:
a1:25:74:6b:67:4a:07:d0:b6:e2:59:d6:4a:b2:19:
e5:d8:ee:9f:7f:d8:65:6b:c0:ee:02:fa:b6:bd:8e:
2e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:36:BC:CB:76:E7:84:89:E5:DB:2E:C9:26:77:E5:B4:3F:1B:20:61
X509v3 Authority Key Identifier:
keyid:AE:3F:61:72:59:F0:EA:1A:A7:95:A8:23:A4:10:79:71:D5:50:AD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rj9hclnw6hqnlagjpBB5cdVQrVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/rj9hclnw6hqnlagjpBB5cdVQrVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/rj9hclnw6hqnlagjpBB5cdVQrVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:90:e2:2c:e3:44:d5:0b:0d:a6:a4:7c:c8:d6:89:70:61:4b:
22:60:ca:70:fd:03:50:ce:1d:1f:67:bf:5e:a0:0d:e8:57:bd:
31:03:a7:db:fb:e3:db:a8:34:72:19:60:99:0f:1b:01:04:bd:
e8:70:1f:d8:2a:6d:14:a6:2f:9f:bf:d3:62:45:4e:9c:37:86:
b9:94:fb:bc:15:f9:10:a3:89:c9:5b:8b:1c:7f:d5:45:49:d3:
c0:4c:4c:64:b9:81:ed:43:f7:9b:23:51:70:71:90:b6:d3:7b:
86:d8:e0:0f:7b:7d:aa:89:a8:6b:e2:8d:28:01:c5:0c:b7:78:
85:92:da:03:55:64:2c:b0:31:20:1c:fe:40:97:ab:db:24:6c:
7c:e0:36:16:aa:58:9e:44:32:88:01:31:a4:93:6e:3d:49:1f:
39:ca:5f:1a:4a:ac:0f:1d:96:3e:02:08:9b:9b:b1:7a:9d:e2:
7a:8a:ec:dd:24:ba:47:ef:6b:ba:91:a3:7f:08:3a:f8:9d:cb:
92:f4:e1:15:cd:1a:ea:c1:e2:1e:9c:b4:2d:24:47:33:b6:e3:
29:ab:da:80:9d:45:f1:85:cc:a4:4a:53:e5:22:68:e8:7f:63:
c6:4e:54:f8:53:a3:02:08:79:a9:1a:df:7a:a2:bd:77:04:5e:
5c:68:59:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYt+GO/fat8kh1HDmtFQvAKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlM2Y2MTcyNTlmMGVhMWFhNzk1YTgyM2E0MTA3OTcxZDU1
MGFkNWEwHhcNMjMxMDMwMDEwMDQ1WhcNMjMxMDMxMDEwMDQ1WjAzMTEwLwYDVQQD
EyhiNDM2YmNjYjc2ZTc4NDg5ZTVkYjJlYzkyNjc3ZTViNDNmMWIyMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJX4M1Qw5pdbUKGiXCID+mmjo/e7
WDoFsT0soGsGFQH3UG58ObiOpkU9Al/Gz1DNROcpzMQvmLnOMbczO1A5jT3QA4mO
GMdrKj+j0peLe0MZJEOtOIuuxnpV9BCiCbhLq9h4vbPG/vgKizFcc7lybI38Nmik
hJnEpfCZwia75Ba4gvnpBzbpUB1Eb+e24JsJSL9zZRoaP/vmySrhc5lMhW0D/68E
iDkFXC2EqRpwGdt/6B25kK0uzKCPJMy9ea8KRyuVmWTQPx0xtkmyfoX2TgD7Q4xm
8ngz8GisMm02mm2hJXRrZ0oH0LbiWdZKshnl2O6ff9hla8DuAvq2vY4uWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQ2vMt254SJ5dsuySZ35bQ/GyBhMB8GA1UdIwQY
MBaAFK4/YXJZ8Ooap5WoI6QQeXHVUK1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmo5aGNsbnc2aHFubGFnanBCQjVjZFZRclZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTkt
NzgxMjgwZmQyNDEyLzEvcmo5aGNsbnc2aHFubGFnanBCQjVjZFZRclZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ZjAzZmQtNTIxNy00ZTUyLWExNTktNzgxMjgwZmQyNDEy
LzEvcmo5aGNsbnc2aHFubGFnanBCQjVjZFZRclZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZDiLONE
1QsNpqR8yNaJcGFLImDKcP0DUM4dH2e/XqAN6Fe9MQOn2/vj26g0chlgmQ8bAQS9
6HAf2CptFKYvn7/TYkVOnDeGuZT7vBX5EKOJyVuLHH/VRUnTwExMZLmB7UP3myNR
cHGQttN7htjgD3t9qomoa+KNKAHFDLd4hZLaA1VkLLAxIBz+QJer2yRsfOA2FqpY
nkQyiAExpJNuPUkfOcpfGkqsDx2WPgIIm5uxep3ieors3SS6R+9rupGjfwg6+J3L
kvThFc0a6sHiHpy0LSRHM7bjKavagJ1F8YXMpEpT5SJo6H9jxk5U+FOjAgh5qRrf
eqK9dwReXGhZ9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:31 2024 by rpki-client on console-fra.rpki-client.org