Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ff727-da95-4c98-ba59-5c4958004179/1/m64-yZSxM_gCN_KP5uNlt2W76Ck.mft
File: m64-yZSxM_gCN_KP5uNlt2W76Ck.mft (raw, json)
Hash identifier: jmlilswHVSE1q0j1GDQ95GaJF9WomHYnQbv8MbYTBHA=
Subject key identifier: 3A:70:48:46:DF:2D:94:43:AB:68:C0:31:6D:FF:7E:64:8A:C2:D1:75
Authority key identifier: 9B:AE:3E:C9:94:B1:33:F8:02:37:F2:8F:E6:E3:65:B7:65:BB:E8:29
Certificate issuer: /CN=9bae3ec994b133f80237f28fe6e365b765bbe829
Certificate serial: 018BC8210AB94EB5056E2C6ACC6A33E4A36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m64-yZSxM_gCN_KP5uNlt2W76Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1ff727-da95-4c98-ba59-5c4958004179/1/m64-yZSxM_gCN_KP5uNlt2W76Ck.mft
Manifest number: 09AA
Signing time: Mon 13 Nov 2023 10:01:30 +0000
Manifest this update: Mon 13 Nov 2023 10:01:30 +0000
Manifest next update: Tue 14 Nov 2023 10:01:30 +0000
Files and hashes: 1: e1HcWEJI0zGfxtPcMSmNGZM41C4.roa (hash: 3YAbYRIFDaKo0ScEd96dlvwlFsjbHSkJK1UVdUSTDbg=)
2: m64-yZSxM_gCN_KP5uNlt2W76Ck.crl (hash: OY30BAx3+6JFQPvO2Ut3a1Rl4D4W92mr8SL8B4Txbtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:21:0a:b9:4e:b5:05:6e:2c:6a:cc:6a:33:e4:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bae3ec994b133f80237f28fe6e365b765bbe829
Validity
Not Before: Nov 13 10:01:30 2023 GMT
Not After : Nov 14 10:01:30 2023 GMT
Subject: CN=3a704846df2d9443ab68c0316dff7e648ac2d175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:71:23:aa:82:91:71:34:36:8c:99:56:f9:05:
4a:f4:10:6d:ed:ea:2b:b8:d3:c6:cc:6d:cc:ad:aa:
93:5f:5c:74:b3:63:2d:4c:91:cd:63:a4:d2:48:98:
33:44:b1:20:63:7a:bb:88:5a:74:0a:1b:a2:d2:7d:
5d:19:3a:6f:85:d9:cb:c4:61:fd:55:21:be:0f:2a:
c7:04:76:c4:d2:28:c3:63:b5:53:95:ab:ef:08:53:
3b:e7:5a:1b:4d:14:9d:ca:d2:ad:86:ea:a8:ed:e9:
7f:88:56:4e:1e:34:6c:e7:b3:3a:1f:42:cc:91:58:
7c:c9:2a:fc:6d:76:01:ba:31:a9:06:6c:d6:ac:d0:
39:3e:e1:61:2a:d3:65:42:6f:f5:12:fb:ca:19:02:
5a:de:c1:b6:bf:d7:ba:2d:a0:86:5c:fa:d0:0a:8b:
cb:d2:8a:bb:cf:51:48:f6:43:e8:b5:9c:55:19:c1:
dd:af:74:62:ff:ce:03:de:73:8c:16:97:5c:9a:2b:
8a:bd:eb:6c:a8:9f:68:bf:9e:00:48:fd:eb:fd:69:
d0:8a:b1:27:39:07:b6:7d:c9:1c:a1:f0:62:f9:e8:
c9:ed:a4:db:1b:1a:58:44:3d:3a:6a:c3:02:92:35:
32:2e:36:eb:b5:89:55:2c:2b:19:6d:eb:5c:8a:25:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:48:46:DF:2D:94:43:AB:68:C0:31:6D:FF:7E:64:8A:C2:D1:75
X509v3 Authority Key Identifier:
keyid:9B:AE:3E:C9:94:B1:33:F8:02:37:F2:8F:E6:E3:65:B7:65:BB:E8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m64-yZSxM_gCN_KP5uNlt2W76Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ff727-da95-4c98-ba59-5c4958004179/1/m64-yZSxM_gCN_KP5uNlt2W76Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ff727-da95-4c98-ba59-5c4958004179/1/m64-yZSxM_gCN_KP5uNlt2W76Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:5d:f4:68:73:50:55:3f:cf:0a:22:d2:b2:05:57:98:00:
8c:af:fe:88:0a:f6:9e:a2:3b:31:f5:9f:43:60:c6:14:bd:8f:
e0:20:9b:66:f1:09:13:df:d7:05:b3:78:77:76:95:7c:87:fe:
b4:5a:4c:9f:3b:ec:0e:c7:4c:99:2f:8d:a8:91:45:fd:af:2a:
02:4e:81:19:1e:39:0c:5a:9c:cb:22:21:fe:e9:92:88:8b:32:
f1:8a:5b:9b:7f:62:0d:a7:d4:16:24:2d:72:1e:7e:d1:e3:9b:
0a:dc:0b:43:7a:cd:72:20:ad:63:3c:25:f3:0a:c7:6a:02:11:
9b:e6:4f:1d:2c:dc:52:23:39:4f:03:bf:32:58:dc:7e:3f:92:
94:4c:41:8a:d8:58:4e:c7:07:86:d0:23:33:f9:93:e5:b4:80:
6b:9c:81:dd:30:bf:0d:af:4b:ed:3b:5d:e5:5c:59:d8:3a:c4:
87:8d:40:eb:a6:1a:57:9f:dd:a5:22:2d:b6:37:0f:0c:f6:a7:
22:b4:18:4d:58:6c:10:22:a8:c8:b6:0f:d0:7b:44:ef:36:56:
ea:ea:2d:e6:80:93:2e:40:ab:4c:11:08:f8:5c:7d:10:f1:7f:
10:9c:ee:0a:0f:12:d3:02:d8:77:28:42:dd:1b:17:7d:cf:84:
be:bb:24:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvIIQq5TrUFbixqzGoz5KNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYWUzZWM5OTRiMTMzZjgwMjM3ZjI4ZmU2ZTM2NWI3NjVi
YmU4MjkwHhcNMjMxMTEzMTAwMTMwWhcNMjMxMTE0MTAwMTMwWjAzMTEwLwYDVQQD
EygzYTcwNDg0NmRmMmQ5NDQzYWI2OGMwMzE2ZGZmN2U2NDhhYzJkMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3EjqoKRcTQ2jJlW+QVK9BBt7eor
uNPGzG3MraqTX1x0s2MtTJHNY6TSSJgzRLEgY3q7iFp0Chui0n1dGTpvhdnLxGH9
VSG+DyrHBHbE0ijDY7VTlavvCFM751obTRSdytKthuqo7el/iFZOHjRs57M6H0LM
kVh8ySr8bXYBujGpBmzWrNA5PuFhKtNlQm/1EvvKGQJa3sG2v9e6LaCGXPrQCovL
0oq7z1FI9kPotZxVGcHdr3Ri/84D3nOMFpdcmiuKvetsqJ9ov54ASP3r/WnQirEn
OQe2fckcofBi+ejJ7aTbGxpYRD06asMCkjUyLjbrtYlVLCsZbetciiWujwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpwSEbfLZRDq2jAMW3/fmSKwtF1MB8GA1UdIwQY
MBaAFJuuPsmUsTP4Ajfyj+bjZbdlu+gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTY0LXlaU3hNX2dDTl9LUDV1Tmx0Mlc3NkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZmY3MjctZGE5NS00Yzk4LWJhNTkt
NWM0OTU4MDA0MTc5LzEvbTY0LXlaU3hNX2dDTl9LUDV1Tmx0Mlc3NkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZmY3MjctZGE5NS00Yzk4LWJhNTktNWM0OTU4MDA0MTc5
LzEvbTY0LXlaU3hNX2dDTl9LUDV1Tmx0Mlc3NkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOVd9Ghz
UFU/zwoi0rIFV5gAjK/+iAr2nqI7MfWfQ2DGFL2P4CCbZvEJE9/XBbN4d3aVfIf+
tFpMnzvsDsdMmS+NqJFF/a8qAk6BGR45DFqcyyIh/umSiIsy8Ypbm39iDafUFiQt
ch5+0eObCtwLQ3rNciCtYzwl8wrHagIRm+ZPHSzcUiM5TwO/Mljcfj+SlExBithY
TscHhtAjM/mT5bSAa5yB3TC/Da9L7Ttd5VxZ2DrEh41A66YaV5/dpSIttjcPDPan
IrQYTVhsECKoyLYP0HtE7zZW6uot5oCTLkCrTBEI+Fx9EPF/EJzuCg8S0wLYdyhC
3RsXfc+EvrskYA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:39 2024 by rpki-client on console-fra.rpki-client.org