Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.mft
File: yjt6AdfbQCXJi0kLOVb6nkbh82I.mft (raw, json)
Hash identifier: W+OSKcmjSSt3QjD+s2VaoqP/OgO00K6pcPb4pEbW8e4=
Subject key identifier: EF:E6:90:29:57:D2:39:78:6F:2F:22:00:1D:23:ED:54:07:72:20:EA
Authority key identifier: CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
Certificate issuer: /CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Certificate serial: 018BD1C8C83FAE50579801BDFD1BB1C4DAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.mft
Manifest number: 0864
Signing time: Wed 15 Nov 2023 07:01:18 +0000
Manifest this update: Wed 15 Nov 2023 07:01:18 +0000
Manifest next update: Thu 16 Nov 2023 07:01:18 +0000
Files and hashes: 1: UzXM_XjjU4Bn5tWRHHbQuzZSz04.roa (hash: xP8ieVTgMFSyUKtZVvi1GmzzHAA4yT2g3kAhNf2tdSo=)
2: yjt6AdfbQCXJi0kLOVb6nkbh82I.crl (hash: J5EuO/iYXyjZdVMFhAmnusVX8KiGLuBoY/DeX6ObBII=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:c8:c8:3f:ae:50:57:98:01:bd:fd:1b:b1:c4:da:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3b7a01d7db4025c98b490b3956fa9e46e1f362
Validity
Not Before: Nov 15 07:01:18 2023 GMT
Not After : Nov 16 07:01:18 2023 GMT
Subject: CN=efe6902957d239786f2f22001d23ed54077220ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:6e:e1:82:bf:a4:a3:48:6d:14:62:b6:50:
f0:e9:67:83:34:db:01:4b:aa:d2:26:c1:c8:ff:d5:
48:89:57:13:26:49:99:1d:fc:d1:21:8a:46:0c:8d:
a4:58:31:70:af:9c:48:7f:7e:32:47:2e:23:78:d8:
09:24:23:20:55:9d:a6:aa:c9:b7:61:f5:84:e8:4e:
13:fd:4d:67:76:a9:80:65:c8:3d:b1:83:bf:2e:61:
a3:c8:ae:f2:0d:d6:4a:e5:3d:a9:7a:b6:39:71:43:
7c:c3:47:b6:0a:22:20:85:82:4e:79:75:84:9c:f4:
9d:37:59:73:7b:e2:25:bc:f9:a6:25:4a:e7:7b:9f:
bd:da:0d:7c:8e:dd:89:07:7a:57:44:46:4e:97:d5:
cf:b4:d0:33:e1:8d:05:f0:f9:a2:43:2a:08:a7:3c:
e0:ac:8b:57:fb:05:aa:28:6b:3d:ef:2b:9e:b2:49:
25:35:7d:94:e6:f5:2b:89:e2:db:0d:62:3d:60:bb:
37:e9:7a:49:46:7c:dc:97:4d:37:8d:7b:84:e9:5e:
88:ff:15:68:9f:1e:69:51:64:6b:ed:04:ae:88:f3:
74:b1:5e:66:67:00:4b:5c:b4:ae:9e:9b:1d:e5:e0:
65:96:c7:70:aa:41:c9:b0:a8:9d:71:c1:17:55:2c:
41:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:90:29:57:D2:39:78:6F:2F:22:00:1D:23:ED:54:07:72:20:EA
X509v3 Authority Key Identifier:
keyid:CA:3B:7A:01:D7:DB:40:25:C9:8B:49:0B:39:56:FA:9E:46:E1:F3:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjt6AdfbQCXJi0kLOVb6nkbh82I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/72b0bf-6ffd-456c-92c4-759496cf7383/1/yjt6AdfbQCXJi0kLOVb6nkbh82I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:44:33:f6:7c:0e:11:c8:f6:96:92:59:83:ba:72:08:8a:76:
03:6b:81:55:93:e5:0c:00:cc:d8:72:a5:d0:99:69:76:0b:9f:
28:74:61:ae:45:38:4a:e8:ec:9b:21:56:c8:e0:9a:97:1c:a2:
17:0b:c9:8b:55:7b:34:24:e2:6c:53:ed:3c:3c:31:53:6c:1a:
c1:96:c5:b8:6b:3a:77:0c:92:ed:64:88:9b:db:a7:ea:8a:35:
e2:a7:fe:00:fc:28:2a:0f:56:97:03:3c:80:82:be:c5:d3:63:
46:f1:05:10:c9:d3:09:f3:99:35:3d:c7:af:64:a5:af:37:cb:
bf:b0:34:dc:2e:b8:09:9c:b1:19:b4:11:0f:cf:ee:d5:2f:e1:
72:83:2a:9f:b3:d1:43:e0:05:7a:32:93:dd:2d:9b:3d:22:c1:
a4:af:55:1b:92:ac:14:76:8f:86:f6:40:11:12:92:bc:74:69:
7d:ea:a5:7b:cc:cf:43:f7:78:05:37:a7:8a:dd:3f:7a:ae:59:
ef:9d:da:75:87:45:2b:c1:30:14:98:46:ac:e8:26:dc:e5:a2:
09:a1:07:07:c3:08:ce:78:4a:6e:f8:0c:8b:b6:7e:25:ed:00:
84:c8:19:5e:96:3f:f0:a8:52:9c:08:20:96:7a:08:c4:3d:a4:
7c:73:ba:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvRyMg/rlBXmAG9/RuxxNq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhM2I3YTAxZDdkYjQwMjVjOThiNDkwYjM5NTZmYTllNDZl
MWYzNjIwHhcNMjMxMTE1MDcwMTE4WhcNMjMxMTE2MDcwMTE4WjAzMTEwLwYDVQQD
EyhlZmU2OTAyOTU3ZDIzOTc4NmYyZjIyMDAxZDIzZWQ1NDA3NzIyMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloNu4YK/pKNIbRRitlDw6WeDNNsB
S6rSJsHI/9VIiVcTJkmZHfzRIYpGDI2kWDFwr5xIf34yRy4jeNgJJCMgVZ2mqsm3
YfWE6E4T/U1ndqmAZcg9sYO/LmGjyK7yDdZK5T2perY5cUN8w0e2CiIghYJOeXWE
nPSdN1lze+IlvPmmJUrne5+92g18jt2JB3pXREZOl9XPtNAz4Y0F8PmiQyoIpzzg
rItX+wWqKGs97yueskklNX2U5vUrieLbDWI9YLs36XpJRnzcl003jXuE6V6I/xVo
nx5pUWRr7QSuiPN0sV5mZwBLXLSunpsd5eBllsdwqkHJsKidccEXVSxBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/mkClX0jl4by8iAB0j7VQHciDqMB8GA1UdIwQY
MBaAFMo7egHX20AlyYtJCzlW+p5G4fNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWp0NkFkZmJRQ1hKaTBrTE9WYjZua2JoODJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83MmIwYmYtNmZmZC00NTZjLTkyYzQt
NzU5NDk2Y2Y3MzgzLzEveWp0NkFkZmJRQ1hKaTBrTE9WYjZua2JoODJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83MmIwYmYtNmZmZC00NTZjLTkyYzQtNzU5NDk2Y2Y3Mzgz
LzEveWp0NkFkZmJRQ1hKaTBrTE9WYjZua2JoODJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkQz9nwO
Ecj2lpJZg7pyCIp2A2uBVZPlDADM2HKl0JlpdgufKHRhrkU4SujsmyFWyOCalxyi
FwvJi1V7NCTibFPtPDwxU2wawZbFuGs6dwyS7WSIm9un6oo14qf+APwoKg9WlwM8
gIK+xdNjRvEFEMnTCfOZNT3Hr2SlrzfLv7A03C64CZyxGbQRD8/u1S/hcoMqn7PR
Q+AFejKT3S2bPSLBpK9VG5KsFHaPhvZAERKSvHRpfeqle8zPQ/d4BTenit0/eq5Z
753adYdFK8EwFJhGrOgm3OWiCaEHB8MIznhKbvgMi7Z+Je0AhMgZXpY/8KhSnAgg
lnoIxD2kfHO6EA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:26 2024 by rpki-client on console-fra.rpki-client.org