Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/7zqdiuBts5140h_Lf3pp61g31nY.mft
File: 7zqdiuBts5140h_Lf3pp61g31nY.mft (raw, json)
Hash identifier: nswjJioOj4SZ1gytiXUWFh9jG7hYRXDRZFJBKHkQTNo=
Subject key identifier: 5C:43:90:4C:48:2A:0B:54:A1:2B:0F:DC:5F:2B:AA:DA:75:4D:CA:B7
Authority key identifier: EF:3A:9D:8A:E0:6D:B3:9D:78:D2:1F:CB:7F:7A:69:EB:58:37:D6:76
Certificate issuer: /CN=ef3a9d8ae06db39d78d21fcb7f7a69eb5837d676
Certificate serial: 018BEFD31627F6BEC54E5B5FAED2CDD23D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zqdiuBts5140h_Lf3pp61g31nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/7zqdiuBts5140h_Lf3pp61g31nY.mft
Manifest number: 0855
Signing time: Tue 21 Nov 2023 03:01:10 +0000
Manifest this update: Tue 21 Nov 2023 03:01:10 +0000
Manifest next update: Wed 22 Nov 2023 03:01:10 +0000
Files and hashes: 1: 15v4g69iNc-0prqocWTT0PxGhc0.roa (hash: z84JWxpV1tkhu6ckVAmmqJN2vKJyH2wFVeiHlLYLchA=)
2: 7zqdiuBts5140h_Lf3pp61g31nY.crl (hash: O/xGojIMrCb4d+7aleAndUMsNxXOCJoqhRTDQp6ptBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ef:d3:16:27:f6:be:c5:4e:5b:5f:ae:d2:cd:d2:3d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3a9d8ae06db39d78d21fcb7f7a69eb5837d676
Validity
Not Before: Nov 21 03:01:10 2023 GMT
Not After : Nov 22 03:01:10 2023 GMT
Subject: CN=5c43904c482a0b54a12b0fdc5f2baada754dcab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:ff:63:34:03:5e:6b:79:85:0c:63:e0:3f:
7f:d2:b0:ee:d3:29:13:67:2a:fd:67:84:fb:37:16:
af:c1:d1:16:b1:a6:dd:67:81:ea:89:dd:7e:fa:be:
cf:c6:c7:a6:af:bb:1c:88:50:8e:6a:2a:70:1d:fe:
11:fd:eb:93:22:a4:3f:c5:4a:e1:34:2a:93:c4:08:
8a:0c:7d:b5:a6:c3:29:44:99:f5:15:8a:01:8e:df:
95:7e:36:36:8f:99:3e:66:95:4d:98:c6:6f:90:61:
a0:bc:ed:fd:42:52:cc:24:aa:a6:3c:d4:0e:b4:e5:
d1:9c:b1:1e:a9:cb:33:2d:a2:1f:0a:e5:ae:e4:5b:
78:17:e0:3a:2f:7c:33:a6:ca:09:01:ed:52:b6:f2:
86:9c:8a:e4:66:26:cf:51:3e:eb:9e:a4:76:f0:4e:
94:af:4c:1e:74:7d:10:a6:05:8d:b1:44:97:90:6e:
98:e0:3c:7b:e6:f4:87:85:ad:e9:f1:08:1c:7b:62:
98:1f:dd:c7:3f:a5:2a:d8:40:28:e6:a1:9f:d2:fd:
f5:57:06:b3:ca:3c:d9:4c:18:71:b7:22:ec:e2:15:
91:8d:df:4a:83:78:21:e6:09:3c:23:80:28:47:97:
24:34:ad:94:e3:47:3d:9a:60:d8:51:ef:d6:e6:fb:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:90:4C:48:2A:0B:54:A1:2B:0F:DC:5F:2B:AA:DA:75:4D:CA:B7
X509v3 Authority Key Identifier:
keyid:EF:3A:9D:8A:E0:6D:B3:9D:78:D2:1F:CB:7F:7A:69:EB:58:37:D6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zqdiuBts5140h_Lf3pp61g31nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/7zqdiuBts5140h_Lf3pp61g31nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/004a1a-ce37-466a-b226-15a26c71ec90/1/7zqdiuBts5140h_Lf3pp61g31nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6f:4f:e6:af:51:f6:6c:58:99:30:55:89:fd:c4:63:9d:a7:
55:b0:d0:a2:bc:e0:c5:fc:19:dc:17:e7:f1:7f:80:1f:a7:b4:
a4:f6:48:7b:cb:d6:6c:92:ff:b1:3a:9b:70:0c:4f:88:6f:c7:
02:d6:bc:8d:4e:7a:31:af:1a:a8:5a:69:d2:cc:05:ba:32:8e:
9f:73:8e:a7:35:19:5a:5e:eb:5c:9a:d2:76:e6:1c:63:76:91:
de:3a:3c:ea:bf:df:34:a5:cf:cc:d8:af:96:37:cc:3a:6a:15:
c1:a8:dc:a1:7b:32:42:8f:d9:99:a2:ea:22:93:64:84:24:81:
99:98:0b:c5:a5:eb:66:0c:ec:a0:94:8a:22:b0:b6:db:37:4f:
0d:59:50:71:b2:6a:b5:a9:fd:fc:41:e1:94:d9:50:db:a8:11:
bf:1e:ce:0f:35:b4:3f:54:e3:61:22:a9:ed:5d:e9:9f:17:e2:
83:01:8b:4c:ca:9c:21:70:84:02:a6:98:c2:5b:57:ef:88:93:
0e:4f:de:63:ca:5d:d0:50:aa:64:f4:bd:8d:63:c1:fe:70:e5:
41:cc:6d:69:4b:95:69:fc:a3:fb:c6:c4:d1:a9:12:41:01:1f:
ef:ee:60:c0:97:77:b7:43:03:79:f8:84:ac:c7:52:6a:2a:ec:
ed:aa:70:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvv0xYn9r7FTltfrtLN0j2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmM2E5ZDhhZTA2ZGIzOWQ3OGQyMWZjYjdmN2E2OWViNTgz
N2Q2NzYwHhcNMjMxMTIxMDMwMTEwWhcNMjMxMTIyMDMwMTEwWjAzMTEwLwYDVQQD
Eyg1YzQzOTA0YzQ4MmEwYjU0YTEyYjBmZGM1ZjJiYWFkYTc1NGRjYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm///YzQDXmt5hQxj4D9/0rDu0ykT
Zyr9Z4T7NxavwdEWsabdZ4Hqid1++r7Pxsemr7sciFCOaipwHf4R/euTIqQ/xUrh
NCqTxAiKDH21psMpRJn1FYoBjt+VfjY2j5k+ZpVNmMZvkGGgvO39QlLMJKqmPNQO
tOXRnLEeqcszLaIfCuWu5Ft4F+A6L3wzpsoJAe1StvKGnIrkZibPUT7rnqR28E6U
r0wedH0QpgWNsUSXkG6Y4Dx75vSHha3p8Qgce2KYH93HP6Uq2EAo5qGf0v31Vwaz
yjzZTBhxtyLs4hWRjd9Kg3gh5gk8I4AoR5ckNK2U40c9mmDYUe/W5vvIkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxDkExIKgtUoSsP3F8rqtp1Tcq3MB8GA1UdIwQY
MBaAFO86nYrgbbOdeNIfy396aetYN9Z2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3pxZGl1QnRzNTE0MGhfTGYzcHA2MWczMW5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDRhMWEtY2UzNy00NjZhLWIyMjYt
MTVhMjZjNzFlYzkwLzEvN3pxZGl1QnRzNTE0MGhfTGYzcHA2MWczMW5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDRhMWEtY2UzNy00NjZhLWIyMjYtMTVhMjZjNzFlYzkw
LzEvN3pxZGl1QnRzNTE0MGhfTGYzcHA2MWczMW5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQW9P5q9R
9mxYmTBVif3EY52nVbDQorzgxfwZ3Bfn8X+AH6e0pPZIe8vWbJL/sTqbcAxPiG/H
Ata8jU56Ma8aqFpp0swFujKOn3OOpzUZWl7rXJrSduYcY3aR3jo86r/fNKXPzNiv
ljfMOmoVwajcoXsyQo/ZmaLqIpNkhCSBmZgLxaXrZgzsoJSKIrC22zdPDVlQcbJq
tan9/EHhlNlQ26gRvx7ODzW0P1TjYSKp7V3pnxfigwGLTMqcIXCEAqaYwltX74iT
Dk/eY8pd0FCqZPS9jWPB/nDlQcxtaUuVafyj+8bE0akSQQEf7+5gwJd3t0MDefiE
rMdSairs7apw5Q==
-----END CERTIFICATE-----
Generated at Tue Nov 21 10:33:26 2023 by rpki-client on console-fra.rpki-client.org