Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/tCRyHhM6GCof0NCWVuPOdNhaz2A.mft
File: tCRyHhM6GCof0NCWVuPOdNhaz2A.mft (raw, json)
Hash identifier: NhiPbgZCM3CiZ+xg3olk7Y1nTM3gw1QkKgBDM28nyxQ=
Subject key identifier: 3C:DE:0B:2E:9C:26:8E:9E:BD:A3:E6:BB:66:15:1B:2D:E8:4D:11:60
Authority key identifier: B4:24:72:1E:13:3A:18:2A:1F:D0:D0:96:56:E3:CE:74:D8:5A:CF:60
Certificate issuer: /CN=b424721e133a182a1fd0d09656e3ce74d85acf60
Certificate serial: 018B8F0C3081FDEA1FD40A372C3294D0ED55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCRyHhM6GCof0NCWVuPOdNhaz2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/tCRyHhM6GCof0NCWVuPOdNhaz2A.mft
Manifest number: 0895
Signing time: Thu 02 Nov 2023 08:00:22 +0000
Manifest this update: Thu 02 Nov 2023 08:00:22 +0000
Manifest next update: Fri 03 Nov 2023 08:00:22 +0000
Files and hashes: 1: jdt8YcHHgpq2ZidXdz9G6h-pOHc.roa (hash: baDaJEYNSQbSc9330R0XNsC4fI4Tj1LMD69P3pPq4Zk=)
2: tCRyHhM6GCof0NCWVuPOdNhaz2A.crl (hash: MfiFAv09jiv6nXrFNiFFVM42I3EwrTWCKm72MagDgdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:0c:30:81:fd:ea:1f:d4:0a:37:2c:32:94:d0:ed:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424721e133a182a1fd0d09656e3ce74d85acf60
Validity
Not Before: Nov 2 08:00:22 2023 GMT
Not After : Nov 3 08:00:22 2023 GMT
Subject: CN=3cde0b2e9c268e9ebda3e6bb66151b2de84d1160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:84:21:87:da:f0:c1:59:77:8a:e6:05:5b:
0c:4d:a2:1c:9d:88:1b:56:51:86:dc:89:37:12:ca:
de:29:59:07:0b:cb:fd:28:52:e5:34:a2:36:05:f3:
fe:ae:f5:34:ea:63:69:9d:1c:32:7e:b5:8f:3a:83:
1f:6e:aa:69:52:6f:ea:79:1a:55:a0:31:f8:39:a0:
64:8c:0a:3a:b2:d6:f4:ae:5e:fa:a3:fd:75:c4:ba:
a1:c9:8c:54:b7:d4:9e:77:38:c6:6b:10:bf:76:68:
c6:29:ab:21:84:bc:89:d7:a0:52:92:53:2d:df:f8:
4e:64:18:53:4c:23:8d:a2:45:a0:a9:36:37:76:d0:
76:eb:ff:66:63:c7:0d:e6:0f:35:3b:5d:66:96:e9:
76:a0:19:81:86:7d:92:06:13:9d:0f:2a:06:54:4b:
68:04:25:1e:85:cb:4d:11:fc:8d:8d:f7:d8:87:68:
c2:39:32:26:5b:a0:1f:0b:e0:5d:9d:9a:89:f8:4a:
29:f6:95:4b:7e:ae:d2:3a:bf:88:ef:eb:c0:be:6f:
64:69:da:03:4c:7d:e4:40:e7:65:67:6e:d9:18:7b:
64:c5:8b:8f:86:42:45:10:4e:e2:05:9c:d6:e1:0a:
c9:32:3d:e4:9e:3b:ea:d4:05:c8:63:ef:95:d1:e8:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:0B:2E:9C:26:8E:9E:BD:A3:E6:BB:66:15:1B:2D:E8:4D:11:60
X509v3 Authority Key Identifier:
keyid:B4:24:72:1E:13:3A:18:2A:1F:D0:D0:96:56:E3:CE:74:D8:5A:CF:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCRyHhM6GCof0NCWVuPOdNhaz2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/tCRyHhM6GCof0NCWVuPOdNhaz2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a2944b-b810-44b9-97c9-6208ef7ffd91/1/tCRyHhM6GCof0NCWVuPOdNhaz2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:16:fc:ed:24:2a:7b:74:24:4c:62:d4:e8:c1:57:67:a6:ff:
f9:72:25:67:a3:c2:44:bd:fe:5c:35:1c:52:0e:49:22:94:31:
69:e1:00:59:56:a6:01:26:e3:63:e3:39:a9:b9:77:3c:49:45:
15:9c:ee:37:4a:88:f2:62:98:15:87:d2:d2:f5:cc:b0:f5:bd:
86:dd:1c:03:5d:3e:bf:4e:97:4f:fb:33:7b:9d:97:47:26:80:
61:b8:96:88:f2:94:6a:3c:0d:15:a5:7e:73:14:f2:17:b9:3e:
d7:7b:ef:85:7c:a5:a3:12:b3:09:50:0e:67:9f:71:eb:43:f4:
13:84:c1:0c:50:c5:a9:98:8b:6b:99:e9:91:7b:10:c8:2a:61:
63:fb:dc:75:eb:04:0d:58:a7:27:0f:83:93:aa:b1:53:9a:c2:
69:dc:68:f4:a8:c8:d6:42:58:8d:b0:40:af:8d:ee:eb:d3:eb:
de:5d:de:78:dd:07:bf:89:0a:09:1c:ac:04:2c:ce:94:8b:24:
8b:9d:a4:a3:e7:a7:0c:c9:21:d5:b4:9c:d0:02:de:12:c3:44:
3d:30:7a:fb:1b:25:d8:74:08:19:1b:a5:04:d6:03:42:0d:5c:
19:c3:60:7d:02:d0:40:67:b9:b9:ae:45:d7:5d:92:9c:7f:4c:
c6:68:72:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuPDDCB/eof1Ao3LDKU0O1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjQ3MjFlMTMzYTE4MmExZmQwZDA5NjU2ZTNjZTc0ZDg1
YWNmNjAwHhcNMjMxMTAyMDgwMDIyWhcNMjMxMTAzMDgwMDIyWjAzMTEwLwYDVQQD
EygzY2RlMGIyZTljMjY4ZTllYmRhM2U2YmI2NjE1MWIyZGU4NGQxMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXGEIYfa8MFZd4rmBVsMTaIcnYgb
VlGG3Ik3EsreKVkHC8v9KFLlNKI2BfP+rvU06mNpnRwyfrWPOoMfbqppUm/qeRpV
oDH4OaBkjAo6stb0rl76o/11xLqhyYxUt9SedzjGaxC/dmjGKashhLyJ16BSklMt
3/hOZBhTTCONokWgqTY3dtB26/9mY8cN5g81O11mlul2oBmBhn2SBhOdDyoGVEto
BCUehctNEfyNjffYh2jCOTImW6AfC+BdnZqJ+Eop9pVLfq7SOr+I7+vAvm9kadoD
TH3kQOdlZ27ZGHtkxYuPhkJFEE7iBZzW4QrJMj3knjvq1AXIY++V0ehGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzeCy6cJo6evaPmu2YVGy3oTRFgMB8GA1UdIwQY
MBaAFLQkch4TOhgqH9DQllbjznTYWs9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENSeUhoTTZHQ29mME5DV1Z1UE9kTmhhejJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMjk0NGItYjgxMC00NGI5LTk3Yzkt
NjIwOGVmN2ZmZDkxLzEvdENSeUhoTTZHQ29mME5DV1Z1UE9kTmhhejJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMjk0NGItYjgxMC00NGI5LTk3YzktNjIwOGVmN2ZmZDkx
LzEvdENSeUhoTTZHQ29mME5DV1Z1UE9kTmhhejJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhb87SQq
e3QkTGLU6MFXZ6b/+XIlZ6PCRL3+XDUcUg5JIpQxaeEAWVamASbjY+M5qbl3PElF
FZzuN0qI8mKYFYfS0vXMsPW9ht0cA10+v06XT/sze52XRyaAYbiWiPKUajwNFaV+
cxTyF7k+13vvhXyloxKzCVAOZ59x60P0E4TBDFDFqZiLa5npkXsQyCphY/vcdesE
DVinJw+Dk6qxU5rCadxo9KjI1kJYjbBAr43u69Pr3l3eeN0Hv4kKCRysBCzOlIsk
i52ko+enDMkh1bSc0ALeEsNEPTB6+xsl2HQIGRulBNYDQg1cGcNgfQLQQGe5ua5F
112SnH9MxmhycA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:42 2024 by rpki-client on console-fra.rpki-client.org