Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/_KFg3SpDDOp7W9VIjVGAcMblCAg.mft
File: _KFg3SpDDOp7W9VIjVGAcMblCAg.mft (raw, json)
Hash identifier: SyywuVfOeQb+S3QRgzVgQaYPgfrBsGKE5DyhFgIDUWA=
Subject key identifier: 56:4F:85:BB:A1:78:F1:EA:38:A7:4D:54:4B:78:0E:2F:C1:D3:89:17
Authority key identifier: FC:A1:60:DD:2A:43:0C:EA:7B:5B:D5:48:8D:51:80:70:C6:E5:08:08
Certificate issuer: /CN=fca160dd2a430cea7b5bd5488d518070c6e50808
Certificate serial: 018316AE6763BFB6BDA7559B46F133308440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KFg3SpDDOp7W9VIjVGAcMblCAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/_KFg3SpDDOp7W9VIjVGAcMblCAg.mft
Manifest number: 0AA1
Signing time: Wed 07 Sep 2022 06:41:11 +0000
Manifest this update: Wed 07 Sep 2022 06:41:11 +0000
Manifest next update: Thu 08 Sep 2022 06:41:11 +0000
Files and hashes: 1: _KFg3SpDDOp7W9VIjVGAcMblCAg.crl (hash: Dka8lVD+Y2+j+2zu260/LSpJiY+DSD8O5RMCJBi0CDc=)
2: qrGyAia3EWRsHEeYasfQ466gJbA.roa (hash: xtftmaoXsXXNlJIaeU6lB7H88ZT2KxGHbd89YkRpo8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:ae:67:63:bf:b6:bd:a7:55:9b:46:f1:33:30:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca160dd2a430cea7b5bd5488d518070c6e50808
Validity
Not Before: Sep 7 06:41:11 2022 GMT
Not After : Sep 8 06:41:11 2022 GMT
Subject: CN=564f85bba178f1ea38a74d544b780e2fc1d38917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:75:dc:ed:64:60:00:e0:8f:24:d7:dc:6a:
6f:30:c2:e3:e5:c0:0d:93:40:aa:16:62:bc:8f:41:
6e:e5:38:b1:e1:c5:f4:0a:f2:43:3e:82:ee:ad:98:
45:ca:9e:fb:ec:57:72:d6:2f:55:f2:54:24:c7:4c:
7b:af:12:cd:8e:b3:35:25:c7:e4:ff:b3:f1:d9:93:
c3:0a:ee:ea:1e:a5:56:41:40:aa:1f:5a:7d:ce:f4:
93:3d:52:c6:aa:ad:96:ce:6e:a3:ef:11:6b:0a:92:
5b:26:7a:3a:96:d5:cb:02:f0:df:7d:eb:b2:21:91:
70:65:67:d3:a0:81:0c:7c:37:fe:04:62:75:c6:f3:
de:e2:19:ef:29:c0:97:7a:86:c0:d8:b5:e9:06:79:
47:3e:e9:bb:43:56:6e:17:7c:74:74:c4:91:dc:df:
7b:a7:7d:e4:9b:3c:34:bc:04:2f:8d:8f:05:fe:05:
82:b6:86:ed:60:42:c3:4d:a6:61:14:95:af:cf:58:
9b:10:8c:42:ef:92:9c:0d:59:23:b6:e3:ab:87:32:
ba:ef:3d:b9:f2:63:92:0b:c8:c8:19:48:22:43:a6:
3c:ef:ad:f7:53:d1:10:c0:9f:4a:c5:5b:a8:12:3b:
4d:91:a8:d5:07:29:20:93:1c:ea:ba:55:a1:a2:7a:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4F:85:BB:A1:78:F1:EA:38:A7:4D:54:4B:78:0E:2F:C1:D3:89:17
X509v3 Authority Key Identifier:
keyid:FC:A1:60:DD:2A:43:0C:EA:7B:5B:D5:48:8D:51:80:70:C6:E5:08:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KFg3SpDDOp7W9VIjVGAcMblCAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/_KFg3SpDDOp7W9VIjVGAcMblCAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0e1a69-b1b6-4ba9-966b-ceedae0c41d7/1/_KFg3SpDDOp7W9VIjVGAcMblCAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:0a:61:e4:4f:07:ea:ed:2d:ae:ef:01:4c:8f:ee:d1:f8:
f7:9a:1d:3b:28:c6:97:57:71:b2:17:83:0b:27:3b:9c:6e:f6:
08:9b:23:ca:21:71:79:89:d6:7b:e2:8d:82:7a:37:6c:4e:96:
a7:f5:38:4c:69:c3:09:60:a1:fe:e7:10:b7:cc:fc:0d:ef:0c:
db:28:e4:30:d9:28:96:52:79:51:3d:35:70:7d:68:ea:c9:a6:
c6:c6:bb:62:80:f8:c3:06:7d:f0:2d:57:4a:93:6c:24:ac:6f:
e6:6f:62:56:03:65:ce:2f:ee:88:be:dd:40:60:4a:d7:00:ce:
05:e7:a0:d0:a3:62:4b:2b:c9:1c:ac:a6:ae:31:83:e0:08:5e:
99:cc:02:70:84:f6:d0:63:e3:39:38:61:08:1a:d5:d3:68:bb:
77:2c:0d:c4:f8:7c:c6:08:ef:61:bb:fc:e1:65:2c:33:95:22:
37:9b:f8:a8:c3:3a:66:78:8c:bb:ec:5f:ed:29:a3:e4:6b:05:
14:9a:e7:17:b8:a2:6f:b8:70:85:66:40:8b:04:56:df:b0:05:
31:41:27:50:82:9a:d4:72:b2:37:53:50:6c:49:2d:d7:19:f5:
c6:e5:20:3c:d9:5a:27:39:a0:32:2f:2d:00:7e:2f:5e:f8:ed:
27:c2:1c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYMWrmdjv7a9p1WbRvEzMIRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTE2MGRkMmE0MzBjZWE3YjViZDU0ODhkNTE4MDcwYzZl
NTA4MDgwHhcNMjIwOTA3MDY0MTExWhcNMjIwOTA4MDY0MTExWjAzMTEwLwYDVQQD
Eyg1NjRmODViYmExNzhmMWVhMzhhNzRkNTQ0Yjc4MGUyZmMxZDM4OTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobN13O1kYADgjyTX3GpvMMLj5cAN
k0CqFmK8j0Fu5Tix4cX0CvJDPoLurZhFyp777Fdy1i9V8lQkx0x7rxLNjrM1Jcfk
/7Px2ZPDCu7qHqVWQUCqH1p9zvSTPVLGqq2Wzm6j7xFrCpJbJno6ltXLAvDffeuy
IZFwZWfToIEMfDf+BGJ1xvPe4hnvKcCXeobA2LXpBnlHPum7Q1ZuF3x0dMSR3N97
p33kmzw0vAQvjY8F/gWCtobtYELDTaZhFJWvz1ibEIxC75KcDVkjtuOrhzK67z25
8mOSC8jIGUgiQ6Y87633U9EQwJ9KxVuoEjtNkajVBykgkxzqulWhonreCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZPhbuhePHqOKdNVEt4Di/B04kXMB8GA1UdIwQY
MBaAFPyhYN0qQwzqe1vVSI1RgHDG5QgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tGZzNTcERET3A3VzlWSWpWR0FjTWJsQ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wZTFhNjktYjFiNi00YmE5LTk2NmIt
Y2VlZGFlMGM0MWQ3LzEvX0tGZzNTcERET3A3VzlWSWpWR0FjTWJsQ0FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8wZTFhNjktYjFiNi00YmE5LTk2NmItY2VlZGFlMGM0MWQ3
LzEvX0tGZzNTcERET3A3VzlWSWpWR0FjTWJsQ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMIKYeRP
B+rtLa7vAUyP7tH495odOyjGl1dxsheDCyc7nG72CJsjyiFxeYnWe+KNgno3bE6W
p/U4TGnDCWCh/ucQt8z8De8M2yjkMNkollJ5UT01cH1o6smmxsa7YoD4wwZ98C1X
SpNsJKxv5m9iVgNlzi/uiL7dQGBK1wDOBeeg0KNiSyvJHKymrjGD4AhemcwCcIT2
0GPjOThhCBrV02i7dywNxPh8xgjvYbv84WUsM5UiN5v4qMM6ZniMu+xf7Smj5GsF
FJrnF7iib7hwhWZAiwRW37AFMUEnUIKa1HKyN1NQbEkt1xn1xuUgPNlaJzmgMi8t
AH4vXvjtJ8IcFg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:20 2025 by rpki-client