Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/Ra_g1zQZ-KreZdLHEVwBQgRyulw.mft
File: Ra_g1zQZ-KreZdLHEVwBQgRyulw.mft (raw, json)
Hash identifier: 8qPmVKXlVuBeSpkIUarpnUc59EE2HlGUREh0DLmQv3k=
Subject key identifier: BA:F2:B2:5B:CC:D0:EA:5C:FC:5F:A9:B4:AC:8C:54:9E:30:5A:60:01
Authority key identifier: 45:AF:E0:D7:34:19:F8:AA:DE:65:D2:C7:11:5C:01:42:04:72:BA:5C
Certificate issuer: /CN=45afe0d73419f8aade65d2c7115c01420472ba5c
Certificate serial: 018D77A3B944CDCD250345B120685954C776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra_g1zQZ-KreZdLHEVwBQgRyulw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/Ra_g1zQZ-KreZdLHEVwBQgRyulw.mft
Manifest number: 085B
Signing time: Mon 05 Feb 2024 05:00:34 +0000
Manifest this update: Mon 05 Feb 2024 05:00:34 +0000
Manifest next update: Tue 06 Feb 2024 05:00:34 +0000
Files and hashes: 1: Ra_g1zQZ-KreZdLHEVwBQgRyulw.crl (hash: W+03Loq9WXmq0rIvRaVfK7MMlvQh9r7clh3yi3P6BzQ=)
2: gQZPZ-kKcuh9YrjPrvmmZHlpafY.roa (hash: RSg9jQZBgIBJGpoTkMZbUg9s3/Tku9v8fbPw1I5QgQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:77:a3:b9:44:cd:cd:25:03:45:b1:20:68:59:54:c7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45afe0d73419f8aade65d2c7115c01420472ba5c
Validity
Not Before: Feb 5 05:00:34 2024 GMT
Not After : Feb 6 05:00:34 2024 GMT
Subject: CN=baf2b25bccd0ea5cfc5fa9b4ac8c549e305a6001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:50:95:26:ec:73:3f:0a:b5:95:74:b4:06:
31:c4:a7:23:f1:33:41:79:65:e9:f4:b9:03:72:78:
3b:83:46:8c:c2:9f:a6:b2:8d:42:76:ff:7e:7a:e0:
26:12:5e:0a:22:34:f7:75:39:69:44:44:95:04:07:
25:7d:9b:c2:8c:1d:2c:7d:11:7b:97:4b:38:e0:01:
bf:6e:5b:2d:5e:69:e1:bf:68:ec:a8:7d:f0:f2:40:
f4:71:87:e9:74:0e:01:01:05:24:0c:b4:21:e3:45:
54:f2:11:67:84:16:09:74:b0:2c:55:e0:ec:10:64:
d6:54:de:49:2c:ed:48:01:73:5e:3d:81:9a:0d:d7:
02:46:fd:3b:c8:56:19:bf:01:ae:a2:b3:4d:f4:09:
18:34:b3:1f:c4:6e:b5:f5:e7:16:95:d0:7c:b6:5c:
cf:85:86:48:d3:50:12:0d:c1:c2:47:67:fe:bf:de:
03:1c:e8:20:eb:d0:3d:45:00:49:e4:13:fe:52:db:
14:90:9d:b5:50:68:e6:37:24:a2:a6:d2:15:50:6e:
23:a5:ee:ae:01:10:f2:c5:f5:e3:ea:5c:dd:f4:9b:
d2:91:f8:00:cf:aa:2e:32:34:07:c2:f0:22:15:24:
e5:d5:33:0e:62:a3:5a:b4:95:30:d4:b0:71:68:14:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:B2:5B:CC:D0:EA:5C:FC:5F:A9:B4:AC:8C:54:9E:30:5A:60:01
X509v3 Authority Key Identifier:
keyid:45:AF:E0:D7:34:19:F8:AA:DE:65:D2:C7:11:5C:01:42:04:72:BA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra_g1zQZ-KreZdLHEVwBQgRyulw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/Ra_g1zQZ-KreZdLHEVwBQgRyulw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/11b7b9-1fa6-4c51-a075-85572d652a7b/1/Ra_g1zQZ-KreZdLHEVwBQgRyulw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:16:47:e5:3f:62:b9:8c:e1:53:00:24:36:4b:59:8e:02:1a:
6e:b6:6a:4f:b0:d9:52:d4:27:e2:63:e6:f9:89:6c:54:6b:29:
d9:ab:69:b4:f6:25:c8:e3:8f:3d:0d:ac:1e:2e:c9:ac:2b:7c:
de:26:23:80:c7:01:8f:13:c5:c4:25:c6:81:77:d1:7f:a8:ba:
62:f1:83:a7:60:e1:dd:9c:4f:ef:a2:e4:2a:c9:88:1d:e7:72:
90:ab:f6:c6:73:d1:0d:0b:37:4b:94:34:29:6e:a9:d6:16:bd:
07:1b:18:cb:c0:0d:44:a2:66:f8:64:12:91:ef:43:5e:2d:43:
ff:02:d3:f7:60:49:34:a3:8f:8a:1d:7a:f2:30:28:88:64:0a:
57:ec:f0:bc:5f:32:28:20:9c:dc:96:9e:0b:da:9c:9a:08:36:
77:bc:f5:99:4e:49:ea:70:f0:19:ce:49:ce:9a:fd:36:15:0b:
1e:a3:1a:47:89:79:c0:9a:2a:1d:f8:56:ef:02:b4:a3:18:17:
c9:27:35:43:e3:e2:c8:ef:c6:ed:f6:bf:dc:38:93:4d:28:7b:
86:5a:70:23:17:b4:a1:6f:dd:33:f3:87:27:89:ae:06:5a:37:
86:14:c5:1f:2a:a3:c2:0c:70:68:9c:7a:e9:d3:ea:e8:01:b8:
cc:f5:7c:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY13o7lEzc0lA0WxIGhZVMd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YWZlMGQ3MzQxOWY4YWFkZTY1ZDJjNzExNWMwMTQyMDQ3
MmJhNWMwHhcNMjQwMjA1MDUwMDM0WhcNMjQwMjA2MDUwMDM0WjAzMTEwLwYDVQQD
EyhiYWYyYjI1YmNjZDBlYTVjZmM1ZmE5YjRhYzhjNTQ5ZTMwNWE2MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrdQlSbscz8KtZV0tAYxxKcj8TNB
eWXp9LkDcng7g0aMwp+mso1Cdv9+euAmEl4KIjT3dTlpRESVBAclfZvCjB0sfRF7
l0s44AG/blstXmnhv2jsqH3w8kD0cYfpdA4BAQUkDLQh40VU8hFnhBYJdLAsVeDs
EGTWVN5JLO1IAXNePYGaDdcCRv07yFYZvwGuorNN9AkYNLMfxG619ecWldB8tlzP
hYZI01ASDcHCR2f+v94DHOgg69A9RQBJ5BP+UtsUkJ21UGjmNySiptIVUG4jpe6u
ARDyxfXj6lzd9JvSkfgAz6ouMjQHwvAiFSTl1TMOYqNatJUw1LBxaBRJsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLryslvM0Opc/F+ptKyMVJ4wWmABMB8GA1UdIwQY
MBaAFEWv4Nc0Gfiq3mXSxxFcAUIEcrpcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmFfZzF6UVotS3JlWmRMSEVWd0JRZ1J5dWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMWI3YjktMWZhNi00YzUxLWEwNzUt
ODU1NzJkNjUyYTdiLzEvUmFfZzF6UVotS3JlWmRMSEVWd0JRZ1J5dWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8xMWI3YjktMWZhNi00YzUxLWEwNzUtODU1NzJkNjUyYTdi
LzEvUmFfZzF6UVotS3JlWmRMSEVWd0JRZ1J5dWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBZH5T9i
uYzhUwAkNktZjgIabrZqT7DZUtQn4mPm+YlsVGsp2atptPYlyOOPPQ2sHi7JrCt8
3iYjgMcBjxPFxCXGgXfRf6i6YvGDp2Dh3ZxP76LkKsmIHedykKv2xnPRDQs3S5Q0
KW6p1ha9BxsYy8ANRKJm+GQSke9DXi1D/wLT92BJNKOPih168jAoiGQKV+zwvF8y
KCCc3JaeC9qcmgg2d7z1mU5J6nDwGc5Jzpr9NhULHqMaR4l5wJoqHfhW7wK0oxgX
ySc1Q+PiyO/G7fa/3DiTTSh7hlpwIxe0oW/dM/OHJ4muBlo3hhTFHyqjwgxwaJx6
6dPq6AG4zPV8SA==
-----END CERTIFICATE-----
Generated at Mon Feb 5 17:24:27 2024 by rpki-client on console-fra.rpki-client.org