Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
File: PrOh--ecES1TfhORHCeAviHzFVA.mft (raw, json)
Hash identifier: 6TdaQthSfwm4ktNnYBsO978ST/Cal1st2ABFNPiwiw4=
Subject key identifier: DA:F4:8B:18:1A:03:C3:81:F6:7F:CC:34:A3:20:3F:58:8B:92:69:DF
Authority key identifier: 3E:B3:A1:FB:E7:9C:11:2D:53:7E:13:91:1C:27:80:BE:21:F3:15:50
Certificate issuer: /CN=3eb3a1fbe79c112d537e13911c2780be21f31550
Certificate serial: 01917273835FFFBBD2D1F40446D0832C4984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
Manifest number: 04F8
Signing time: Wed 21 Aug 2024 01:00:58 +0000
Manifest this update: Wed 21 Aug 2024 01:00:58 +0000
Manifest next update: Thu 22 Aug 2024 01:00:58 +0000
Files and hashes: 1: PrOh--ecES1TfhORHCeAviHzFVA.crl (hash: 9JhoVPA9pcty4vZEt7TdlsqmkXribKGSu0aHoq+p4XQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:72:73:83:5f:ff:bb:d2:d1:f4:04:46:d0:83:2c:49:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb3a1fbe79c112d537e13911c2780be21f31550
Validity
Not Before: Aug 21 01:00:58 2024 GMT
Not After : Aug 22 01:00:58 2024 GMT
Subject: CN=daf48b181a03c381f67fcc34a3203f588b9269df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:fa:c1:b2:fa:1b:a0:a4:6e:17:7b:a0:f8:
53:13:65:7f:cb:45:ff:1a:f9:24:49:b5:38:6c:79:
09:c4:52:c0:4a:a6:f6:6c:65:c6:44:63:65:50:b0:
24:d1:ba:eb:ca:30:92:3b:67:ec:77:e8:b8:99:28:
cf:9c:11:a1:e8:97:75:5a:1f:6d:60:40:0d:3d:1f:
c2:97:7d:4c:a0:b5:dd:e5:f8:22:d5:cb:1f:86:19:
da:da:e9:bb:88:ba:fe:27:d4:2c:fe:83:c2:60:e0:
ae:12:1d:77:93:f8:2c:f3:b1:a7:20:f4:75:b9:8b:
b0:de:77:ed:86:01:cf:fb:78:54:c4:a0:06:ad:40:
3d:db:d6:f0:5e:c4:63:e1:32:f2:72:de:d5:b4:61:
b0:b3:0b:57:df:f5:ff:e8:8e:70:26:2d:6f:64:61:
56:66:e8:ae:a4:10:7f:7e:c1:12:10:a5:ac:40:fa:
76:16:61:31:80:c8:a7:8f:e5:86:af:45:e0:53:98:
a4:1d:64:a0:82:46:a8:78:c1:52:bc:0d:b8:55:4e:
c7:7b:f1:10:d9:44:ac:56:d1:6d:d8:ef:44:c3:34:
67:a9:f5:f6:70:a6:f4:5f:49:23:09:83:70:4b:60:
a0:53:27:06:82:66:f3:54:2e:e6:52:c5:c0:06:2e:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F4:8B:18:1A:03:C3:81:F6:7F:CC:34:A3:20:3F:58:8B:92:69:DF
X509v3 Authority Key Identifier:
keyid:3E:B3:A1:FB:E7:9C:11:2D:53:7E:13:91:1C:27:80:BE:21:F3:15:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:62:50:18:e3:31:dd:72:79:54:1b:9a:02:8a:69:e0:9c:7c:
f0:3a:c5:a6:a6:6b:1d:fe:b4:49:91:32:11:c9:14:37:54:f5:
7d:a4:24:f8:35:30:92:70:e6:5b:5c:ce:7f:4d:d4:0f:8f:36:
c1:8a:88:f4:ea:40:23:8e:a5:4c:fe:83:26:b3:e5:7f:21:ad:
05:31:d0:d4:61:dd:be:55:45:62:a5:66:a6:d4:e9:90:a8:c7:
27:b7:11:7c:85:db:98:97:e3:9a:0f:86:48:93:70:22:a9:d0:
df:79:61:9e:2c:46:97:63:ce:a3:1e:60:64:20:72:66:ad:0e:
19:f4:3e:99:fc:18:72:e4:bc:cf:38:a3:ed:be:6f:b7:67:0d:
59:d0:67:51:0f:9e:04:e5:13:d6:0c:7e:9c:07:e5:ef:52:0c:
e8:d2:ad:52:c1:ee:aa:fd:e7:32:1b:60:48:bd:cb:87:79:13:
67:1b:5c:58:f0:68:ff:85:11:d3:d5:2f:ee:92:8a:54:70:c0:
90:4a:4c:6c:b3:8c:97:e8:a5:38:2c:c1:de:d5:dc:dc:0f:31:
27:0b:80:b0:ec:89:d9:53:e0:35:d6:4e:a2:50:12:91:57:dc:
af:f3:4f:4c:3b:36:2c:e6:76:14:6f:99:f8:01:b0:2d:2d:87:
a8:7a:b2:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZFyc4Nf/7vS0fQERtCDLEmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjNhMWZiZTc5YzExMmQ1MzdlMTM5MTFjMjc4MGJlMjFm
MzE1NTAwHhcNMjQwODIxMDEwMDU4WhcNMjQwODIyMDEwMDU4WjAzMTEwLwYDVQQD
EyhkYWY0OGIxODFhMDNjMzgxZjY3ZmNjMzRhMzIwM2Y1ODhiOTI2OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNb6wbL6G6Ckbhd7oPhTE2V/y0X/
GvkkSbU4bHkJxFLASqb2bGXGRGNlULAk0brryjCSO2fsd+i4mSjPnBGh6Jd1Wh9t
YEANPR/Cl31MoLXd5fgi1csfhhna2um7iLr+J9Qs/oPCYOCuEh13k/gs87GnIPR1
uYuw3nfthgHP+3hUxKAGrUA929bwXsRj4TLyct7VtGGwswtX3/X/6I5wJi1vZGFW
ZuiupBB/fsESEKWsQPp2FmExgMinj+WGr0XgU5ikHWSggkaoeMFSvA24VU7He/EQ
2USsVtFt2O9EwzRnqfX2cKb0X0kjCYNwS2CgUycGgmbzVC7mUsXABi49TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr0ixgaA8OB9n/MNKMgP1iLkmnfMB8GA1UdIwQY
MBaAFD6zofvnnBEtU34TkRwngL4h8xVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJPaC0tZWNFUzFUZmhPUkhDZUF2aUh6RlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xN2NlOWYtNGQ2OS00NDIyLWJkOWMt
MjNlZmQ4ZGJiNDI1LzEvUHJPaC0tZWNFUzFUZmhPUkhDZUF2aUh6RlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xN2NlOWYtNGQ2OS00NDIyLWJkOWMtMjNlZmQ4ZGJiNDI1
LzEvUHJPaC0tZWNFUzFUZmhPUkhDZUF2aUh6RlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWJQGOMx
3XJ5VBuaAopp4Jx88DrFpqZrHf60SZEyEckUN1T1faQk+DUwknDmW1zOf03UD482
wYqI9OpAI46lTP6DJrPlfyGtBTHQ1GHdvlVFYqVmptTpkKjHJ7cRfIXbmJfjmg+G
SJNwIqnQ33lhnixGl2POox5gZCByZq0OGfQ+mfwYcuS8zzij7b5vt2cNWdBnUQ+e
BOUT1gx+nAfl71IM6NKtUsHuqv3nMhtgSL3Lh3kTZxtcWPBo/4UR09Uv7pKKVHDA
kEpMbLOMl+ilOCzB3tXc3A8xJwuAsOyJ2VPgNdZOolASkVfcr/NPTDs2LOZ2FG+Z
+AGwLS2HqHqyYg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:04 2025 by rpki-client