Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/77382b-f9b6-4f9b-a9ee-2ad25f55a4e8/1/d59pOLk4AlSbrACDNW_znWRdNM0.mft
File: d59pOLk4AlSbrACDNW_znWRdNM0.mft (raw, json)
Hash identifier: cBR118xHZ9C38phmE0ioBevS7TqYchdPEIacuGA2mIc=
Subject key identifier: 61:7D:77:9A:9F:65:2E:64:58:28:14:48:E7:38:37:83:EA:8F:9D:98
Authority key identifier: 77:9F:69:38:B9:38:02:54:9B:AC:00:83:35:6F:F3:9D:64:5D:34:CD
Certificate issuer: /CN=779f6938b93802549bac0083356ff39d645d34cd
Certificate serial: 018D6A1F46FA11E7D1AE6F618E4509AA456C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d59pOLk4AlSbrACDNW_znWRdNM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/77382b-f9b6-4f9b-a9ee-2ad25f55a4e8/1/d59pOLk4AlSbrACDNW_znWRdNM0.mft
Manifest number: 011D
Signing time: Fri 02 Feb 2024 14:00:51 +0000
Manifest this update: Fri 02 Feb 2024 14:00:51 +0000
Manifest next update: Sat 03 Feb 2024 14:00:51 +0000
Files and hashes: 1: IFbNjLTppYqz16_aTiJEDPvQ2I4.roa (hash: EVlj/b7FNIhpPrtwY2Yqtya9OwR1wPRynx2m9yWXT/0=)
2: d59pOLk4AlSbrACDNW_znWRdNM0.crl (hash: SmUmfR0fBqkkt+1P/JrPTn9pplaDw1cNPZiYh4MKacI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:1f:46:fa:11:e7:d1:ae:6f:61:8e:45:09:aa:45:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779f6938b93802549bac0083356ff39d645d34cd
Validity
Not Before: Feb 2 14:00:51 2024 GMT
Not After : Feb 3 14:00:51 2024 GMT
Subject: CN=617d779a9f652e6458281448e7383783ea8f9d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d8:24:3d:dc:b1:fd:fd:4d:20:9b:de:74:d9:
3c:20:01:e7:2c:2a:c7:88:cf:76:6c:3c:ec:b5:b6:
a6:33:0d:aa:56:47:48:1d:dc:86:62:18:9e:9a:d3:
41:e1:5e:9d:f2:6b:dd:e6:0f:2a:14:9b:33:ce:28:
fb:ba:99:47:5b:d0:c5:91:a6:b3:92:19:4b:dd:b2:
17:66:f5:25:63:61:ef:9e:d7:f1:80:47:d3:b0:70:
da:c9:fe:8d:54:2b:31:6c:16:36:39:69:42:c1:d2:
ba:7f:31:46:ac:a8:ff:be:9e:81:9c:e8:c9:9a:80:
8c:6a:ff:2e:a1:48:2a:6a:bf:44:d5:cf:cb:53:cd:
69:09:8f:6f:44:b5:b1:4a:f6:c0:d7:ab:78:25:6d:
e5:93:50:d9:8a:fb:84:4f:78:bf:61:eb:90:26:48:
97:29:63:c9:20:51:72:0f:0f:5b:06:70:dd:53:22:
87:26:50:95:c4:72:6a:da:3f:35:cd:8a:87:68:e0:
1b:56:2e:a1:7d:3b:21:d1:bb:d4:b5:1b:a1:2c:a0:
4e:4a:63:6c:52:57:1d:2e:08:30:d2:f3:cd:ae:0f:
ab:80:cc:6a:b5:00:43:e9:43:b9:2e:b9:a6:88:68:
15:8d:83:41:3d:4d:c2:a0:5f:94:e9:d1:3d:fb:92:
89:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7D:77:9A:9F:65:2E:64:58:28:14:48:E7:38:37:83:EA:8F:9D:98
X509v3 Authority Key Identifier:
keyid:77:9F:69:38:B9:38:02:54:9B:AC:00:83:35:6F:F3:9D:64:5D:34:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d59pOLk4AlSbrACDNW_znWRdNM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/77382b-f9b6-4f9b-a9ee-2ad25f55a4e8/1/d59pOLk4AlSbrACDNW_znWRdNM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/77382b-f9b6-4f9b-a9ee-2ad25f55a4e8/1/d59pOLk4AlSbrACDNW_znWRdNM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:eb:d6:8e:da:15:53:8a:dc:32:48:6c:29:e3:c2:ce:45:15:
6b:fb:81:c5:31:d6:a8:25:5f:ea:5c:06:50:10:6e:f1:6a:ec:
65:13:1d:39:d0:62:43:4c:e8:4a:6c:2c:53:9d:c1:66:dd:8d:
f7:f8:d8:a0:d5:5a:25:80:65:d2:9e:1a:0d:6c:64:48:24:eb:
51:3e:2c:78:ec:2f:7e:33:70:a5:da:1f:47:e9:0c:eb:b5:2b:
e7:d7:08:42:9d:29:58:f6:4e:7c:a7:87:27:8e:b4:c5:eb:0e:
14:ad:f3:b0:e1:a6:1e:d5:d6:77:4a:05:b9:96:1e:df:e0:0f:
3e:8d:a3:b7:d5:83:fc:03:00:14:16:c6:a2:bf:ae:17:e8:77:
61:7b:98:be:4a:29:a7:95:28:46:e8:17:f5:e8:3a:70:a6:0b:
52:2c:66:28:6a:c3:89:ab:8d:12:53:93:eb:64:91:99:6f:3f:
a2:63:9d:bc:6f:54:43:fd:56:bf:cd:e0:16:30:00:b1:35:e2:
54:5f:92:f6:f9:ac:3c:0f:4f:92:ac:98:d5:ad:9f:ed:78:c2:
5f:42:36:0f:26:c5:78:2b:00:04:76:1e:e4:35:5b:82:90:79:
35:fa:49:ce:a4:57:d0:7b:86:28:8e:e8:e4:c5:19:a7:ba:dd:
ad:54:54:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY1qH0b6EefRrm9hjkUJqkVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWY2OTM4YjkzODAyNTQ5YmFjMDA4MzM1NmZmMzlkNjQ1
ZDM0Y2QwHhcNMjQwMjAyMTQwMDUxWhcNMjQwMjAzMTQwMDUxWjAzMTEwLwYDVQQD
Eyg2MTdkNzc5YTlmNjUyZTY0NTgyODE0NDhlNzM4Mzc4M2VhOGY5ZDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtgkPdyx/f1NIJvedNk8IAHnLCrH
iM92bDzstbamMw2qVkdIHdyGYhiemtNB4V6d8mvd5g8qFJszzij7uplHW9DFkaaz
khlL3bIXZvUlY2HvntfxgEfTsHDayf6NVCsxbBY2OWlCwdK6fzFGrKj/vp6BnOjJ
moCMav8uoUgqar9E1c/LU81pCY9vRLWxSvbA16t4JW3lk1DZivuET3i/YeuQJkiX
KWPJIFFyDw9bBnDdUyKHJlCVxHJq2j81zYqHaOAbVi6hfTsh0bvUtRuhLKBOSmNs
UlcdLggw0vPNrg+rgMxqtQBD6UO5LrmmiGgVjYNBPU3CoF+U6dE9+5KJvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF9d5qfZS5kWCgUSOc4N4Pqj52YMB8GA1UdIwQY
MBaAFHefaTi5OAJUm6wAgzVv851kXTTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDU5cE9MazRBbFNickFDRE5XX3puV1JkTk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83NzM4MmItZjliNi00ZjliLWE5ZWUt
MmFkMjVmNTVhNGU4LzEvZDU5cE9MazRBbFNickFDRE5XX3puV1JkTk0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83NzM4MmItZjliNi00ZjliLWE5ZWUtMmFkMjVmNTVhNGU4
LzEvZDU5cE9MazRBbFNickFDRE5XX3puV1JkTk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduvWjtoV
U4rcMkhsKePCzkUVa/uBxTHWqCVf6lwGUBBu8WrsZRMdOdBiQ0zoSmwsU53BZt2N
9/jYoNVaJYBl0p4aDWxkSCTrUT4seOwvfjNwpdofR+kM67Ur59cIQp0pWPZOfKeH
J460xesOFK3zsOGmHtXWd0oFuZYe3+APPo2jt9WD/AMAFBbGor+uF+h3YXuYvkop
p5UoRugX9eg6cKYLUixmKGrDiauNElOT62SRmW8/omOdvG9UQ/1Wv83gFjAAsTXi
VF+S9vmsPA9PkqyY1a2f7XjCX0I2DybFeCsABHYe5DVbgpB5NfpJzqRX0HuGKI7o
5MUZp7rdrVRUBw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:17:50 2025 by rpki-client