Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/fa17f3-2d73-4584-afac-1e2273f5eb19/1/TdUBcXHLSGIoRhygeFkbrKwkts0.mft
File: TdUBcXHLSGIoRhygeFkbrKwkts0.mft (raw, json)
Hash identifier: sNJTl3T+Xw6Z/IRVno1sL85QLIdalWie2jR0F9HVKvM=
Subject key identifier: B5:43:05:19:09:EE:1E:D4:44:1B:78:26:B2:1A:CF:74:04:3A:E3:F7
Authority key identifier: 4D:D5:01:71:71:CB:48:62:28:46:1C:A0:78:59:1B:AC:AC:24:B6:CD
Certificate issuer: /CN=4dd5017171cb486228461ca078591bacac24b6cd
Certificate serial: 018B8F43780A5F1399F202A8BFD95693DA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdUBcXHLSGIoRhygeFkbrKwkts0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fa17f3-2d73-4584-afac-1e2273f5eb19/1/TdUBcXHLSGIoRhygeFkbrKwkts0.mft
Manifest number: 0855
Signing time: Thu 02 Nov 2023 09:00:45 +0000
Manifest this update: Thu 02 Nov 2023 09:00:45 +0000
Manifest next update: Fri 03 Nov 2023 09:00:45 +0000
Files and hashes: 1: TdUBcXHLSGIoRhygeFkbrKwkts0.crl (hash: zpRy8Z0GlGo1ivTxE/OBDxY9b7iVaLAi2mv0tufSumY=)
2: uCpzlZRT91F0DFR9qDG5pUcHEl8.roa (hash: kk0mxNk2+BHzRqYX5y2v6DXqx59Qlh0aViq+lTud4Ko=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:78:0a:5f:13:99:f2:02:a8:bf:d9:56:93:da:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd5017171cb486228461ca078591bacac24b6cd
Validity
Not Before: Nov 2 09:00:45 2023 GMT
Not After : Nov 3 09:00:45 2023 GMT
Subject: CN=b543051909ee1ed4441b7826b21acf74043ae3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:95:1f:73:c9:7b:49:26:40:5f:70:d3:f1:
95:8b:4a:b4:fc:40:56:5f:ab:85:f1:08:c3:35:47:
36:12:1b:7c:be:7d:b7:9b:b7:65:19:22:58:d0:b8:
40:c1:5d:b4:bc:91:78:96:69:93:2b:3f:ca:70:f4:
f6:ac:4a:60:e4:57:55:e4:af:d6:c1:96:39:67:b1:
41:1b:54:a6:3c:cc:bc:de:f4:0f:d8:f3:85:fd:21:
55:d9:3f:d3:9e:38:f1:8d:e1:19:bc:f1:a9:ad:45:
92:30:33:de:cd:38:3c:bc:56:ae:f7:03:9f:14:74:
15:cc:19:d6:4d:f0:0f:d2:7b:71:80:2a:ba:ec:9f:
a4:ea:85:ca:c6:8f:a9:9e:0a:b2:f2:f0:93:ce:92:
96:8f:e3:d1:49:96:f2:9a:91:a7:b6:6f:93:67:d0:
87:2a:47:89:95:dd:38:ba:d5:25:9a:68:ef:4a:5d:
f2:dc:69:7e:ec:62:32:60:db:23:7f:88:51:4c:2a:
45:52:58:e8:dd:eb:f7:55:27:9b:52:11:80:01:49:
97:20:ac:60:e8:7e:cd:0f:20:13:74:6e:b7:fa:b4:
ae:43:12:5d:31:0a:7f:d7:70:91:a4:e9:f5:83:89:
92:46:08:a1:d6:64:aa:29:cd:f0:19:4a:bf:5e:3f:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:43:05:19:09:EE:1E:D4:44:1B:78:26:B2:1A:CF:74:04:3A:E3:F7
X509v3 Authority Key Identifier:
keyid:4D:D5:01:71:71:CB:48:62:28:46:1C:A0:78:59:1B:AC:AC:24:B6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdUBcXHLSGIoRhygeFkbrKwkts0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fa17f3-2d73-4584-afac-1e2273f5eb19/1/TdUBcXHLSGIoRhygeFkbrKwkts0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fa17f3-2d73-4584-afac-1e2273f5eb19/1/TdUBcXHLSGIoRhygeFkbrKwkts0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:38:6c:e6:fa:85:3f:1b:82:10:92:a2:a3:89:0d:51:13:2a:
66:bd:49:15:3d:d0:18:8b:02:a1:f3:08:1f:bd:40:76:56:16:
34:29:33:14:f2:04:1e:36:f5:9d:06:7e:e7:80:af:38:91:a8:
c4:4c:ae:fa:21:0d:32:79:9a:44:0a:65:f4:0d:c0:05:3f:a6:
8e:7f:c2:88:98:b2:6b:95:61:1a:a2:6d:c7:3c:d3:1d:d1:4c:
70:15:a6:26:e7:d8:f8:a0:bf:5c:f4:9e:ea:1a:86:87:33:a3:
b2:70:c6:a2:a6:42:09:d8:d5:28:1a:ee:cb:41:72:2f:f0:dc:
e1:fd:8e:20:18:4b:fa:fc:ce:bc:01:5e:5a:db:44:6b:ef:f4:
50:49:9d:18:ff:4b:ff:e4:74:da:81:a7:0d:3c:5a:5a:db:ca:
a5:7e:f4:a5:30:d3:23:77:d2:9a:5f:a4:31:ec:69:47:c9:37:
6b:05:95:8f:68:45:75:6d:ee:e5:82:38:87:38:86:a4:75:7f:
f9:f0:35:70:d8:14:0f:c5:ea:3a:93:13:88:92:34:3e:55:40:
18:24:e8:c8:8a:39:59:d1:3f:bc:a6:d4:ea:33:a3:90:aa:1c:
c8:98:ad:3f:c3:e7:a1:c0:d5:82:d3:e9:c4:f2:1c:21:db:0f:
2e:e2:a0:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuPQ3gKXxOZ8gKov9lWk9oaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDUwMTcxNzFjYjQ4NjIyODQ2MWNhMDc4NTkxYmFjYWMy
NGI2Y2QwHhcNMjMxMTAyMDkwMDQ1WhcNMjMxMTAzMDkwMDQ1WjAzMTEwLwYDVQQD
EyhiNTQzMDUxOTA5ZWUxZWQ0NDQxYjc4MjZiMjFhY2Y3NDA0M2FlM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJeVH3PJe0kmQF9w0/GVi0q0/EBW
X6uF8QjDNUc2Eht8vn23m7dlGSJY0LhAwV20vJF4lmmTKz/KcPT2rEpg5FdV5K/W
wZY5Z7FBG1SmPMy83vQP2POF/SFV2T/TnjjxjeEZvPGprUWSMDPezTg8vFau9wOf
FHQVzBnWTfAP0ntxgCq67J+k6oXKxo+pngqy8vCTzpKWj+PRSZbympGntm+TZ9CH
KkeJld04utUlmmjvSl3y3Gl+7GIyYNsjf4hRTCpFUljo3ev3VSebUhGAAUmXIKxg
6H7NDyATdG63+rSuQxJdMQp/13CRpOn1g4mSRgih1mSqKc3wGUq/Xj+GUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVDBRkJ7h7URBt4JrIaz3QEOuP3MB8GA1UdIwQY
MBaAFE3VAXFxy0hiKEYcoHhZG6ysJLbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRVQmNYSExTR0lvUmh5Z2VGa2JyS3drdHMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mYTE3ZjMtMmQ3My00NTg0LWFmYWMt
MWUyMjczZjVlYjE5LzEvVGRVQmNYSExTR0lvUmh5Z2VGa2JyS3drdHMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mYTE3ZjMtMmQ3My00NTg0LWFmYWMtMWUyMjczZjVlYjE5
LzEvVGRVQmNYSExTR0lvUmh5Z2VGa2JyS3drdHMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDhs5vqF
PxuCEJKio4kNURMqZr1JFT3QGIsCofMIH71AdlYWNCkzFPIEHjb1nQZ+54CvOJGo
xEyu+iENMnmaRApl9A3ABT+mjn/CiJiya5VhGqJtxzzTHdFMcBWmJufY+KC/XPSe
6hqGhzOjsnDGoqZCCdjVKBruy0FyL/Dc4f2OIBhL+vzOvAFeWttEa+/0UEmdGP9L
/+R02oGnDTxaWtvKpX70pTDTI3fSml+kMexpR8k3awWVj2hFdW3u5YI4hziGpHV/
+fA1cNgUD8XqOpMTiJI0PlVAGCToyIo5WdE/vKbU6jOjkKocyJitP8PnocDVgtPp
xPIcIdsPLuKgEg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:54 2024 by rpki-client on console-ams.rpki-client.org