Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.mft
File: CxxGfrlAixHQbx9n5anMQjw5rC8.mft (raw, json)
Hash identifier: 0alsdjgmn8dAoogErU70ASpKwCKOxBGq/0fepCjtmIs=
Subject key identifier: 37:81:47:10:55:DF:9C:CF:56:7F:93:C7:7C:53:E0:02:C4:7D:9E:E1
Authority key identifier: 0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
Certificate issuer: /CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Certificate serial: 0188E32D0053A8573A7B538E3ABEE1D4C2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.mft
Manifest number: 0BA0
Signing time: Thu 22 Jun 2023 12:55:56 +0000
Manifest this update: Thu 22 Jun 2023 12:55:56 +0000
Manifest next update: Fri 23 Jun 2023 12:55:56 +0000
Files and hashes: 1: CxxGfrlAixHQbx9n5anMQjw5rC8.crl (hash: CXDIQnrT7Ex0TAmIOIfnn6m03131z5M3IKjSQbhrNwI=)
2: mWVrtdocog3hlm-mzPkd_MMcpE8.roa (hash: bOQLY16k9G0Pk4hVlENInXVecxKNVITv+arXnhHW73c=)
3: odOygNatf8a_d6gPE9hLCN8b-Zk.roa (hash: s3Pp3BnQ5EKQKjHLvkA7w1EoLurqgd1ocw/nKTtFfrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:2d:00:53:a8:57:3a:7b:53:8e:3a:be:e1:d4:c2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c467eb9408b11d06f1f67e5a9cc423c39ac2f
Validity
Not Before: Jun 22 12:55:56 2023 GMT
Not After : Jun 23 12:55:56 2023 GMT
Subject: CN=3781471055df9ccf567f93c77c53e002c47d9ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:8b:41:54:17:15:89:09:c1:ce:b6:ac:3e:
37:b8:6e:81:cd:1c:31:46:4f:19:ba:6a:bc:fa:41:
96:b0:80:a7:61:eb:2d:12:4a:3f:fd:8c:3e:c8:03:
51:ef:03:ee:4e:ab:93:0f:38:53:b8:92:6e:0a:ce:
65:9b:40:bb:0c:14:6c:9d:80:95:04:e6:35:f1:20:
b3:8b:cc:3e:62:38:c1:8b:3b:cc:90:04:48:a9:f8:
35:c7:1d:ff:2d:56:98:45:15:42:9c:96:c7:f7:5b:
06:83:79:d3:9d:3f:9f:6f:d4:56:15:d8:a1:c0:27:
cc:2b:76:b5:89:32:9f:96:a7:24:be:e1:ca:6b:d0:
85:c3:b5:b1:b9:c3:f1:03:fc:60:3a:c1:79:fd:81:
48:af:71:34:59:03:7c:19:e9:d9:12:9a:fe:ae:9e:
c4:49:70:65:31:2c:db:6e:94:2a:7d:54:68:b4:96:
67:6b:5c:29:03:31:7c:b0:b9:c3:ef:0f:ce:88:04:
2f:36:75:0c:64:44:2b:cf:8c:6e:20:09:f1:7e:11:
97:cb:b1:c1:e3:46:2a:b4:8b:b4:ca:74:d2:09:d2:
30:a5:4e:a1:0d:da:6a:a9:c5:36:0b:f6:75:24:49:
e6:09:a0:ee:b7:3b:c0:c1:c3:2b:c3:98:30:0b:b7:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:47:10:55:DF:9C:CF:56:7F:93:C7:7C:53:E0:02:C4:7D:9E:E1
X509v3 Authority Key Identifier:
keyid:0B:1C:46:7E:B9:40:8B:11:D0:6F:1F:67:E5:A9:CC:42:3C:39:AC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxGfrlAixHQbx9n5anMQjw5rC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/45beb4-9d55-4262-99c1-e8a5784734bb/1/CxxGfrlAixHQbx9n5anMQjw5rC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:65:e9:eb:c2:70:80:d9:1b:f8:d5:f8:d5:6f:b4:c0:63:ad:
1d:25:1d:56:28:17:f3:37:cc:b9:8f:27:20:9b:e5:e4:7e:86:
52:b1:ab:c9:c8:69:db:23:6a:32:d6:c8:8b:dc:30:65:22:c7:
d7:85:de:bf:f9:b8:f9:6c:85:56:25:e0:36:b3:11:c6:87:1e:
a4:af:c2:37:11:fc:b3:46:f7:63:31:42:72:6d:b2:81:f0:d2:
e6:4b:ca:90:89:a4:4f:1d:df:a5:9b:38:27:48:fa:32:31:5a:
0f:22:13:07:f0:48:52:c8:59:a5:e7:4c:a9:ac:0e:0f:24:33:
71:df:e0:f9:95:0b:c4:31:80:85:33:af:4a:96:3f:ef:b2:40:
f1:98:61:34:c4:dc:6e:d2:fe:5a:68:b7:a3:8d:d7:2e:dc:eb:
83:f2:6e:2b:52:3c:11:83:d7:39:cf:28:dd:bc:02:8c:2c:7b:
ee:0f:10:d2:b7:fe:06:40:67:68:ce:28:38:7c:a1:9e:e3:e9:
63:24:b7:54:d4:04:f7:cf:cf:7a:82:34:24:9f:3d:38:e6:d5:
2a:bc:29:3f:15:cc:7a:14:52:b6:8e:58:4f:d1:6d:f5:13:98:
d3:24:3f:c9:81:77:33:ef:69:0c:56:4d:0d:18:cc:97:75:82:
f4:7e:77:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYjjLQBTqFc6e1OOOr7h1MLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWM0NjdlYjk0MDhiMTFkMDZmMWY2N2U1YTljYzQyM2Mz
OWFjMmYwHhcNMjMwNjIyMTI1NTU2WhcNMjMwNjIzMTI1NTU2WjAzMTEwLwYDVQQD
EygzNzgxNDcxMDU1ZGY5Y2NmNTY3ZjkzYzc3YzUzZTAwMmM0N2Q5ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyeLQVQXFYkJwc62rD43uG6BzRwx
Rk8Zumq8+kGWsICnYestEko//Yw+yANR7wPuTquTDzhTuJJuCs5lm0C7DBRsnYCV
BOY18SCzi8w+YjjBizvMkARIqfg1xx3/LVaYRRVCnJbH91sGg3nTnT+fb9RWFdih
wCfMK3a1iTKflqckvuHKa9CFw7WxucPxA/xgOsF5/YFIr3E0WQN8GenZEpr+rp7E
SXBlMSzbbpQqfVRotJZna1wpAzF8sLnD7w/OiAQvNnUMZEQrz4xuIAnxfhGXy7HB
40YqtIu0ynTSCdIwpU6hDdpqqcU2C/Z1JEnmCaDutzvAwcMrw5gwC7c+IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeBRxBV35zPVn+Tx3xT4ALEfZ7hMB8GA1UdIwQY
MBaAFAscRn65QIsR0G8fZ+WpzEI8OawvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3h4R2ZybEFpeEhRYng5bjVhbk1Ranc1ckM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80NWJlYjQtOWQ1NS00MjYyLTk5YzEt
ZThhNTc4NDczNGJiLzEvQ3h4R2ZybEFpeEhRYng5bjVhbk1Ranc1ckM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80NWJlYjQtOWQ1NS00MjYyLTk5YzEtZThhNTc4NDczNGJi
LzEvQ3h4R2ZybEFpeEhRYng5bjVhbk1Ranc1ckM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmXp68Jw
gNkb+NX41W+0wGOtHSUdVigX8zfMuY8nIJvl5H6GUrGrychp2yNqMtbIi9wwZSLH
14Xev/m4+WyFViXgNrMRxocepK/CNxH8s0b3YzFCcm2ygfDS5kvKkImkTx3fpZs4
J0j6MjFaDyITB/BIUshZpedMqawODyQzcd/g+ZULxDGAhTOvSpY/77JA8ZhhNMTc
btL+Wmi3o43XLtzrg/JuK1I8EYPXOc8o3bwCjCx77g8Q0rf+BkBnaM4oOHyhnuPp
YyS3VNQE98/PeoI0JJ89OObVKrwpPxXMehRSto5YT9Ft9ROY0yQ/yYF3M+9pDFZN
DRjMl3WC9H536Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:58:57 2025 by rpki-client