Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/ijrJDyhAzttlesMMuGQV9WT_y7s.mft
File: ijrJDyhAzttlesMMuGQV9WT_y7s.mft (raw, json)
Hash identifier: mg25uwgrOEBB8vrCMxKDBx2TIGRZGUCxGj7JBYwPx7Q=
Subject key identifier: 2C:AE:14:21:DB:CF:8A:F5:CE:F4:1E:E2:6B:CD:F3:50:31:02:F6:48
Authority key identifier: 8A:3A:C9:0F:28:40:CE:DB:65:7A:C3:0C:B8:64:15:F5:64:FF:CB:BB
Certificate issuer: /CN=8a3ac90f2840cedb657ac30cb86415f564ffcbbb
Certificate serial: 018BAD16948B4218C2C30CEB93CADA17E7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijrJDyhAzttlesMMuGQV9WT_y7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/ijrJDyhAzttlesMMuGQV9WT_y7s.mft
Manifest number: 0838
Signing time: Wed 08 Nov 2023 04:00:19 +0000
Manifest this update: Wed 08 Nov 2023 04:00:19 +0000
Manifest next update: Thu 09 Nov 2023 04:00:19 +0000
Files and hashes: 1: FH4_8RhV4X6E9AYAXGxkxvYOCZ4.roa (hash: 4RDQ47cdQY0RupAgoq/V271uAyHOW5YKr1/7fkoQ0IE=)
2: ijrJDyhAzttlesMMuGQV9WT_y7s.crl (hash: gKFJ8ExYk6RCJG0DZRWvczy44sLj0HpRN8DArB9x0/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:16:94:8b:42:18:c2:c3:0c:eb:93:ca:da:17:e7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3ac90f2840cedb657ac30cb86415f564ffcbbb
Validity
Not Before: Nov 8 04:00:19 2023 GMT
Not After : Nov 9 04:00:19 2023 GMT
Subject: CN=2cae1421dbcf8af5cef41ee26bcdf3503102f648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:76:a1:50:e0:d2:39:06:6b:74:60:d5:06:
64:43:15:82:45:83:d4:e2:40:fd:0b:87:d9:dd:67:
b9:27:5b:26:90:af:30:3a:85:2e:5b:7c:4e:38:48:
49:67:61:28:e7:98:39:1d:25:37:5f:1b:fe:61:e5:
ca:3d:f7:bc:e4:04:a6:fa:af:13:53:c6:4d:7c:ee:
78:a6:ff:2d:1e:41:a9:d7:af:68:6b:1b:61:d4:d4:
07:af:11:5b:98:7b:43:eb:2b:8e:98:89:8a:5d:1f:
5e:16:69:a5:82:22:f1:1e:3e:99:10:53:a0:dd:15:
0a:d5:66:15:63:20:37:50:69:49:2d:e4:82:66:9e:
06:57:b8:ab:c8:58:b7:07:98:25:f2:a4:db:a9:81:
56:3c:2f:9f:98:79:1d:0f:2e:1a:38:78:58:02:be:
95:3f:6a:20:15:a0:ba:80:c5:03:99:31:3b:8e:5c:
86:6c:3d:72:ee:55:7a:cc:df:e8:3e:8d:4a:54:20:
56:43:bd:49:98:47:77:51:01:b3:37:60:da:8c:8d:
51:72:18:af:7e:e0:b0:0e:0a:6a:db:6d:df:76:2d:
2e:fc:59:a1:90:ac:2c:e1:56:5f:98:f1:1a:ae:c6:
ca:87:e8:e4:1e:a6:5b:41:7f:ac:d1:8f:b8:5a:2a:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AE:14:21:DB:CF:8A:F5:CE:F4:1E:E2:6B:CD:F3:50:31:02:F6:48
X509v3 Authority Key Identifier:
keyid:8A:3A:C9:0F:28:40:CE:DB:65:7A:C3:0C:B8:64:15:F5:64:FF:CB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijrJDyhAzttlesMMuGQV9WT_y7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/ijrJDyhAzttlesMMuGQV9WT_y7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b762a4-6079-450e-8365-6af59c3bc7aa/1/ijrJDyhAzttlesMMuGQV9WT_y7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bd:8f:37:c8:2d:4b:f1:bd:55:66:17:b4:08:6d:96:66:e5:
da:b3:ba:3f:5c:07:ab:08:b9:ec:7b:14:fb:d0:f3:f8:bc:7c:
68:14:15:32:e4:90:43:ed:91:82:5e:d2:a1:a1:68:33:41:01:
9a:c7:fe:a7:15:1b:cb:a7:f2:b8:a1:58:7a:b3:db:50:22:24:
5e:39:45:82:a9:b2:f0:c7:34:96:82:86:25:06:ee:1a:7e:ba:
73:92:07:08:20:d1:de:04:e2:24:b0:ee:aa:3b:d4:1f:31:0f:
1c:d3:a9:24:ed:a3:f0:d6:f1:c5:85:ea:3d:45:58:f9:52:17:
89:97:e9:0d:45:fb:fe:53:2e:3d:33:1c:45:79:d3:4e:8e:be:
40:af:49:56:0a:fe:43:b2:ae:bb:e4:26:92:54:2f:c3:5e:e0:
fa:40:a1:b4:00:00:11:e7:ec:bd:e6:2a:37:5b:0a:6b:2b:a3:
43:74:84:97:8f:78:69:30:a2:be:a3:fd:81:26:14:01:1b:c4:
be:ca:03:e8:cb:02:c8:98:bf:7c:17:13:88:d0:8a:dd:eb:f8:
15:ca:c6:54:9b:68:e0:ef:70:5c:4c:2b:22:66:9d:cf:f8:47:
52:d7:ce:d3:53:84:67:16:ee:3c:7a:86:2a:e4:e3:03:78:cc:
50:21:0e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYutFpSLQhjCwwzrk8raF+e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhM2FjOTBmMjg0MGNlZGI2NTdhYzMwY2I4NjQxNWY1NjRm
ZmNiYmIwHhcNMjMxMTA4MDQwMDE5WhcNMjMxMTA5MDQwMDE5WjAzMTEwLwYDVQQD
EygyY2FlMTQyMWRiY2Y4YWY1Y2VmNDFlZTI2YmNkZjM1MDMxMDJmNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOF2oVDg0jkGa3Rg1QZkQxWCRYPU
4kD9C4fZ3We5J1smkK8wOoUuW3xOOEhJZ2Eo55g5HSU3Xxv+YeXKPfe85ASm+q8T
U8ZNfO54pv8tHkGp169oaxth1NQHrxFbmHtD6yuOmImKXR9eFmmlgiLxHj6ZEFOg
3RUK1WYVYyA3UGlJLeSCZp4GV7iryFi3B5gl8qTbqYFWPC+fmHkdDy4aOHhYAr6V
P2ogFaC6gMUDmTE7jlyGbD1y7lV6zN/oPo1KVCBWQ71JmEd3UQGzN2DajI1Rchiv
fuCwDgpq223fdi0u/FmhkKws4VZfmPEarsbKh+jkHqZbQX+s0Y+4Wip+gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyuFCHbz4r1zvQe4mvN81AxAvZIMB8GA1UdIwQY
MBaAFIo6yQ8oQM7bZXrDDLhkFfVk/8u7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWpySkR5aEF6dHRsZXNNTXVHUVY5V1RfeTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iNzYyYTQtNjA3OS00NTBlLTgzNjUt
NmFmNTljM2JjN2FhLzEvaWpySkR5aEF6dHRsZXNNTXVHUVY5V1RfeTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iNzYyYTQtNjA3OS00NTBlLTgzNjUtNmFmNTljM2JjN2Fh
LzEvaWpySkR5aEF6dHRsZXNNTXVHUVY5V1RfeTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar2PN8gt
S/G9VWYXtAhtlmbl2rO6P1wHqwi57HsU+9Dz+Lx8aBQVMuSQQ+2Rgl7SoaFoM0EB
msf+pxUby6fyuKFYerPbUCIkXjlFgqmy8Mc0loKGJQbuGn66c5IHCCDR3gTiJLDu
qjvUHzEPHNOpJO2j8NbxxYXqPUVY+VIXiZfpDUX7/lMuPTMcRXnTTo6+QK9JVgr+
Q7Kuu+QmklQvw17g+kChtAAAEefsveYqN1sKayujQ3SEl494aTCivqP9gSYUARvE
vsoD6MsCyJi/fBcTiNCK3ev4FcrGVJto4O9wXEwrImadz/hHUtfO01OEZxbuPHqG
KuTjA3jMUCEOlg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:58 2025 by rpki-client