Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.mft
File: RqjMYd4gqQBIgx-sriL6Nw5XaTY.mft (raw, json)
Hash identifier: 0QE27hb2dv2eZy27vT8Kji2YbFJRD6ebVwdZUEHGF5c=
Subject key identifier: 63:A9:E4:62:A6:BF:38:36:64:F0:C0:C2:20:AB:54:30:43:59:5E:2A
Authority key identifier: 46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
Certificate issuer: /CN=46a8cc61de20a90048831facae22fa370e576936
Certificate serial: 018B8F439AB0E44CA3223CB688EF2C9E399D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.mft
Manifest number: 087F
Signing time: Thu 02 Nov 2023 09:00:54 +0000
Manifest this update: Thu 02 Nov 2023 09:00:54 +0000
Manifest next update: Fri 03 Nov 2023 09:00:54 +0000
Files and hashes: 1: RqjMYd4gqQBIgx-sriL6Nw5XaTY.crl (hash: SRAtseyE1zwn54GRCeWEp8IsHvnuxYUz6HHQ/3oJdyw=)
2: ebYrQbILH18xgM1j-g5pIrP2GHY.roa (hash: qaTPgZ/ncjaMvhI4uAhCmRH/DQX3jmij7TuxxWZl0YI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:9a:b0:e4:4c:a3:22:3c:b6:88:ef:2c:9e:39:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a8cc61de20a90048831facae22fa370e576936
Validity
Not Before: Nov 2 09:00:54 2023 GMT
Not After : Nov 3 09:00:54 2023 GMT
Subject: CN=63a9e462a6bf383664f0c0c220ab543043595e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:95:a2:a1:6b:ec:b7:1c:78:94:c4:04:41:
0a:58:63:7f:ea:f9:dc:e3:59:b7:83:a6:7b:61:01:
38:5c:31:74:0f:79:2d:88:57:72:64:f7:8f:17:d9:
2e:38:b5:9f:a8:e5:6d:b2:8b:6e:08:31:e0:63:3f:
5f:c4:88:c8:70:17:a2:69:50:ad:3d:7e:7f:e1:0b:
04:4c:65:00:01:ad:80:0c:f8:8a:bf:27:7d:a4:9c:
a2:57:cb:43:5e:ad:66:0d:06:90:1b:25:1f:56:8f:
e5:d0:2c:e4:ee:3b:ed:09:4c:62:44:14:42:88:1d:
c9:0a:8e:07:98:a9:57:4a:67:b0:01:a3:4a:c6:d6:
c3:9d:56:ec:90:11:46:13:d8:fb:5b:0d:03:4c:17:
a1:b5:fe:a8:cd:51:f2:e7:de:02:94:85:da:1d:0d:
5f:cd:f5:6a:bd:ea:86:b3:a1:d7:5d:11:f8:8a:f7:
bd:2f:da:73:be:a0:3f:d7:3b:6c:79:ab:21:69:1e:
e4:81:00:a6:f6:63:1d:0d:fa:03:39:fc:78:33:b0:
dc:e9:2a:d6:74:ba:d7:a2:90:f0:e0:ac:47:77:21:
13:cb:6d:c1:96:36:3e:6a:a5:14:2a:2f:cc:34:f4:
8b:a6:0b:58:65:43:51:65:5a:f6:ab:46:f6:bb:2f:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:E4:62:A6:BF:38:36:64:F0:C0:C2:20:AB:54:30:43:59:5E:2A
X509v3 Authority Key Identifier:
keyid:46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:83:a8:b7:be:eb:d5:d8:78:23:1e:01:fb:e3:6d:45:c1:58:
5d:2a:38:c1:c2:05:44:8b:87:c4:17:2f:18:13:82:41:11:ab:
84:a9:f0:44:9e:b3:84:47:41:bd:94:eb:29:8c:7f:30:f5:9a:
bd:98:7a:99:78:dc:a8:5a:cd:f0:38:63:6b:2d:67:7c:28:88:
1c:3a:15:bb:5b:f2:07:d1:fc:0d:6d:48:c4:dd:0c:29:0f:2a:
56:2e:61:a8:0e:07:5a:80:0b:d9:4d:56:7d:63:35:73:64:d3:
1e:c6:78:8d:5a:e6:e8:1d:fa:a7:c9:07:2e:8d:ec:ce:65:a3:
9c:46:70:69:84:20:2b:ff:7a:39:3a:32:07:2a:a0:4f:3d:b9:
27:8b:31:c5:cb:0a:d3:92:15:e3:da:4c:91:a1:50:f3:1a:15:
cb:d6:b5:bc:1a:c5:a8:df:57:85:f2:22:20:ab:5e:57:33:fb:
fa:a5:6d:c0:05:fe:27:24:15:29:a1:78:90:3c:72:5d:ea:d9:
b6:6b:1e:7e:c6:78:2a:a4:10:61:66:84:30:a8:bd:e1:b9:55:
26:77:bb:81:16:c4:ff:83:9a:cc:ad:15:55:51:8f:b4:c8:5f:
8b:20:b4:ee:2a:c2:94:a5:99:5e:a9:a0:2a:b5:b5:40:5e:7c:
3b:f9:2e:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuPQ5qw5EyjIjy2iO8snjmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YThjYzYxZGUyMGE5MDA0ODgzMWZhY2FlMjJmYTM3MGU1
NzY5MzYwHhcNMjMxMTAyMDkwMDU0WhcNMjMxMTAzMDkwMDU0WjAzMTEwLwYDVQQD
Eyg2M2E5ZTQ2MmE2YmYzODM2NjRmMGMwYzIyMGFiNTQzMDQzNTk1ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUmVoqFr7LcceJTEBEEKWGN/6vnc
41m3g6Z7YQE4XDF0D3ktiFdyZPePF9kuOLWfqOVtsotuCDHgYz9fxIjIcBeiaVCt
PX5/4QsETGUAAa2ADPiKvyd9pJyiV8tDXq1mDQaQGyUfVo/l0Czk7jvtCUxiRBRC
iB3JCo4HmKlXSmewAaNKxtbDnVbskBFGE9j7Ww0DTBehtf6ozVHy594ClIXaHQ1f
zfVqveqGs6HXXRH4ive9L9pzvqA/1ztseashaR7kgQCm9mMdDfoDOfx4M7Dc6SrW
dLrXopDw4KxHdyETy23BljY+aqUUKi/MNPSLpgtYZUNRZVr2q0b2uy9QNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOp5GKmvzg2ZPDAwiCrVDBDWV4qMB8GA1UdIwQY
MBaAFEaozGHeIKkASIMfrK4i+jcOV2k2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFqTVlkNGdxUUJJZ3gtc3JpTDZOdzVYYVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hNzVmNjAtMDU4ZS00M2M3LTljYTUt
NzFkNDcyNzQ4YjUzLzEvUnFqTVlkNGdxUUJJZ3gtc3JpTDZOdzVYYVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9hNzVmNjAtMDU4ZS00M2M3LTljYTUtNzFkNDcyNzQ4YjUz
LzEvUnFqTVlkNGdxUUJJZ3gtc3JpTDZOdzVYYVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYOot77r
1dh4Ix4B++NtRcFYXSo4wcIFRIuHxBcvGBOCQRGrhKnwRJ6zhEdBvZTrKYx/MPWa
vZh6mXjcqFrN8Dhjay1nfCiIHDoVu1vyB9H8DW1IxN0MKQ8qVi5hqA4HWoAL2U1W
fWM1c2TTHsZ4jVrm6B36p8kHLo3szmWjnEZwaYQgK/96OToyByqgTz25J4sxxcsK
05IV49pMkaFQ8xoVy9a1vBrFqN9XhfIiIKteVzP7+qVtwAX+JyQVKaF4kDxyXerZ
tmsefsZ4KqQQYWaEMKi94blVJne7gRbE/4OazK0VVVGPtMhfiyC07irClKWZXqmg
KrW1QF58O/kunA==
-----END CERTIFICATE-----
Generated at Thu Nov 2 14:58:14 2023 by rpki-client on console-ams.rpki-client.org