Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/P0hhEqAm83uhswof71aP02IV0ow.mft
File: P0hhEqAm83uhswof71aP02IV0ow.mft (raw, json)
Hash identifier: Z7Va2deCyCMm1f3GF8D1XeS/mnTFBSBJFPNwl9yy0Ic=
Subject key identifier: D6:77:47:61:C8:64:F5:50:A7:52:9A:68:45:79:C0:31:2B:18:EB:1E
Authority key identifier: 3F:48:61:12:A0:26:F3:7B:A1:B3:0A:1F:EF:56:8F:D3:62:15:D2:8C
Certificate issuer: /CN=3f486112a026f37ba1b30a1fef568fd36215d28c
Certificate serial: 018BD7263C989971ECC37079ED4477690969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0hhEqAm83uhswof71aP02IV0ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/P0hhEqAm83uhswof71aP02IV0ow.mft
Manifest number: 084E
Signing time: Thu 16 Nov 2023 08:01:29 +0000
Manifest this update: Thu 16 Nov 2023 08:01:29 +0000
Manifest next update: Fri 17 Nov 2023 08:01:29 +0000
Files and hashes: 1: P0hhEqAm83uhswof71aP02IV0ow.crl (hash: ylZp4FJi8F+8j6W6BlE0Byq9KoIDCV/eztcU7pKp7f8=)
2: eZ6Nuh3V3Gn7OyspOuIwk_CU3TY.roa (hash: aBPKGptRDKAiD5OBJOYCYepdS8Lwdg2NYrcnZ/1yOx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:26:3c:98:99:71:ec:c3:70:79:ed:44:77:69:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f486112a026f37ba1b30a1fef568fd36215d28c
Validity
Not Before: Nov 16 08:01:29 2023 GMT
Not After : Nov 17 08:01:29 2023 GMT
Subject: CN=d6774761c864f550a7529a684579c0312b18eb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:ab:9b:4f:02:56:c8:69:6e:66:82:85:87:
67:d7:fa:95:35:a8:13:ca:98:77:ac:c7:3e:1a:a3:
1c:bd:d1:ca:7f:cb:6e:3a:51:86:b4:d4:75:03:a1:
aa:f9:4f:59:aa:c2:11:ef:86:a5:e6:3a:62:6f:5c:
91:61:b1:17:83:26:56:c0:76:19:3a:33:90:cf:6a:
b7:f4:f7:be:04:08:e1:8f:65:91:18:6a:51:cb:ae:
9e:06:56:88:c3:7d:ef:c9:dd:6d:00:d9:85:d6:5c:
d6:de:bd:e9:e9:94:61:b1:3b:83:2c:27:04:b0:9e:
df:cd:11:0b:bf:63:de:b3:a4:ac:bc:57:db:68:11:
d4:d9:dc:7d:4a:ce:2c:94:b3:0c:ae:af:7e:4e:ae:
ad:b3:84:a9:0d:18:60:b5:a2:8b:89:20:c9:aa:4b:
29:e6:42:c6:1d:6b:d9:00:8c:aa:23:4f:f1:5d:33:
51:68:de:7e:44:a4:e8:95:87:5c:fd:7c:f1:4e:ca:
cd:d7:6c:72:41:87:c8:be:e8:1f:da:aa:b1:e5:c6:
42:3b:fc:03:07:23:5b:70:3f:e8:8b:84:c4:cb:00:
49:52:1f:1a:70:0a:76:48:cb:aa:c9:00:11:23:fe:
a6:a0:82:58:19:14:73:0a:1f:1d:5f:02:f8:94:fe:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:47:61:C8:64:F5:50:A7:52:9A:68:45:79:C0:31:2B:18:EB:1E
X509v3 Authority Key Identifier:
keyid:3F:48:61:12:A0:26:F3:7B:A1:B3:0A:1F:EF:56:8F:D3:62:15:D2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0hhEqAm83uhswof71aP02IV0ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/P0hhEqAm83uhswof71aP02IV0ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/P0hhEqAm83uhswof71aP02IV0ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ac:03:39:c8:38:2e:db:f8:77:96:bd:c3:94:59:a5:23:58:
21:7a:5f:e3:6e:33:88:c0:df:5a:35:c5:99:1c:15:d3:59:45:
77:ba:78:b1:30:15:e6:64:77:ca:47:db:d0:2b:25:44:a2:19:
83:09:4d:c7:9c:b4:33:8c:ed:28:0c:aa:f9:42:c6:48:e9:3a:
3f:5b:e7:fd:c7:9d:48:5b:9d:c3:cf:84:5c:4c:00:71:3d:36:
f0:35:6f:63:c6:af:13:4c:ad:e0:a2:27:ad:b5:d5:ea:88:67:
25:ee:6d:96:f8:45:5a:ff:71:2d:1f:53:d6:75:c0:49:39:f6:
41:4a:27:7c:10:4c:aa:29:2e:59:d3:2a:9f:fa:00:a2:b5:71:
b6:31:a0:73:1c:9a:f6:50:e0:ea:cf:fc:2c:58:d9:57:6b:4e:
ad:64:63:7c:0e:f0:4e:75:92:fe:74:48:ae:53:f9:25:cb:f7:
93:ef:56:4b:13:cd:a5:b8:68:79:6e:80:bb:2b:05:f7:73:3f:
44:4a:93:38:37:94:fc:4c:e4:91:a1:f8:dc:75:0a:05:eb:e6:
b2:10:de:9e:2f:da:15:0b:0d:33:58:33:dc:8e:45:1d:5f:dd:
6a:cd:8d:89:a5:ec:7a:ca:e7:d8:e3:d7:87:31:98:de:a5:44:
44:51:50:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvXJjyYmXHsw3B57UR3aQlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNDg2MTEyYTAyNmYzN2JhMWIzMGExZmVmNTY4ZmQzNjIx
NWQyOGMwHhcNMjMxMTE2MDgwMTI5WhcNMjMxMTE3MDgwMTI5WjAzMTEwLwYDVQQD
EyhkNjc3NDc2MWM4NjRmNTUwYTc1MjlhNjg0NTc5YzAzMTJiMThlYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SGrm08CVshpbmaChYdn1/qVNagT
yph3rMc+GqMcvdHKf8tuOlGGtNR1A6Gq+U9ZqsIR74al5jpib1yRYbEXgyZWwHYZ
OjOQz2q39Pe+BAjhj2WRGGpRy66eBlaIw33vyd1tANmF1lzW3r3p6ZRhsTuDLCcE
sJ7fzRELv2Pes6SsvFfbaBHU2dx9Ss4slLMMrq9+Tq6ts4SpDRhgtaKLiSDJqksp
5kLGHWvZAIyqI0/xXTNRaN5+RKTolYdc/XzxTsrN12xyQYfIvugf2qqx5cZCO/wD
ByNbcD/oi4TEywBJUh8acAp2SMuqyQARI/6moIJYGRRzCh8dXwL4lP4wDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ3R2HIZPVQp1KaaEV5wDErGOseMB8GA1UdIwQY
MBaAFD9IYRKgJvN7obMKH+9Wj9NiFdKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDBoaEVxQW04M3Voc3dvZjcxYVAwMklWMG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85MmQ0YjYtMGYyNC00NjNhLTg5NTMt
YzQ5OTA2YjNhNTZlLzEvUDBoaEVxQW04M3Voc3dvZjcxYVAwMklWMG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC85MmQ0YjYtMGYyNC00NjNhLTg5NTMtYzQ5OTA2YjNhNTZl
LzEvUDBoaEVxQW04M3Voc3dvZjcxYVAwMklWMG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKwDOcg4
Ltv4d5a9w5RZpSNYIXpf424ziMDfWjXFmRwV01lFd7p4sTAV5mR3ykfb0CslRKIZ
gwlNx5y0M4ztKAyq+ULGSOk6P1vn/cedSFudw8+EXEwAcT028DVvY8avE0yt4KIn
rbXV6ohnJe5tlvhFWv9xLR9T1nXASTn2QUonfBBMqikuWdMqn/oAorVxtjGgcxya
9lDg6s/8LFjZV2tOrWRjfA7wTnWS/nRIrlP5Jcv3k+9WSxPNpbhoeW6AuysF93M/
REqTODeU/EzkkaH43HUKBevmshDeni/aFQsNM1gz3I5FHV/das2NiaXsesrn2OPX
hzGY3qVERFFQTg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:53 2025 by rpki-client