Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/5073f7-8d19-483b-af32-32361b3d782d/1/u3Q2gIpzfF7cZSVsdFeL417EEAk.mft
File: u3Q2gIpzfF7cZSVsdFeL417EEAk.mft (raw, json)
Hash identifier: 26JTS64TRqvVLtcXVMY7kxb1Jr4oWRj22jqPr95So3U=
Subject key identifier: 94:41:80:40:D7:FF:B6:E6:CC:84:02:4A:34:83:1E:7D:FC:C6:C7:BC
Authority key identifier: BB:74:36:80:8A:73:7C:5E:DC:65:25:6C:74:57:8B:E3:5E:C4:10:09
Certificate issuer: /CN=bb7436808a737c5edc65256c74578be35ec41009
Certificate serial: 0189D34D3C918ED4CF8263EB66249FB7BD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3Q2gIpzfF7cZSVsdFeL417EEAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/5073f7-8d19-483b-af32-32361b3d782d/1/u3Q2gIpzfF7cZSVsdFeL417EEAk.mft
Manifest number: 0853
Signing time: Tue 08 Aug 2023 04:00:01 +0000
Manifest this update: Tue 08 Aug 2023 04:00:01 +0000
Manifest next update: Wed 09 Aug 2023 04:00:01 +0000
Files and hashes: 1: sQqbsGEsADtMSoClL-1_S44YbLM.roa (hash: BTpGwOXbNmhQS86c/uu2rotZbVje+dpkJm9n+RXwn7w=)
2: u3Q2gIpzfF7cZSVsdFeL417EEAk.crl (hash: XyKOo9PdsA7dusYnGv9UTEKgqh656wRO277mdDa8vJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:4d:3c:91:8e:d4:cf:82:63:eb:66:24:9f:b7:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb7436808a737c5edc65256c74578be35ec41009
Validity
Not Before: Aug 8 04:00:01 2023 GMT
Not After : Aug 9 04:00:01 2023 GMT
Subject: CN=94418040d7ffb6e6cc84024a34831e7dfcc6c7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:b8:58:c0:29:aa:07:23:d9:c0:08:35:2c:
4a:a3:9d:f9:23:aa:99:52:b2:9e:ff:d7:65:1f:f3:
e6:ce:a3:eb:8e:d7:87:69:4e:89:e2:7a:12:4e:d7:
2c:55:25:6c:33:66:72:89:84:fe:45:c5:e9:61:14:
d6:b5:dc:35:5f:ef:79:16:61:03:db:10:8a:e6:16:
96:88:99:a1:6d:31:ed:ac:6b:73:f4:ee:26:bd:45:
6e:67:52:30:45:bc:b6:b4:11:72:63:f3:e3:dc:78:
1d:af:79:79:c5:37:5b:5f:28:53:e4:09:4f:e8:30:
55:63:76:94:44:17:8f:01:11:ec:2d:77:35:14:c0:
07:6f:2a:ce:3b:d9:30:5f:ed:9b:f3:60:71:09:a9:
0b:9e:62:dd:d3:37:01:5c:dc:37:c1:3a:66:64:56:
5c:3d:70:1a:97:36:af:94:d6:1e:d8:96:72:ce:c4:
97:5c:d2:85:22:63:f7:95:d8:e2:3d:cc:fd:87:9b:
98:83:c3:1e:92:7e:29:f2:0e:f6:4b:4c:b9:d1:3c:
33:91:45:17:c4:18:2c:6f:54:a7:cb:93:b2:8b:28:
b8:9c:92:71:29:f5:83:d5:5e:57:80:ff:f7:b3:5a:
56:89:27:cd:fb:5f:b8:71:be:a4:19:8b:3b:5d:f4:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:80:40:D7:FF:B6:E6:CC:84:02:4A:34:83:1E:7D:FC:C6:C7:BC
X509v3 Authority Key Identifier:
keyid:BB:74:36:80:8A:73:7C:5E:DC:65:25:6C:74:57:8B:E3:5E:C4:10:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3Q2gIpzfF7cZSVsdFeL417EEAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5073f7-8d19-483b-af32-32361b3d782d/1/u3Q2gIpzfF7cZSVsdFeL417EEAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/5073f7-8d19-483b-af32-32361b3d782d/1/u3Q2gIpzfF7cZSVsdFeL417EEAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5c:88:70:c1:ea:f3:9c:d0:00:82:16:0a:cf:fa:df:8d:11:
53:73:f0:4d:01:b6:29:d1:dd:18:e1:87:8d:fc:28:57:33:44:
a7:45:6f:0e:83:9d:2e:fc:89:d8:6b:99:5c:14:b5:3b:3a:c1:
e3:87:96:10:39:bd:1c:11:aa:97:9c:6f:1c:d6:ae:97:26:41:
3c:98:2c:60:4c:09:79:ef:1a:43:9d:c4:8b:3d:7b:60:1f:74:
28:5c:14:86:27:49:d9:1e:0c:25:85:13:f2:ec:28:b9:9c:1a:
eb:18:36:16:65:65:7e:04:11:00:e3:c6:5a:a1:5b:19:31:91:
63:7b:a8:40:3d:b9:f1:2b:76:0f:32:26:b1:b6:33:0b:be:8a:
83:4c:6d:80:ac:69:21:14:5f:99:2f:76:26:74:51:1e:6f:a0:
4a:6e:30:a9:69:07:29:6b:e0:72:1b:f5:7a:82:41:fa:a5:f3:
c4:11:a9:61:e0:47:8d:15:bc:87:76:b8:30:80:d5:d6:69:5f:
1d:f6:73:43:3b:46:63:37:b3:06:3f:76:70:b3:b2:93:e4:58:
c9:7d:ef:0b:69:f5:d6:60:7a:fb:98:4c:3d:0a:98:33:ce:c8:
e9:3f:61:a2:d8:2e:0d:d8:32:0a:f4:d6:c9:1a:89:99:5d:e4:
aa:4c:b2:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnTTTyRjtTPgmPrZiSft72DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzQzNjgwOGE3MzdjNWVkYzY1MjU2Yzc0NTc4YmUzNWVj
NDEwMDkwHhcNMjMwODA4MDQwMDAxWhcNMjMwODA5MDQwMDAxWjAzMTEwLwYDVQQD
Eyg5NDQxODA0MGQ3ZmZiNmU2Y2M4NDAyNGEzNDgzMWU3ZGZjYzZjN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSC4WMApqgcj2cAINSxKo535I6qZ
UrKe/9dlH/PmzqPrjteHaU6J4noSTtcsVSVsM2ZyiYT+RcXpYRTWtdw1X+95FmED
2xCK5haWiJmhbTHtrGtz9O4mvUVuZ1IwRby2tBFyY/Pj3Hgdr3l5xTdbXyhT5AlP
6DBVY3aURBePARHsLXc1FMAHbyrOO9kwX+2b82BxCakLnmLd0zcBXNw3wTpmZFZc
PXAalzavlNYe2JZyzsSXXNKFImP3ldjiPcz9h5uYg8Mekn4p8g72S0y50TwzkUUX
xBgsb1Sny5Oyiyi4nJJxKfWD1V5XgP/3s1pWiSfN+1+4cb6kGYs7XfTHkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRBgEDX/7bmzIQCSjSDHn38xse8MB8GA1UdIwQY
MBaAFLt0NoCKc3xe3GUlbHRXi+NexBAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNRMmdJcHpmRjdjWlNWc2RGZUw0MTdFRUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS81MDczZjctOGQxOS00ODNiLWFmMzIt
MzIzNjFiM2Q3ODJkLzEvdTNRMmdJcHpmRjdjWlNWc2RGZUw0MTdFRUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS81MDczZjctOGQxOS00ODNiLWFmMzItMzIzNjFiM2Q3ODJk
LzEvdTNRMmdJcHpmRjdjWlNWc2RGZUw0MTdFRUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlyIcMHq
85zQAIIWCs/6340RU3PwTQG2KdHdGOGHjfwoVzNEp0VvDoOdLvyJ2GuZXBS1OzrB
44eWEDm9HBGql5xvHNaulyZBPJgsYEwJee8aQ53Eiz17YB90KFwUhidJ2R4MJYUT
8uwouZwa6xg2FmVlfgQRAOPGWqFbGTGRY3uoQD258St2DzImsbYzC76Kg0xtgKxp
IRRfmS92JnRRHm+gSm4wqWkHKWvgchv1eoJB+qXzxBGpYeBHjRW8h3a4MIDV1mlf
HfZzQztGYzezBj92cLOyk+RYyX3vC2n11mB6+5hMPQqYM87I6T9hotguDdgyCvTW
yRqJmV3kqkyy/w==
-----END CERTIFICATE-----
Generated at Tue Aug 8 10:49:41 2023 by rpki-client on console-ams.rpki-client.org