Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.mft
File: RSSNwIhIXXjc-BramhjV_50vkGw.mft (raw, json)
Hash identifier: TZkrWeDHpEnTLPS4oR9oo8UngxDghi7BPMgrRSqmalI=
Subject key identifier: B5:AB:25:B2:D3:D1:87:13:04:AB:28:14:72:21:CA:60:81:51:5F:A4
Authority key identifier: 45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C
Certificate issuer: /CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
Certificate serial: 0189B68A833389B7475F3F7037435AE63E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.mft
Manifest number: 0BAE
Signing time: Wed 02 Aug 2023 13:57:58 +0000
Manifest this update: Wed 02 Aug 2023 13:57:58 +0000
Manifest next update: Thu 03 Aug 2023 13:57:58 +0000
Files and hashes: 1: PNFr0tzn5mVmgKWRX8v6WyWhFqY.roa (hash: IhiQ18JXnw9XRWnb1GuWhYZS+Gc1YZ7fxffoUKEWwG4=)
2: PrJSKd0Pg1MWeHQenk518dFfvqE.roa (hash: oluctWM8m0ueFkiO0W9tzYGrnRhqaXAvKVcwbYJApAc=)
3: RSSNwIhIXXjc-BramhjV_50vkGw.crl (hash: uaSXH7M9D7ZrBB/g9oZF/LFL/dIiKgGXop1GDUwxuMY=)
4: o2xDTDVD0JOAOfD67JE0fcnegIs.roa (hash: Gf/7oXvRvj/7NSmVmP31Q0yC+x0UGs6sw7AI/4tLPkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:8a:83:33:89:b7:47:5f:3f:70:37:43:5a:e6:3e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
Validity
Not Before: Aug 2 13:57:58 2023 GMT
Not After : Aug 3 13:57:58 2023 GMT
Subject: CN=b5ab25b2d3d1871304ab28147221ca6081515fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0e:90:51:51:e6:bd:f0:19:02:b4:cc:70:a1:
d6:1d:6d:55:11:75:c1:32:57:14:28:65:02:96:ed:
c0:ca:6a:63:6c:10:b1:cc:83:df:db:3e:e0:58:98:
db:9b:17:13:b6:ee:d6:c0:32:c5:35:97:1e:71:89:
06:7c:93:f3:cc:4b:57:7a:60:dd:53:ca:88:4b:57:
90:75:29:91:83:40:22:c8:29:36:b4:fd:55:77:71:
f6:49:fb:a5:c9:17:2b:6d:c2:3e:cc:f0:2b:60:7f:
82:d7:57:73:38:88:44:a2:b2:3e:42:bb:24:fe:f3:
dc:07:55:8a:fb:3d:47:29:ad:0a:23:16:bd:72:39:
49:7b:6b:be:ff:2f:87:f9:e5:c5:eb:e1:57:b4:71:
e8:2a:12:83:69:2e:eb:10:0c:1e:02:46:a9:b4:76:
da:c4:06:c7:1f:bf:ab:11:b4:9f:c8:8d:7c:71:e1:
13:9e:1d:15:e3:32:9d:b0:dc:aa:50:04:4c:d3:ea:
83:24:84:fd:f7:f9:65:a4:7a:08:81:09:c3:9e:2a:
a2:73:f9:33:31:a8:d4:f0:23:ff:b1:ca:f4:3e:07:
90:35:cb:d1:3f:9d:ae:d6:1d:c2:e4:c6:b5:cb:81:
e9:88:62:ed:da:87:b9:a5:4e:2d:14:e9:05:67:7b:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:25:B2:D3:D1:87:13:04:AB:28:14:72:21:CA:60:81:51:5F:A4
X509v3 Authority Key Identifier:
keyid:45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:73:47:5d:87:1e:3c:7c:35:d6:80:3d:4e:66:55:64:90:ee:
77:52:46:90:63:fc:77:93:31:43:40:84:45:a1:ac:da:75:ea:
a6:19:e0:dd:d8:5d:9a:13:6c:69:b6:5a:17:1f:e2:53:49:ac:
a2:6b:6c:2e:7a:b5:aa:8b:c7:d9:78:4a:4d:9d:7e:7b:c8:ac:
8c:2c:f7:06:a8:5c:7e:68:9f:b4:17:5e:d6:53:fd:a0:14:9f:
69:a0:d0:d2:06:e0:ea:08:6a:f7:66:d9:1f:16:4d:df:36:ef:
ab:1d:59:1b:60:ae:ff:67:2a:d9:fe:9a:4b:d7:34:24:c8:ec:
4b:12:3d:b6:b7:b8:0c:aa:06:10:92:5c:cc:89:22:93:83:9f:
1b:78:e4:66:6e:6f:29:c2:0a:49:45:3c:cf:1a:2c:4a:16:3e:
ff:3f:37:ba:54:13:21:1f:d7:c8:07:af:b3:84:d2:9e:b5:4f:
9b:59:ff:af:01:a6:e3:61:2e:4e:80:f2:6a:d8:66:7a:d5:c7:
e6:7d:5b:bf:38:ac:48:7f:24:7a:6b:c9:94:fe:3e:39:1f:0a:
d2:c0:8e:bb:d6:e8:d7:ca:57:d5:77:20:f5:c5:48:24:56:02:
f4:9c:3c:da:62:9c:c4:56:90:f7:01:b3:00:39:ca:ce:d2:fa:
2e:aa:f2:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYm2ioMzibdHXz9wN0Na5j5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjQ4ZGMwODg0ODVkNzhkY2Y4MWFkYTlhMThkNWZmOWQy
ZjkwNmMwHhcNMjMwODAyMTM1NzU4WhcNMjMwODAzMTM1NzU4WjAzMTEwLwYDVQQD
EyhiNWFiMjViMmQzZDE4NzEzMDRhYjI4MTQ3MjIxY2E2MDgxNTE1ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A6QUVHmvfAZArTMcKHWHW1VEXXB
MlcUKGUClu3AympjbBCxzIPf2z7gWJjbmxcTtu7WwDLFNZcecYkGfJPzzEtXemDd
U8qIS1eQdSmRg0AiyCk2tP1Vd3H2SfulyRcrbcI+zPArYH+C11dzOIhEorI+Qrsk
/vPcB1WK+z1HKa0KIxa9cjlJe2u+/y+H+eXF6+FXtHHoKhKDaS7rEAweAkaptHba
xAbHH7+rEbSfyI18ceETnh0V4zKdsNyqUARM0+qDJIT99/llpHoIgQnDniqic/kz
MajU8CP/scr0PgeQNcvRP52u1h3C5Ma1y4HpiGLt2oe5pU4tFOkFZ3sQzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWrJbLT0YcTBKsoFHIhymCBUV+kMB8GA1UdIwQY
MBaAFEUkjcCISF143Pga2poY1f+dL5BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNTTndJaElYWGpjLUJyYW1oalZfNTB2a0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84ZTA5ZmUtYTVjMC00OTdkLWE1YmIt
YzI3N2I0Y2Y3YzY3LzEvUlNTTndJaElYWGpjLUJyYW1oalZfNTB2a0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84ZTA5ZmUtYTVjMC00OTdkLWE1YmItYzI3N2I0Y2Y3YzY3
LzEvUlNTTndJaElYWGpjLUJyYW1oalZfNTB2a0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA13NHXYce
PHw11oA9TmZVZJDud1JGkGP8d5MxQ0CERaGs2nXqphng3dhdmhNsabZaFx/iU0ms
omtsLnq1qovH2XhKTZ1+e8isjCz3BqhcfmiftBde1lP9oBSfaaDQ0gbg6ghq92bZ
HxZN3zbvqx1ZG2Cu/2cq2f6aS9c0JMjsSxI9tre4DKoGEJJczIkik4OfG3jkZm5v
KcIKSUU8zxosShY+/z83ulQTIR/XyAevs4TSnrVPm1n/rwGm42EuToDyathmetXH
5n1bvzisSH8kemvJlP4+OR8K0sCOu9bo18pX1Xcg9cVIJFYC9Jw82mKcxFaQ9wGz
ADnKztL6LqryjA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:54 2025 by rpki-client