Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/x987NxdqWyzLKyRQPhz7IBxlFc8.mft
File: x987NxdqWyzLKyRQPhz7IBxlFc8.mft (raw, json)
Hash identifier: /ev15EddkXA/1A+Yiad15ty0fimgqn5KDkIvu9TqgFc=
Subject key identifier: 82:3E:72:95:AC:B0:C4:3C:98:14:51:FE:E0:BD:9E:FC:5B:3A:20:2F
Authority key identifier: C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
Certificate issuer: /CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Certificate serial: 0187046DD479DCD99D78D177B61A8AAE9A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/x987NxdqWyzLKyRQPhz7IBxlFc8.mft
Manifest number: 05B3
Signing time: Tue 21 Mar 2023 13:48:39 +0000
Manifest this update: Tue 21 Mar 2023 13:48:39 +0000
Manifest next update: Wed 22 Mar 2023 13:48:39 +0000
Files and hashes: 1: FCv8p_Wug0BK2-v5YhKPrmegqQU.roa (hash: YQlF0sBY2r5rtyWf1GSeq39+r5zC85304oxOfqRl4wg=)
2: q3NiN-I38kOvnN5YPpjMJZzwdFQ.roa (hash: sSIJgE8vg8EESTdfTe6m0CcARUjyc0TrWsiqwjkKJ5w=)
3: x987NxdqWyzLKyRQPhz7IBxlFc8.crl (hash: 46FnIdY1JV9HJo3P0Tejm/QoHpSw7xAf/is7QoSMo3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:6d:d4:79:dc:d9:9d:78:d1:77:b6:1a:8a:ae:9a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7df3b37176a5b2ccb2b24503e1cfb201c6515cf
Validity
Not Before: Mar 21 13:48:39 2023 GMT
Not After : Mar 22 13:48:39 2023 GMT
Subject: CN=823e7295acb0c43c981451fee0bd9efc5b3a202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:2d:23:45:4d:ac:48:93:67:f3:7d:6a:72:
bf:eb:73:67:19:fd:66:ba:d2:70:8b:b3:32:b3:b4:
6a:ff:58:29:0b:e5:25:81:91:b4:6a:05:e8:8c:a7:
af:80:7a:7e:7f:28:2e:c6:64:f0:81:31:0a:ef:0a:
a1:1e:8a:36:04:49:4f:f4:b1:64:51:83:10:48:9f:
3d:9e:1d:81:45:aa:c6:8f:22:9e:06:1c:a8:05:24:
5b:92:f8:8c:68:f7:b1:08:3a:9c:a0:c7:37:57:20:
57:8f:db:18:f3:9b:8c:02:d4:69:b5:a3:e2:58:64:
50:0e:e0:a7:b3:c5:a5:fa:3e:6b:fd:c6:91:ed:69:
4e:2d:04:a6:8d:a9:d0:c8:b0:d8:7c:12:27:38:eb:
8e:0c:16:98:cb:54:83:cd:4d:b5:f5:8b:13:d1:6e:
4a:90:ea:ab:83:7b:21:a6:2d:df:2e:9d:41:69:d5:
e1:dd:86:88:90:07:65:07:b4:23:58:f5:e2:8b:b5:
a9:9e:0e:40:6d:6b:bb:6d:97:69:95:d5:33:30:51:
3d:f6:a4:36:64:8b:e2:da:ee:96:03:77:55:03:d0:
0a:2e:e4:45:00:35:8c:91:e2:2a:bf:8d:68:44:13:
14:c1:c3:36:bf:6e:e9:16:57:ae:a9:59:e6:ae:e1:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3E:72:95:AC:B0:C4:3C:98:14:51:FE:E0:BD:9E:FC:5B:3A:20:2F
X509v3 Authority Key Identifier:
keyid:C7:DF:3B:37:17:6A:5B:2C:CB:2B:24:50:3E:1C:FB:20:1C:65:15:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x987NxdqWyzLKyRQPhz7IBxlFc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/x987NxdqWyzLKyRQPhz7IBxlFc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/856331-4180-466e-a515-4b2c5cd4dcbc/1/x987NxdqWyzLKyRQPhz7IBxlFc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0d:aa:4c:3c:3c:f7:c8:14:18:28:9d:b5:f7:43:1d:ee:25:
30:28:e2:eb:0e:f8:0f:f4:eb:b3:ad:f1:e7:ff:4f:08:fd:4a:
a6:7b:e8:df:fb:96:c4:7b:04:50:16:55:ef:30:3d:76:a1:5e:
f3:22:de:50:65:3c:53:d5:40:63:7d:b3:05:42:32:3f:59:44:
63:35:c0:d5:bc:16:bd:7a:04:64:92:0d:3b:34:01:f4:c9:74:
fc:03:0a:56:b8:7a:ad:a5:3b:d6:7b:32:48:97:b8:c6:29:28:
7b:1b:09:b3:f4:43:4b:a4:67:0d:e3:a6:31:06:1c:3d:5c:8e:
94:4f:94:95:cf:6c:9b:0a:c8:79:8d:f4:ec:c5:b8:82:33:b4:
30:31:91:18:97:85:a1:5b:0d:ee:df:96:37:54:4d:40:0a:c1:
23:a6:81:8b:f8:a9:f8:6d:b0:e7:81:08:7f:48:f0:c4:93:c2:
98:bd:eb:54:3b:6d:57:d9:6a:21:48:64:ae:8d:ed:b9:98:8d:
7f:75:93:75:9b:b0:0d:cb:93:56:64:42:00:96:f7:e3:d9:c1:
90:e7:ab:81:c8:2b:53:56:03:4d:b6:ce:59:7e:a1:60:0c:12:
f8:2d:e9:7a:91:de:ef:cf:a8:91:e1:50:8d:67:b4:c0:a5:75:
e4:c8:3a:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcEbdR53NmdeNF3thqKrppDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZGYzYjM3MTc2YTViMmNjYjJiMjQ1MDNlMWNmYjIwMWM2
NTE1Y2YwHhcNMjMwMzIxMTM0ODM5WhcNMjMwMzIyMTM0ODM5WjAzMTEwLwYDVQQD
Eyg4MjNlNzI5NWFjYjBjNDNjOTgxNDUxZmVlMGJkOWVmYzViM2EyMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIMtI0VNrEiTZ/N9anK/63NnGf1m
utJwi7Mys7Rq/1gpC+UlgZG0agXojKevgHp+fyguxmTwgTEK7wqhHoo2BElP9LFk
UYMQSJ89nh2BRarGjyKeBhyoBSRbkviMaPexCDqcoMc3VyBXj9sY85uMAtRptaPi
WGRQDuCns8Wl+j5r/caR7WlOLQSmjanQyLDYfBInOOuODBaYy1SDzU219YsT0W5K
kOqrg3shpi3fLp1BadXh3YaIkAdlB7QjWPXii7Wpng5AbWu7bZdpldUzMFE99qQ2
ZIvi2u6WA3dVA9AKLuRFADWMkeIqv41oRBMUwcM2v27pFleuqVnmruEERQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII+cpWssMQ8mBRR/uC9nvxbOiAvMB8GA1UdIwQY
MBaAFMffOzcXalssyyskUD4c+yAcZRXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDk4N054ZHFXeXpMS3lSUVBoejdJQnhsRmM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NTYzMzEtNDE4MC00NjZlLWE1MTUt
NGIyYzVjZDRkY2JjLzEveDk4N054ZHFXeXpMS3lSUVBoejdJQnhsRmM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84NTYzMzEtNDE4MC00NjZlLWE1MTUtNGIyYzVjZDRkY2Jj
LzEveDk4N054ZHFXeXpMS3lSUVBoejdJQnhsRmM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAw2qTDw8
98gUGCidtfdDHe4lMCji6w74D/Trs63x5/9PCP1Kpnvo3/uWxHsEUBZV7zA9dqFe
8yLeUGU8U9VAY32zBUIyP1lEYzXA1bwWvXoEZJINOzQB9Ml0/AMKVrh6raU71nsy
SJe4xikoexsJs/RDS6RnDeOmMQYcPVyOlE+Ulc9smwrIeY307MW4gjO0MDGRGJeF
oVsN7t+WN1RNQArBI6aBi/ip+G2w54EIf0jwxJPCmL3rVDttV9lqIUhkro3tuZiN
f3WTdZuwDcuTVmRCAJb349nBkOergcgrU1YDTbbOWX6hYAwS+C3pepHe78+okeFQ
jWe0wKV15Mg6Eg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:30 2025 by rpki-client