Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eaa7ce-0df1-47f1-bb81-d3dc7522e08d/1/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.mft
File: Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.mft (raw, json)
Hash identifier: tOPwaoIjFck9aEt1CFQTebTEkqUCx3wHYOvS7ntvubw=
Subject key identifier: 89:A0:65:68:61:8E:FF:70:62:8E:C7:80:0B:3E:7D:EB:89:C5:BE:D6
Authority key identifier: 43:A0:AD:B5:B3:C4:C3:B8:FA:69:0D:1E:77:F0:60:B3:71:E7:36:46
Certificate issuer: /CN=43a0adb5b3c4c3b8fa690d1e77f060b371e73646
Certificate serial: 0186FF6C106C59DB7FE8C4B109D0213DA86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eaa7ce-0df1-47f1-bb81-d3dc7522e08d/1/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.mft
Manifest number: 0892
Signing time: Mon 20 Mar 2023 14:28:37 +0000
Manifest this update: Mon 20 Mar 2023 14:28:37 +0000
Manifest next update: Tue 21 Mar 2023 14:28:37 +0000
Files and hashes: 1: OsWB95sZbfV7L7bEf7kO-Rw_37s.roa (hash: ax895pR1tiZ64idrgsDKVOoWUm03Sb2ktcWETmm4gTE=)
2: Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.crl (hash: EaMdD3hLwlG3h78yNxxXvEvtuDpLGpO1rE6VZf1jDQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:6c:10:6c:59:db:7f:e8:c4:b1:09:d0:21:3d:a8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a0adb5b3c4c3b8fa690d1e77f060b371e73646
Validity
Not Before: Mar 20 14:28:37 2023 GMT
Not After : Mar 21 14:28:37 2023 GMT
Subject: CN=89a06568618eff70628ec7800b3e7deb89c5bed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:a9:c2:2d:48:8d:83:02:b7:bf:e7:9f:b9:
e1:62:b6:08:88:e6:99:e6:82:67:f7:22:4a:11:4a:
86:94:f4:89:b1:9c:7c:7d:bc:a5:17:9f:1c:80:b4:
61:34:35:9d:ab:6e:c0:85:88:0e:34:60:df:69:42:
c0:2a:d3:66:40:da:a0:d7:5f:e3:be:61:da:ac:a9:
06:a1:b9:cd:07:ff:30:e6:1e:d9:46:0a:b8:e0:5a:
f8:ae:be:0b:f5:bc:28:7b:3b:96:87:2f:cf:d0:9b:
d1:d6:8b:bf:3a:a6:fd:ac:64:24:59:0a:f0:f4:d0:
9f:a2:e3:05:3b:3d:73:57:e4:4a:18:74:c2:04:7d:
98:bc:85:33:f2:da:e3:99:ad:13:53:b5:49:3d:01:
cb:42:a4:ab:1b:66:ee:c3:6b:9d:13:b2:80:1e:1a:
5d:bf:ec:34:2a:e6:af:0f:2d:f7:a8:d4:32:a5:1d:
07:2f:c7:15:b7:3a:fb:da:54:39:5f:c8:3f:e9:a0:
72:03:d5:82:5a:3a:73:d9:7a:03:d2:48:f5:62:00:
64:7f:e7:f2:aa:12:f6:5b:33:8d:ab:b5:a0:0b:ce:
d3:07:6f:ad:95:ad:54:00:be:85:d3:14:9b:1f:cf:
64:66:cf:f5:59:3c:19:8a:76:69:b6:0f:f3:bf:e2:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:65:68:61:8E:FF:70:62:8E:C7:80:0B:3E:7D:EB:89:C5:BE:D6
X509v3 Authority Key Identifier:
keyid:43:A0:AD:B5:B3:C4:C3:B8:FA:69:0D:1E:77:F0:60:B3:71:E7:36:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eaa7ce-0df1-47f1-bb81-d3dc7522e08d/1/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eaa7ce-0df1-47f1-bb81-d3dc7522e08d/1/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9e:88:7f:b3:45:1f:23:91:cd:d6:f5:8a:24:bb:b5:80:de:
1b:5e:f9:2c:28:0a:20:40:c9:82:52:eb:18:10:7f:8c:37:89:
f5:ad:e5:12:e7:bb:e1:87:49:ce:47:c0:97:25:db:5f:89:08:
bf:91:29:90:a4:d3:eb:a4:4c:da:0e:bd:86:33:7c:8e:5b:fb:
91:a3:a7:17:6a:4a:e4:88:76:de:39:66:30:ce:68:ea:a0:59:
c8:25:f5:41:31:4f:77:6c:9a:c3:81:76:5c:90:12:0b:37:8b:
69:e7:61:ef:95:33:64:6c:fc:bc:27:e3:76:8b:4b:66:fb:29:
c4:17:4e:fa:6b:d6:23:70:e2:b1:39:8d:37:c4:2d:f8:76:b8:
d7:2f:05:7e:e4:fd:19:f5:08:13:dc:fd:5d:28:1c:4a:bf:a5:
7f:80:d5:43:30:8d:74:4a:74:f5:65:c8:55:67:72:de:d1:e5:
f6:42:2f:28:2c:c6:c7:f7:b9:ee:6a:f2:8d:1d:72:9c:cb:74:
55:b9:e4:82:49:a6:f1:71:4a:ef:6a:2b:bc:03:95:ab:12:be:
b2:57:77:5b:37:e6:f8:9b:3f:38:0d:94:46:51:9c:8d:02:e5:
05:8c:30:00:72:46:79:30:39:ca:37:29:c5:77:b3:83:0c:8f:
77:20:11:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYb/bBBsWdt/6MSxCdAhPahuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTBhZGI1YjNjNGMzYjhmYTY5MGQxZTc3ZjA2MGIzNzFl
NzM2NDYwHhcNMjMwMzIwMTQyODM3WhcNMjMwMzIxMTQyODM3WjAzMTEwLwYDVQQD
Eyg4OWEwNjU2ODYxOGVmZjcwNjI4ZWM3ODAwYjNlN2RlYjg5YzViZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+apwi1IjYMCt7/nn7nhYrYIiOaZ
5oJn9yJKEUqGlPSJsZx8fbylF58cgLRhNDWdq27AhYgONGDfaULAKtNmQNqg11/j
vmHarKkGobnNB/8w5h7ZRgq44Fr4rr4L9bwoezuWhy/P0JvR1ou/Oqb9rGQkWQrw
9NCfouMFOz1zV+RKGHTCBH2YvIUz8trjma0TU7VJPQHLQqSrG2buw2udE7KAHhpd
v+w0KuavDy33qNQypR0HL8cVtzr72lQ5X8g/6aByA9WCWjpz2XoD0kj1YgBkf+fy
qhL2WzONq7WgC87TB2+tla1UAL6F0xSbH89kZs/1WTwZinZptg/zv+JQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImgZWhhjv9wYo7HgAs+feuJxb7WMB8GA1UdIwQY
MBaAFEOgrbWzxMO4+mkNHnfwYLNx5zZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZDdHRiUEV3N2o2YVEwZWRfQmdzM0huTmtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYWE3Y2UtMGRmMS00N2YxLWJiODEt
ZDNkYzc1MjJlMDhkLzEvUTZDdHRiUEV3N2o2YVEwZWRfQmdzM0huTmtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lYWE3Y2UtMGRmMS00N2YxLWJiODEtZDNkYzc1MjJlMDhk
LzEvUTZDdHRiUEV3N2o2YVEwZWRfQmdzM0huTmtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAp6If7NF
HyORzdb1iiS7tYDeG175LCgKIEDJglLrGBB/jDeJ9a3lEue74YdJzkfAlyXbX4kI
v5EpkKTT66RM2g69hjN8jlv7kaOnF2pK5Ih23jlmMM5o6qBZyCX1QTFPd2yaw4F2
XJASCzeLaedh75UzZGz8vCfjdotLZvspxBdO+mvWI3DisTmNN8Qt+Ha41y8FfuT9
GfUIE9z9XSgcSr+lf4DVQzCNdEp09WXIVWdy3tHl9kIvKCzGx/e57mryjR1ynMt0
Vbnkgkmm8XFK72orvAOVqxK+sld3Wzfm+Js/OA2URlGcjQLlBYwwAHJGeTA5yjcp
xXezgwyPdyARjw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:12 2025 by rpki-client