Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/Z4HvdEav5wjrYXylA2pj3gtKRYk.mft
File: Z4HvdEav5wjrYXylA2pj3gtKRYk.mft (raw, json)
Hash identifier: r79BQ8ll4rpvg23NM+DXdIbpQEGp6S0TJMgbpitESH8=
Subject key identifier: 9C:79:49:80:F5:57:9A:31:A6:B1:34:35:B7:1B:6C:2E:0C:23:A8:C8
Authority key identifier: 67:81:EF:74:46:AF:E7:08:EB:61:7C:A5:03:6A:63:DE:0B:4A:45:89
Certificate issuer: /CN=6781ef7446afe708eb617ca5036a63de0b4a4589
Certificate serial: 0189D4BB82EBEA556907AC571605C2F94518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4HvdEav5wjrYXylA2pj3gtKRYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/Z4HvdEav5wjrYXylA2pj3gtKRYk.mft
Manifest number: 0853
Signing time: Tue 08 Aug 2023 10:40:05 +0000
Manifest this update: Tue 08 Aug 2023 10:40:05 +0000
Manifest next update: Wed 09 Aug 2023 10:40:05 +0000
Files and hashes: 1: Z4HvdEav5wjrYXylA2pj3gtKRYk.crl (hash: SjctbnF9oAs0nI9GGTIKKVXbM0MHna+aKODyn9EHEC4=)
2: qN-fVz6Y_zwHIftVCoDsNQsiITQ.roa (hash: ok3VggH508ZFtxIZisXe9paeIscxKX/QKcHGeWqMjkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:bb:82:eb:ea:55:69:07:ac:57:16:05:c2:f9:45:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6781ef7446afe708eb617ca5036a63de0b4a4589
Validity
Not Before: Aug 8 10:40:05 2023 GMT
Not After : Aug 9 10:40:05 2023 GMT
Subject: CN=9c794980f5579a31a6b13435b71b6c2e0c23a8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:de:cc:de:3e:70:54:2a:b7:66:d0:1c:90:
e7:6c:b2:32:a4:5d:ce:f3:3c:cc:a3:c7:b6:40:ad:
8d:f5:17:49:e4:c4:ea:84:ac:69:1d:c2:d4:e4:a6:
6b:dd:a0:f0:15:eb:e2:44:fe:7a:3f:03:2e:0c:c4:
af:c6:60:14:fd:1f:fc:53:bb:3f:f4:cf:39:b3:ad:
ec:00:f9:9b:3a:2d:f3:f1:05:92:17:97:23:15:a7:
42:85:76:40:04:79:ad:b0:34:59:83:a0:62:35:c7:
29:7a:d1:13:15:8e:31:4f:99:62:55:b6:22:4a:ec:
05:30:35:72:29:b1:62:e7:3c:d2:db:80:4b:1e:06:
23:b6:bb:48:19:66:0e:80:e0:72:43:80:8d:74:dd:
33:f7:75:45:49:c1:c6:2e:aa:1b:e5:91:7b:39:5c:
ee:6e:94:77:d0:2a:1a:98:93:64:ac:cb:5b:17:dd:
ff:2c:f7:0f:a8:07:24:38:9e:58:72:55:28:fb:95:
17:41:df:7e:ba:d4:91:35:ff:dc:06:64:44:4b:45:
9f:da:19:cd:c3:0e:36:ef:f1:8c:f3:c6:d9:29:b7:
2e:7f:ac:b4:4c:b9:da:78:07:ba:fc:ab:e8:cc:75:
a0:5d:93:c8:bb:27:2d:8d:09:a8:69:16:ad:56:6c:
98:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:79:49:80:F5:57:9A:31:A6:B1:34:35:B7:1B:6C:2E:0C:23:A8:C8
X509v3 Authority Key Identifier:
keyid:67:81:EF:74:46:AF:E7:08:EB:61:7C:A5:03:6A:63:DE:0B:4A:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4HvdEav5wjrYXylA2pj3gtKRYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/Z4HvdEav5wjrYXylA2pj3gtKRYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0f91e7-8d3a-4f2c-a2c1-d1614d419b04/1/Z4HvdEav5wjrYXylA2pj3gtKRYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7d:f4:c4:5b:ab:a7:79:17:67:e7:dc:c0:7b:68:e9:85:3f:
2d:0d:f6:1a:b2:51:05:80:ad:b1:b1:c5:90:73:b9:da:11:0e:
f5:bc:7b:60:57:09:0b:11:a8:d8:ad:f0:1d:49:83:1b:b2:d6:
b0:e5:4f:6d:4f:19:00:49:f5:42:b9:b4:3b:53:85:e0:bb:e7:
f3:db:a2:0a:25:d9:59:cd:a4:68:18:92:88:1d:29:e8:69:34:
6f:0a:82:d8:94:a7:fa:db:aa:5e:ad:e1:73:1a:cf:c8:cd:d6:
8e:59:21:c1:39:06:24:28:be:ac:a0:41:52:a8:91:0b:0d:47:
4b:80:ca:27:ea:cf:70:78:95:95:47:96:2b:7a:f8:c3:3c:7c:
76:0d:85:ab:b4:ac:7a:54:e3:70:39:5e:4f:fa:99:6c:65:b9:
49:a4:5b:a1:a4:fc:e3:dc:e1:d2:f6:27:02:7d:85:c4:d9:c7:
04:73:d4:48:83:98:34:a4:37:ff:dd:17:60:bb:bb:fa:e6:b8:
95:2f:be:f6:f7:6a:d8:7a:c4:46:e6:b5:01:b8:50:e5:71:64:
a8:4c:f0:b2:38:0f:b3:c4:09:c7:e4:69:41:39:0f:77:3a:b9:
d1:2f:b8:36:01:c2:4e:b4:89:84:a7:b0:77:da:e2:85:02:7a:
3e:26:6e:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnUu4Lr6lVpB6xXFgXC+UUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODFlZjc0NDZhZmU3MDhlYjYxN2NhNTAzNmE2M2RlMGI0
YTQ1ODkwHhcNMjMwODA4MTA0MDA1WhcNMjMwODA5MTA0MDA1WjAzMTEwLwYDVQQD
Eyg5Yzc5NDk4MGY1NTc5YTMxYTZiMTM0MzViNzFiNmMyZTBjMjNhOGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGTezN4+cFQqt2bQHJDnbLIypF3O
8zzMo8e2QK2N9RdJ5MTqhKxpHcLU5KZr3aDwFeviRP56PwMuDMSvxmAU/R/8U7s/
9M85s63sAPmbOi3z8QWSF5cjFadChXZABHmtsDRZg6BiNccpetETFY4xT5liVbYi
SuwFMDVyKbFi5zzS24BLHgYjtrtIGWYOgOByQ4CNdN0z93VFScHGLqob5ZF7OVzu
bpR30CoamJNkrMtbF93/LPcPqAckOJ5YclUo+5UXQd9+utSRNf/cBmRES0Wf2hnN
ww427/GM88bZKbcuf6y0TLnaeAe6/KvozHWgXZPIuyctjQmoaRatVmyYiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJx5SYD1V5oxprE0NbcbbC4MI6jIMB8GA1UdIwQY
MBaAFGeB73RGr+cI62F8pQNqY94LSkWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRIdmRFYXY1d2pyWVh5bEEycGozZ3RLUllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZjkxZTctOGQzYS00ZjJjLWEyYzEt
ZDE2MTRkNDE5YjA0LzEvWjRIdmRFYXY1d2pyWVh5bEEycGozZ3RLUllrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZjkxZTctOGQzYS00ZjJjLWEyYzEtZDE2MTRkNDE5YjA0
LzEvWjRIdmRFYXY1d2pyWVh5bEEycGozZ3RLUllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK330xFur
p3kXZ+fcwHto6YU/LQ32GrJRBYCtsbHFkHO52hEO9bx7YFcJCxGo2K3wHUmDG7LW
sOVPbU8ZAEn1Qrm0O1OF4Lvn89uiCiXZWc2kaBiSiB0p6Gk0bwqC2JSn+tuqXq3h
cxrPyM3WjlkhwTkGJCi+rKBBUqiRCw1HS4DKJ+rPcHiVlUeWK3r4wzx8dg2Fq7Ss
elTjcDleT/qZbGW5SaRboaT849zh0vYnAn2FxNnHBHPUSIOYNKQ3/90XYLu7+ua4
lS++9vdq2HrERua1AbhQ5XFkqEzwsjgPs8QJx+RpQTkPdzq50S+4NgHCTrSJhKew
d9rihQJ6PiZu0g==
-----END CERTIFICATE-----
Generated at Tue Aug 8 12:00:43 2023 by rpki-client on console-fra.rpki-client.org