Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/cHW75FOIFYAgMK_sBScGyjQ0LOg.mft
File: cHW75FOIFYAgMK_sBScGyjQ0LOg.mft (raw, json)
Hash identifier: L8lChj9m2QLwHpZSa9/OnQ1GtGJzLERsiVDy/YZ27yM=
Subject key identifier: 89:51:5E:DA:EB:29:EF:02:4C:32:C9:0D:14:1B:94:A5:9D:D9:20:19
Authority key identifier: 70:75:BB:E4:53:88:15:80:20:30:AF:EC:05:27:06:CA:34:34:2C:E8
Certificate issuer: /CN=7075bbe4538815802030afec052706ca34342ce8
Certificate serial: 018B36DC7B7F5A28B8C40EF9567D3A9011FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHW75FOIFYAgMK_sBScGyjQ0LOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/cHW75FOIFYAgMK_sBScGyjQ0LOg.mft
Manifest number: 0886
Signing time: Mon 16 Oct 2023 05:01:40 +0000
Manifest this update: Mon 16 Oct 2023 05:01:40 +0000
Manifest next update: Tue 17 Oct 2023 05:01:40 +0000
Files and hashes: 1: cHW75FOIFYAgMK_sBScGyjQ0LOg.crl (hash: 4gUPPw00AGiMm0VUtNIvuJd4jtimMYif5fhQGZwhQRk=)
2: q3q-Kf7njl3Xfhp1OG8FoHdtWhM.roa (hash: +hHS4uIIpq6a0mEbo3Fihw4+tH/VcK1aKCpqD2F+GkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:dc:7b:7f:5a:28:b8:c4:0e:f9:56:7d:3a:90:11:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7075bbe4538815802030afec052706ca34342ce8
Validity
Not Before: Oct 16 05:01:40 2023 GMT
Not After : Oct 17 05:01:40 2023 GMT
Subject: CN=89515edaeb29ef024c32c90d141b94a59dd92019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:62:37:60:60:5c:84:ed:4b:56:43:ad:b4:
ef:6d:c0:83:f1:ff:bc:36:ab:e8:1a:0c:ce:df:02:
e8:0e:03:5c:4c:17:07:c0:38:d0:22:c7:5b:34:76:
51:c7:be:3e:7d:34:93:89:93:92:1c:5b:6e:d5:30:
68:fe:1f:e1:25:96:b0:34:cc:20:b7:5b:3b:59:65:
fc:43:23:e4:2a:02:42:63:61:92:56:28:c2:e6:01:
14:93:b0:99:09:43:d9:6c:be:4e:ea:e8:8b:41:53:
34:c2:dc:a0:b1:ff:2c:27:7a:d6:7d:da:d6:02:7c:
63:73:77:f6:42:da:37:6c:6f:78:1d:06:df:d3:fd:
42:25:52:f8:6e:a4:12:9b:e2:77:a8:b9:f8:d1:09:
2c:57:d6:a7:8b:2a:5d:f0:98:2e:58:fc:b6:07:28:
6f:26:e8:ac:56:36:57:c3:00:87:02:2b:60:28:80:
b4:0d:34:27:b8:2a:76:1c:ca:2e:5e:5b:d0:7c:5a:
68:ad:62:10:f0:e7:b0:2c:0d:cb:c5:03:96:c9:34:
d7:85:a8:74:a2:b7:f8:5e:5b:4f:e9:c4:27:a5:c1:
5c:b2:f4:7d:ff:2d:17:37:69:a4:12:e3:b2:5a:16:
78:12:40:db:7a:d5:73:f1:b3:37:83:0c:02:d4:64:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:51:5E:DA:EB:29:EF:02:4C:32:C9:0D:14:1B:94:A5:9D:D9:20:19
X509v3 Authority Key Identifier:
keyid:70:75:BB:E4:53:88:15:80:20:30:AF:EC:05:27:06:CA:34:34:2C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHW75FOIFYAgMK_sBScGyjQ0LOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/cHW75FOIFYAgMK_sBScGyjQ0LOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3fcae-27d9-404e-986c-c8f1834ca193/1/cHW75FOIFYAgMK_sBScGyjQ0LOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:59:43:52:c7:c6:07:06:b4:67:2f:ee:e0:c0:41:11:28:57:
09:e3:7b:1a:2d:47:96:06:9d:5b:1e:a5:6a:cd:81:2f:d1:f4:
fc:7b:34:8a:c8:66:73:96:a5:a0:21:f0:f1:7e:bd:49:a4:b6:
95:01:cd:1b:b1:4c:c0:ce:ff:38:0a:2f:ec:85:fa:cf:0b:5d:
0f:d0:f0:22:5d:3f:f7:fe:fc:94:5e:f9:1d:cb:63:6d:3e:da:
8c:96:ad:14:96:58:b6:49:94:13:40:da:b3:23:fa:30:5b:04:
86:0f:2e:09:7e:61:b9:71:de:76:a8:8d:f8:f0:83:b5:2a:8e:
83:7a:b0:c8:26:8a:20:be:38:da:1d:db:56:59:93:01:1c:de:
8c:b2:96:f2:db:20:05:f6:4e:bc:ec:8b:ee:a1:f1:69:5a:78:
7b:ac:e6:5e:ae:98:a6:a7:49:ce:4b:c6:6c:62:a4:4c:f3:f9:
f0:e5:2a:da:fb:97:5a:a7:ac:fb:f1:43:0f:90:12:1c:6c:9d:
f9:49:fd:7e:98:f6:b4:2d:db:17:7a:22:1a:31:83:c6:7d:b5:
cd:36:01:b5:04:2c:11:ec:8e:3a:72:19:90:e4:00:b9:88:50:
a1:3b:32:2c:2b:c8:6b:9b:2b:0e:e3:70:33:a0:03:0f:e3:57:
b4:53:3e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYs23Ht/Wii4xA75Vn06kBH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzViYmU0NTM4ODE1ODAyMDMwYWZlYzA1MjcwNmNhMzQz
NDJjZTgwHhcNMjMxMDE2MDUwMTQwWhcNMjMxMDE3MDUwMTQwWjAzMTEwLwYDVQQD
Eyg4OTUxNWVkYWViMjllZjAyNGMzMmM5MGQxNDFiOTRhNTlkZDkyMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKdiN2BgXITtS1ZDrbTvbcCD8f+8
NqvoGgzO3wLoDgNcTBcHwDjQIsdbNHZRx74+fTSTiZOSHFtu1TBo/h/hJZawNMwg
t1s7WWX8QyPkKgJCY2GSVijC5gEUk7CZCUPZbL5O6uiLQVM0wtygsf8sJ3rWfdrW
Anxjc3f2Qto3bG94HQbf0/1CJVL4bqQSm+J3qLn40QksV9aniypd8JguWPy2Byhv
JuisVjZXwwCHAitgKIC0DTQnuCp2HMouXlvQfFporWIQ8OewLA3LxQOWyTTXhah0
orf4XltP6cQnpcFcsvR9/y0XN2mkEuOyWhZ4EkDbetVz8bM3gwwC1GQE2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlRXtrrKe8CTDLJDRQblKWd2SAZMB8GA1UdIwQY
MBaAFHB1u+RTiBWAIDCv7AUnBso0NCzoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hXNzVGT0lGWUFnTUtfc0JTY0d5alEwTE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2ZjYWUtMjdkOS00MDRlLTk4NmMt
YzhmMTgzNGNhMTkzLzEvY0hXNzVGT0lGWUFnTUtfc0JTY0d5alEwTE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hM2ZjYWUtMjdkOS00MDRlLTk4NmMtYzhmMTgzNGNhMTkz
LzEvY0hXNzVGT0lGWUFnTUtfc0JTY0d5alEwTE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1lDUsfG
Bwa0Zy/u4MBBEShXCeN7Gi1HlgadWx6las2BL9H0/Hs0ishmc5aloCHw8X69SaS2
lQHNG7FMwM7/OAov7IX6zwtdD9DwIl0/9/78lF75HctjbT7ajJatFJZYtkmUE0Da
syP6MFsEhg8uCX5huXHedqiN+PCDtSqOg3qwyCaKIL442h3bVlmTARzejLKW8tsg
BfZOvOyL7qHxaVp4e6zmXq6YpqdJzkvGbGKkTPP58OUq2vuXWqes+/FDD5ASHGyd
+Un9fpj2tC3bF3oiGjGDxn21zTYBtQQsEeyOOnIZkOQAuYhQoTsyLCvIa5srDuNw
M6ADD+NXtFM+ZA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:36 2025 by rpki-client