Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ea3638-6981-4de8-ad82-4d62eacd95ec/1/ChkoGPCg2XOdwSOLryxBfk6Ogww.mft
File: ChkoGPCg2XOdwSOLryxBfk6Ogww.mft (raw, json)
Hash identifier: 3NdWe+YXgjP0FFTZaeBK+zdQCz6GZsyBVJ0PtKy8JiI=
Subject key identifier: BF:1C:6D:05:C8:0C:91:68:6F:4F:82:3F:4B:84:F4:5E:FC:F3:1C:FF
Authority key identifier: 0A:19:28:18:F0:A0:D9:73:9D:C1:23:8B:AF:2C:41:7E:4E:8E:83:0C
Certificate issuer: /CN=0a192818f0a0d9739dc1238baf2c417e4e8e830c
Certificate serial: 018C39DA7EA80940993DA016440E8A3DA84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChkoGPCg2XOdwSOLryxBfk6Ogww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ea3638-6981-4de8-ad82-4d62eacd95ec/1/ChkoGPCg2XOdwSOLryxBfk6Ogww.mft
Manifest number: 06DC
Signing time: Tue 05 Dec 2023 12:01:09 +0000
Manifest this update: Tue 05 Dec 2023 12:01:09 +0000
Manifest next update: Wed 06 Dec 2023 12:01:09 +0000
Files and hashes: 1: ChkoGPCg2XOdwSOLryxBfk6Ogww.crl (hash: cDDj7cwz8UZwnUeRsWjDyCgcMi5iwLA7hY03Wzlmm+Q=)
2: VLw3XZodbe23DM8NjdXfx1I1mhs.roa (hash: M0HVeYogsonT2ikAKccQSS05DNPlbJ4aCVB9InYzfwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:da:7e:a8:09:40:99:3d:a0:16:44:0e:8a:3d:a8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a192818f0a0d9739dc1238baf2c417e4e8e830c
Validity
Not Before: Dec 5 12:01:09 2023 GMT
Not After : Dec 6 12:01:09 2023 GMT
Subject: CN=bf1c6d05c80c91686f4f823f4b84f45efcf31cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ce:e2:b2:e2:68:fd:a8:77:72:6d:7f:f6:0b:
ff:6f:37:bb:8d:f8:35:1c:05:05:05:d8:92:61:4c:
14:4a:89:99:e2:f3:54:00:51:f9:10:ec:77:f4:f3:
91:73:2d:18:4b:85:f3:6f:5c:41:ce:3b:36:b5:7b:
a3:3d:57:cf:af:9f:30:ed:1d:d1:06:4c:cc:95:8c:
40:cf:e7:f9:22:fe:a5:07:a0:d2:c3:be:8e:f2:c6:
4e:c7:ef:82:b0:94:b9:07:71:92:48:5e:a4:c0:36:
2b:2b:e4:fa:f5:a3:2d:54:53:8a:df:a6:27:44:dc:
1f:b2:c7:cd:da:dc:1e:10:76:46:13:a8:4c:eb:63:
ba:3a:3a:ce:e6:08:3d:f2:6d:0c:19:8e:68:07:a7:
f4:6b:cb:f1:82:58:b3:ae:24:63:97:66:55:c1:ed:
2d:47:be:61:07:2d:f5:f3:1b:1a:ea:70:37:e5:80:
c5:a2:84:8a:d2:88:c0:85:81:5d:71:ae:5e:98:86:
f4:de:39:8b:40:9f:82:47:3b:5b:15:64:42:3d:82:
67:92:77:48:37:e3:4e:f8:8f:75:60:22:d9:e3:a7:
8f:64:9d:fc:80:12:b7:64:67:d6:35:8e:0e:d0:a1:
78:a7:4e:03:4b:81:28:07:1c:8f:c5:5c:9e:dc:99:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:6D:05:C8:0C:91:68:6F:4F:82:3F:4B:84:F4:5E:FC:F3:1C:FF
X509v3 Authority Key Identifier:
keyid:0A:19:28:18:F0:A0:D9:73:9D:C1:23:8B:AF:2C:41:7E:4E:8E:83:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChkoGPCg2XOdwSOLryxBfk6Ogww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ea3638-6981-4de8-ad82-4d62eacd95ec/1/ChkoGPCg2XOdwSOLryxBfk6Ogww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ea3638-6981-4de8-ad82-4d62eacd95ec/1/ChkoGPCg2XOdwSOLryxBfk6Ogww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:68:3f:f1:80:f9:ba:48:ca:41:c5:be:62:78:b8:18:6e:37:
1e:1f:b0:83:8e:32:f5:c6:4a:a9:88:81:e3:e4:ae:6e:d7:f4:
0c:cc:cb:79:34:47:de:5f:7f:7b:79:4a:53:24:7a:f5:4c:8e:
52:2a:b0:ff:f7:eb:4b:be:7b:7a:32:d8:c7:88:6c:46:e4:29:
2c:5b:db:a0:68:df:20:7c:1c:85:a1:1e:b0:37:2b:45:2b:96:
24:3f:34:25:b9:0d:64:07:c8:6c:b6:32:ad:41:1b:e2:0b:b8:
d4:14:ef:f0:6c:53:75:a7:aa:cd:67:41:65:44:c6:51:4b:16:
60:7a:2f:00:b3:9b:cc:82:74:fa:e1:11:50:55:4d:65:17:fa:
52:d4:f1:da:5f:45:2d:f9:41:35:b3:28:f4:4d:bd:7d:1e:96:
5e:1e:f6:8e:38:44:dc:f8:37:b9:c9:5d:e6:9a:75:de:3a:e0:
81:62:a3:c0:71:92:ae:9c:96:b0:91:54:24:d0:4d:80:85:6a:
2b:16:c1:29:52:29:4e:06:dc:8c:bf:fd:54:41:9a:d6:0b:26:
8d:64:c3:54:13:a2:27:d7:57:14:35:6b:51:f5:2e:d7:9a:3f:
12:a8:e8:f5:f3:1e:b7:58:2d:60:17:e1:e9:d9:5f:be:b2:09:
8f:94:ca:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYw52n6oCUCZPaAWRA6KPahKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMTkyODE4ZjBhMGQ5NzM5ZGMxMjM4YmFmMmM0MTdlNGU4
ZTgzMGMwHhcNMjMxMjA1MTIwMTA5WhcNMjMxMjA2MTIwMTA5WjAzMTEwLwYDVQQD
EyhiZjFjNmQwNWM4MGM5MTY4NmY0ZjgyM2Y0Yjg0ZjQ1ZWZjZjMxY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs7isuJo/ah3cm1/9gv/bze7jfg1
HAUFBdiSYUwUSomZ4vNUAFH5EOx39PORcy0YS4Xzb1xBzjs2tXujPVfPr58w7R3R
BkzMlYxAz+f5Iv6lB6DSw76O8sZOx++CsJS5B3GSSF6kwDYrK+T69aMtVFOK36Yn
RNwfssfN2tweEHZGE6hM62O6OjrO5gg98m0MGY5oB6f0a8vxglizriRjl2ZVwe0t
R75hBy318xsa6nA35YDFooSK0ojAhYFdca5emIb03jmLQJ+CRztbFWRCPYJnkndI
N+NO+I91YCLZ46ePZJ38gBK3ZGfWNY4O0KF4p04DS4EoBxyPxVye3Jmc3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8cbQXIDJFob0+CP0uE9F788xz/MB8GA1UdIwQY
MBaAFAoZKBjwoNlzncEji68sQX5OjoMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2hrb0dQQ2cyWE9kd1NPTHJ5eEJmazZPZ3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lYTM2MzgtNjk4MS00ZGU4LWFkODIt
NGQ2MmVhY2Q5NWVjLzEvQ2hrb0dQQ2cyWE9kd1NPTHJ5eEJmazZPZ3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lYTM2MzgtNjk4MS00ZGU4LWFkODItNGQ2MmVhY2Q5NWVj
LzEvQ2hrb0dQQ2cyWE9kd1NPTHJ5eEJmazZPZ3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGg/8YD5
ukjKQcW+Yni4GG43Hh+wg44y9cZKqYiB4+Subtf0DMzLeTRH3l9/e3lKUyR69UyO
Uiqw//frS757ejLYx4hsRuQpLFvboGjfIHwchaEesDcrRSuWJD80JbkNZAfIbLYy
rUEb4gu41BTv8GxTdaeqzWdBZUTGUUsWYHovALObzIJ0+uERUFVNZRf6UtTx2l9F
LflBNbMo9E29fR6WXh72jjhE3Pg3ucld5pp13jrggWKjwHGSrpyWsJFUJNBNgIVq
KxbBKVIpTgbcjL/9VEGa1gsmjWTDVBOiJ9dXFDVrUfUu15o/Eqjo9fMet1gtYBfh
6dlfvrIJj5TKSA==
-----END CERTIFICATE-----
Generated at Tue Dec 5 15:08:39 2023 by rpki-client on console-ams.rpki-client.org