Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/842f98-230d-418a-9245-195c57a463eb/1/qmVWGsIImvhZRsgsJ7foCAVmP-s.mft
File: qmVWGsIImvhZRsgsJ7foCAVmP-s.mft (raw, json)
Hash identifier: AvQaHcZCBgYKVhcxYbVUAbMspOah4Jy/udNWZwhBsJ8=
Subject key identifier: B1:F4:E1:25:91:10:CE:6D:AF:BB:F6:63:CA:DB:04:F9:5F:93:B7:51
Authority key identifier: AA:65:56:1A:C2:08:9A:F8:59:46:C8:2C:27:B7:E8:08:05:66:3F:EB
Certificate issuer: /CN=aa65561ac2089af85946c82c27b7e80805663feb
Certificate serial: 0189D8B3B5DDD0FF59AA804206E54E07CC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmVWGsIImvhZRsgsJ7foCAVmP-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/842f98-230d-418a-9245-195c57a463eb/1/qmVWGsIImvhZRsgsJ7foCAVmP-s.mft
Manifest number: 08CB
Signing time: Wed 09 Aug 2023 05:10:03 +0000
Manifest this update: Wed 09 Aug 2023 05:10:03 +0000
Manifest next update: Thu 10 Aug 2023 05:10:03 +0000
Files and hashes: 1: iP_BFX7jlWknWTwR1lm_vAGRHXA.roa (hash: +oT7BbvzPWyvFZC65dfEdO4lSxqqDSn/7HL9WFvcQhw=)
2: qmVWGsIImvhZRsgsJ7foCAVmP-s.crl (hash: +rgkpfyoDnUhQlGXx/bEc45+0WkazvzCwMrUa/M1sKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:b3:b5:dd:d0:ff:59:aa:80:42:06:e5:4e:07:cc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65561ac2089af85946c82c27b7e80805663feb
Validity
Not Before: Aug 9 05:10:03 2023 GMT
Not After : Aug 10 05:10:03 2023 GMT
Subject: CN=b1f4e1259110ce6dafbbf663cadb04f95f93b751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:69:ac:f0:07:dc:36:f6:ee:0f:7d:60:f8:
fe:87:f0:79:5c:17:87:4e:c3:73:2a:6b:75:16:b6:
f3:1a:1e:ac:e0:ee:23:02:79:e8:51:9d:68:40:d5:
b4:24:70:f2:26:62:bf:6d:4e:a6:58:7d:e8:31:fc:
78:8f:5c:ee:44:ff:7f:99:40:ab:4b:a9:ff:79:fa:
8a:b4:c4:c2:09:e7:b7:cd:e7:19:01:e4:09:37:f5:
57:77:10:ad:cd:ac:c4:b9:ba:61:f9:9a:53:d7:54:
05:c3:f1:5e:17:f4:66:c1:97:74:9e:f4:8f:9c:5c:
8e:96:cb:d4:a4:9a:8f:b9:ab:1b:26:3e:fd:d9:61:
a6:1b:38:1a:b8:b2:de:cf:51:9d:66:ba:68:9c:cb:
4b:e8:70:bd:9b:ed:f6:38:d1:4f:bd:0d:04:64:91:
9d:dc:c0:41:5f:cd:fa:dd:8f:75:b8:9e:6a:4e:24:
7d:9d:0f:d3:b4:cf:0f:e2:47:05:7c:33:99:4a:1a:
4d:70:c1:f2:3a:bc:73:e4:90:42:d6:8d:35:65:bc:
fe:75:25:f7:e9:08:bf:60:45:7a:6b:b2:76:e8:72:
15:90:70:d0:a3:2c:b0:42:14:46:d6:d7:f6:12:c7:
e3:82:70:6c:a9:1c:4a:a8:25:72:9f:49:36:9d:07:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:E1:25:91:10:CE:6D:AF:BB:F6:63:CA:DB:04:F9:5F:93:B7:51
X509v3 Authority Key Identifier:
keyid:AA:65:56:1A:C2:08:9A:F8:59:46:C8:2C:27:B7:E8:08:05:66:3F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmVWGsIImvhZRsgsJ7foCAVmP-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/842f98-230d-418a-9245-195c57a463eb/1/qmVWGsIImvhZRsgsJ7foCAVmP-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/842f98-230d-418a-9245-195c57a463eb/1/qmVWGsIImvhZRsgsJ7foCAVmP-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:5b:a8:ba:0f:5f:06:2f:6b:0e:07:5f:a6:f8:8c:04:bc:
80:bc:24:c6:1a:7c:9d:2d:19:84:c7:85:dd:e4:f5:43:4a:b1:
41:00:64:fd:e3:7c:27:5c:d2:af:c6:73:84:a1:85:c4:b4:d8:
bd:2e:21:3d:61:e9:3d:20:7d:3a:52:b7:a5:27:ec:08:48:62:
6e:be:d2:ab:90:c6:19:fb:57:6b:ba:4b:52:53:68:5a:0c:97:
c9:79:43:be:f4:c9:55:d7:da:7c:b0:56:39:67:1a:29:09:a8:
2e:1c:a3:26:bf:ef:18:e9:7a:96:bf:df:ee:57:1e:5f:16:c5:
a2:56:f5:60:9f:cb:df:ba:96:90:4b:d1:c7:c9:35:73:44:a9:
b4:fc:09:74:fa:fe:7c:51:6d:eb:8c:9d:ea:91:00:6f:d1:37:
89:67:1c:81:1f:9d:8d:4a:5a:89:0b:0a:dc:c8:53:2a:6a:a3:
d0:25:74:cf:0c:66:4f:fc:f1:31:ef:4a:5b:8a:5b:84:e3:a0:
cd:46:04:54:4b:65:e3:5f:21:bd:83:61:18:d6:e8:de:fc:a2:
8e:56:c8:65:70:67:78:68:cc:40:5a:cd:c1:af:a3:6f:40:6c:
48:67:84:cb:e8:79:23:f2:24:a5:ef:6b:56:c2:9c:86:8b:9f:
c9:2a:08:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnYs7Xd0P9ZqoBCBuVOB8xaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjU1NjFhYzIwODlhZjg1OTQ2YzgyYzI3YjdlODA4MDU2
NjNmZWIwHhcNMjMwODA5MDUxMDAzWhcNMjMwODEwMDUxMDAzWjAzMTEwLwYDVQQD
EyhiMWY0ZTEyNTkxMTBjZTZkYWZiYmY2NjNjYWRiMDRmOTVmOTNiNzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8hprPAH3Db27g99YPj+h/B5XBeH
TsNzKmt1FrbzGh6s4O4jAnnoUZ1oQNW0JHDyJmK/bU6mWH3oMfx4j1zuRP9/mUCr
S6n/efqKtMTCCee3zecZAeQJN/VXdxCtzazEubph+ZpT11QFw/FeF/RmwZd0nvSP
nFyOlsvUpJqPuasbJj792WGmGzgauLLez1GdZrponMtL6HC9m+32ONFPvQ0EZJGd
3MBBX8363Y91uJ5qTiR9nQ/TtM8P4kcFfDOZShpNcMHyOrxz5JBC1o01Zbz+dSX3
6Qi/YEV6a7J26HIVkHDQoyywQhRG1tf2EsfjgnBsqRxKqCVyn0k2nQf3nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH04SWREM5tr7v2Y8rbBPlfk7dRMB8GA1UdIwQY
MBaAFKplVhrCCJr4WUbILCe36AgFZj/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1WV0dzSUltdmhaUnNnc0o3Zm9DQVZtUC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84NDJmOTgtMjMwZC00MThhLTkyNDUt
MTk1YzU3YTQ2M2ViLzEvcW1WV0dzSUltdmhaUnNnc0o3Zm9DQVZtUC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS84NDJmOTgtMjMwZC00MThhLTkyNDUtMTk1YzU3YTQ2M2Vi
LzEvcW1WV0dzSUltdmhaUnNnc0o3Zm9DQVZtUC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwlbqLoP
XwYvaw4HX6b4jAS8gLwkxhp8nS0ZhMeF3eT1Q0qxQQBk/eN8J1zSr8ZzhKGFxLTY
vS4hPWHpPSB9OlK3pSfsCEhibr7Sq5DGGftXa7pLUlNoWgyXyXlDvvTJVdfafLBW
OWcaKQmoLhyjJr/vGOl6lr/f7lceXxbFolb1YJ/L37qWkEvRx8k1c0SptPwJdPr+
fFFt64yd6pEAb9E3iWccgR+djUpaiQsK3MhTKmqj0CV0zwxmT/zxMe9KW4pbhOOg
zUYEVEtl418hvYNhGNbo3vyijlbIZXBneGjMQFrNwa+jb0BsSGeEy+h5I/Ikpe9r
VsKchoufySoIRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:50 2024 by rpki-client on console-ams.rpki-client.org