Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/UXmMwUNLzoR4tq5JqgusJMXxF_w.mft
File: UXmMwUNLzoR4tq5JqgusJMXxF_w.mft (raw, json)
Hash identifier: DDHWCThyBdN09G0MSiss2MbogYt6rokFStSc01J6OFc=
Subject key identifier: 53:6E:93:61:A0:11:30:D4:15:D3:9C:96:EE:EC:19:C0:57:75:46:2F
Authority key identifier: 51:79:8C:C1:43:4B:CE:84:78:B6:AE:49:AA:0B:AC:24:C5:F1:17:FC
Certificate issuer: /CN=51798cc1434bce8478b6ae49aa0bac24c5f117fc
Certificate serial: 018BEA0742D86DF280D4DB496FFC53E4BC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXmMwUNLzoR4tq5JqgusJMXxF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/UXmMwUNLzoR4tq5JqgusJMXxF_w.mft
Manifest number: 0870
Signing time: Mon 20 Nov 2023 00:00:26 +0000
Manifest this update: Mon 20 Nov 2023 00:00:26 +0000
Manifest next update: Tue 21 Nov 2023 00:00:26 +0000
Files and hashes: 1: UXmMwUNLzoR4tq5JqgusJMXxF_w.crl (hash: jC5hXebmHPUlhR/iqOFldarkZGPNRz0FMFk2Nlejuk8=)
2: m0disnyKYb6jc4TGsz-lZHwahXM.roa (hash: Gxfgogm7uTsuxM8xkLEm60JU1mCiSxdydIOFVGLVRdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:07:42:d8:6d:f2:80:d4:db:49:6f:fc:53:e4:bc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51798cc1434bce8478b6ae49aa0bac24c5f117fc
Validity
Not Before: Nov 20 00:00:26 2023 GMT
Not After : Nov 21 00:00:26 2023 GMT
Subject: CN=536e9361a01130d415d39c96eeec19c05775462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:d3:89:7a:a2:53:25:4e:e0:48:16:39:91:
25:6f:90:2d:2f:84:bd:42:c2:fa:db:96:6a:e6:77:
68:cb:a0:d5:07:94:71:78:0d:30:73:f6:00:b8:37:
1f:9e:65:e8:ed:d3:ed:fe:2b:73:2c:e5:b1:ee:c0:
da:4e:ec:2f:e5:3e:d4:b2:38:fa:ba:ca:9e:bb:33:
df:59:27:39:e9:16:3e:1a:0d:ac:38:f3:bf:4c:4a:
a7:6f:44:2e:db:92:07:72:13:69:3d:9c:77:a8:91:
b6:12:ea:38:02:be:09:17:96:3c:a5:fc:23:12:b1:
33:d8:7c:9b:6d:d4:e8:c7:5f:85:03:f0:68:a1:bd:
29:4e:0c:77:6e:51:23:e9:86:b6:02:b3:ca:3f:50:
10:26:29:60:3c:49:13:3f:44:7e:47:45:fe:5e:75:
b1:5c:6f:db:97:81:43:df:6c:b0:e6:11:dd:ed:a2:
99:77:45:99:ac:ea:12:a9:1b:50:db:02:95:23:c7:
31:4f:ae:04:fc:f3:9c:0b:5d:b3:3d:8a:76:2e:12:
56:27:57:87:52:33:6f:f4:bb:71:dc:dd:19:03:dc:
50:20:12:d4:4b:cd:63:02:77:38:f2:a0:52:99:5d:
1d:0d:e2:01:8d:47:4b:b7:fa:5f:a5:a5:9f:66:54:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:93:61:A0:11:30:D4:15:D3:9C:96:EE:EC:19:C0:57:75:46:2F
X509v3 Authority Key Identifier:
keyid:51:79:8C:C1:43:4B:CE:84:78:B6:AE:49:AA:0B:AC:24:C5:F1:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXmMwUNLzoR4tq5JqgusJMXxF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/UXmMwUNLzoR4tq5JqgusJMXxF_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/eada0f-bcbf-4c5e-aaa2-37661770051f/1/UXmMwUNLzoR4tq5JqgusJMXxF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:77:38:83:b5:3b:1b:a4:95:0c:8d:ba:00:87:23:6c:75:93:
45:1c:30:f2:68:f3:19:e3:cb:5c:fd:30:0a:64:32:0c:56:f9:
d7:87:f2:6d:99:94:d3:f7:3b:6e:1e:6f:37:64:d1:8d:50:c1:
14:d9:74:0b:d4:47:20:00:44:51:1b:41:37:0f:c0:53:32:59:
d7:94:f7:37:80:d1:07:a0:31:96:da:ad:00:50:b7:2b:7f:98:
b9:8d:ef:82:82:f1:b4:f9:77:e0:e9:f4:7e:95:95:7b:4e:4a:
1a:ea:1f:38:b1:7d:14:17:fe:ce:47:24:3d:c0:90:cf:5f:cf:
df:c6:fd:90:89:61:de:c5:85:ca:97:58:e7:df:79:72:d6:95:
60:8c:89:23:3f:1f:e0:fa:d9:ab:5b:ee:7a:21:9d:01:b7:98:
e6:ab:4c:5a:c6:db:37:69:c6:0d:61:2f:9f:75:54:51:d7:78:
3d:48:63:41:79:a5:d8:c3:48:19:fc:24:d4:e4:bf:39:3d:1f:
e8:05:b1:d3:b5:2a:e7:45:d1:d9:16:f7:a9:c2:61:95:7e:db:
7e:3a:ef:02:56:70:ff:1f:6d:47:5a:d8:22:05:55:fd:d8:ba:
b0:5c:45:f3:49:93:4d:af:4d:ab:3f:9e:e7:98:ef:b5:16:d2:
4d:65:08:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvqB0LYbfKA1NtJb/xT5Lw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNzk4Y2MxNDM0YmNlODQ3OGI2YWU0OWFhMGJhYzI0YzVm
MTE3ZmMwHhcNMjMxMTIwMDAwMDI2WhcNMjMxMTIxMDAwMDI2WjAzMTEwLwYDVQQD
Eyg1MzZlOTM2MWEwMTEzMGQ0MTVkMzljOTZlZWVjMTljMDU3NzU0NjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl/TiXqiUyVO4EgWOZElb5AtL4S9
QsL625Zq5ndoy6DVB5RxeA0wc/YAuDcfnmXo7dPt/itzLOWx7sDaTuwv5T7Usjj6
usqeuzPfWSc56RY+Gg2sOPO/TEqnb0Qu25IHchNpPZx3qJG2Euo4Ar4JF5Y8pfwj
ErEz2HybbdTox1+FA/Boob0pTgx3blEj6Ya2ArPKP1AQJilgPEkTP0R+R0X+XnWx
XG/bl4FD32yw5hHd7aKZd0WZrOoSqRtQ2wKVI8cxT64E/POcC12zPYp2LhJWJ1eH
UjNv9Ltx3N0ZA9xQIBLUS81jAnc48qBSmV0dDeIBjUdLt/pfpaWfZlRaJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNuk2GgETDUFdOclu7sGcBXdUYvMB8GA1UdIwQY
MBaAFFF5jMFDS86EeLauSaoLrCTF8Rf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhtTXdVTkx6b1I0dHE1SnFndXNKTVh4Rl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lYWRhMGYtYmNiZi00YzVlLWFhYTIt
Mzc2NjE3NzAwNTFmLzEvVVhtTXdVTkx6b1I0dHE1SnFndXNKTVh4Rl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lYWRhMGYtYmNiZi00YzVlLWFhYTItMzc2NjE3NzAwNTFm
LzEvVVhtTXdVTkx6b1I0dHE1SnFndXNKTVh4Rl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3c4g7U7
G6SVDI26AIcjbHWTRRww8mjzGePLXP0wCmQyDFb514fybZmU0/c7bh5vN2TRjVDB
FNl0C9RHIABEURtBNw/AUzJZ15T3N4DRB6AxltqtAFC3K3+YuY3vgoLxtPl34On0
fpWVe05KGuofOLF9FBf+zkckPcCQz1/P38b9kIlh3sWFypdY5995ctaVYIyJIz8f
4PrZq1vueiGdAbeY5qtMWsbbN2nGDWEvn3VUUdd4PUhjQXml2MNIGfwk1OS/OT0f
6AWx07Uq50XR2Rb3qcJhlX7bfjrvAlZw/x9tR1rYIgVV/di6sFxF80mTTa9Nqz+e
55jvtRbSTWUIrA==
-----END CERTIFICATE-----
Generated at Mon Nov 20 09:55:33 2023 by rpki-client on console-fra.rpki-client.org