Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/5rpGwUKrunj-GSV6h0qjOgiE1po.mft
File: 5rpGwUKrunj-GSV6h0qjOgiE1po.mft (raw, json)
Hash identifier: y53A5J1ZaIbxNKP9D4LgyRoSCfyhNDq4BZuuYvJtqHM=
Subject key identifier: F4:40:59:C6:5B:DE:C6:A0:C5:E1:1D:CB:B2:3F:02:7D:8B:33:BD:4B
Authority key identifier: E6:BA:46:C1:42:AB:BA:78:FE:19:25:7A:87:4A:A3:3A:08:84:D6:9A
Certificate issuer: /CN=e6ba46c142abba78fe19257a874aa33a0884d69a
Certificate serial: 018B8F0C35AC8EAD5B10C306D3DDE15A00A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5rpGwUKrunj-GSV6h0qjOgiE1po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/5rpGwUKrunj-GSV6h0qjOgiE1po.mft
Manifest number: 0894
Signing time: Thu 02 Nov 2023 08:00:23 +0000
Manifest this update: Thu 02 Nov 2023 08:00:23 +0000
Manifest next update: Fri 03 Nov 2023 08:00:23 +0000
Files and hashes: 1: 5rpGwUKrunj-GSV6h0qjOgiE1po.crl (hash: kgAo+6hDz+hFiwKOkzjDgMpV4X1EFQA2Y0CHWY+RHhw=)
2: Lky1oDslSpB0MKwqMYY1S9K-HFU.roa (hash: gaCODgKlBFZENiYxlwwxt+10CgzaxLTOFO9zvEO6XWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:0c:35:ac:8e:ad:5b:10:c3:06:d3:dd:e1:5a:00:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ba46c142abba78fe19257a874aa33a0884d69a
Validity
Not Before: Nov 2 08:00:23 2023 GMT
Not After : Nov 3 08:00:23 2023 GMT
Subject: CN=f44059c65bdec6a0c5e11dcbb23f027d8b33bd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:cb:99:d1:b1:4c:d5:de:33:bd:f4:9b:50:
ed:a9:98:6b:35:07:c9:a7:8e:77:49:78:b2:b3:96:
55:4c:e0:c0:4a:53:fd:bc:b2:87:8b:9c:83:4f:d9:
7d:f1:a5:66:87:8e:7d:16:d6:58:59:66:f9:c6:15:
91:e7:85:b3:77:e8:f7:60:b9:66:bd:70:df:71:0c:
a6:42:bf:20:a0:37:25:3c:50:b0:41:cb:d5:d6:0d:
03:16:52:25:56:49:b1:71:c4:88:1b:1c:0e:9a:87:
bd:d2:e2:87:b9:c7:72:66:4e:de:1f:bc:10:29:d8:
4a:86:f7:43:43:48:ab:ae:33:fb:69:67:ec:dd:e1:
78:87:d8:7d:82:36:73:2f:f0:15:6e:cc:83:f4:8c:
17:c1:c4:35:b6:96:68:d1:12:a8:ec:7c:53:40:48:
6e:34:d4:4e:f0:23:e2:cc:a5:4f:0b:16:2b:08:73:
68:28:d0:93:3c:50:31:67:82:de:1c:2a:89:61:17:
7b:79:f4:42:a6:2e:44:32:95:01:3c:fe:50:bc:e8:
f7:1f:4c:1a:5a:0b:98:b5:37:98:25:39:0b:01:be:
da:ec:12:db:10:9e:af:b1:29:ec:99:a7:5b:16:0b:
2b:0d:47:6c:f1:20:ca:25:dd:2d:ce:ba:27:60:df:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:40:59:C6:5B:DE:C6:A0:C5:E1:1D:CB:B2:3F:02:7D:8B:33:BD:4B
X509v3 Authority Key Identifier:
keyid:E6:BA:46:C1:42:AB:BA:78:FE:19:25:7A:87:4A:A3:3A:08:84:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rpGwUKrunj-GSV6h0qjOgiE1po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/5rpGwUKrunj-GSV6h0qjOgiE1po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/23b1c6-4add-4b62-80f3-3d4c6b64f986/1/5rpGwUKrunj-GSV6h0qjOgiE1po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:87:dd:3a:af:65:3b:e5:a5:c7:0d:17:91:a3:ae:b3:32:6d:
a6:d2:8a:5e:3f:4c:a5:70:4a:72:83:ba:cf:4a:f7:ee:3e:44:
53:42:0c:04:f3:84:ab:e0:cf:c3:b4:da:f3:60:50:f1:9c:1e:
7f:fb:6b:fa:d1:c5:26:60:f0:f7:ba:34:a9:34:82:48:bf:39:
3e:a2:2f:50:15:51:b2:81:97:b6:27:1d:b4:40:31:7c:62:91:
3f:e2:0f:5c:29:41:b0:b6:db:62:f4:67:9a:e9:8c:b0:1f:e5:
73:8e:ea:97:3c:56:3a:9a:1c:88:1e:f8:1b:5a:81:2d:2a:ba:
57:88:48:a6:3f:5b:ec:92:4a:a2:49:64:a9:6d:f2:1e:44:67:
30:c4:1b:6b:82:98:54:67:55:d9:3b:5f:6d:92:10:1b:e0:fd:
cc:93:0e:64:2e:f7:3e:f9:98:b8:a9:a7:f9:80:69:be:e3:7a:
f5:e2:1e:0a:9b:d2:02:33:ef:c5:f5:74:2d:48:50:3f:45:9f:
8d:11:0f:66:8a:fb:e3:fe:3e:db:7f:46:ee:90:00:e9:f8:1e:
9f:ba:36:25:26:f3:36:99:24:a3:c3:ca:23:03:15:b4:65:44:
b3:d2:eb:97:75:de:05:b8:4b:ef:98:a6:73:84:24:8f:5f:37:
b5:ce:4c:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuPDDWsjq1bEMMG093hWgCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YmE0NmMxNDJhYmJhNzhmZTE5MjU3YTg3NGFhMzNhMDg4
NGQ2OWEwHhcNMjMxMTAyMDgwMDIzWhcNMjMxMTAzMDgwMDIzWjAzMTEwLwYDVQQD
EyhmNDQwNTljNjViZGVjNmEwYzVlMTFkY2JiMjNmMDI3ZDhiMzNiZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQHLmdGxTNXeM730m1DtqZhrNQfJ
p453SXiys5ZVTODASlP9vLKHi5yDT9l98aVmh459FtZYWWb5xhWR54Wzd+j3YLlm
vXDfcQymQr8goDclPFCwQcvV1g0DFlIlVkmxccSIGxwOmoe90uKHucdyZk7eH7wQ
KdhKhvdDQ0irrjP7aWfs3eF4h9h9gjZzL/AVbsyD9IwXwcQ1tpZo0RKo7HxTQEhu
NNRO8CPizKVPCxYrCHNoKNCTPFAxZ4LeHCqJYRd7efRCpi5EMpUBPP5QvOj3H0wa
WguYtTeYJTkLAb7a7BLbEJ6vsSnsmadbFgsrDUds8SDKJd0tzronYN9Z2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRAWcZb3sagxeEdy7I/An2LM71LMB8GA1UdIwQY
MBaAFOa6RsFCq7p4/hkleodKozoIhNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXJwR3dVS3J1bmotR1NWNmgwcWpPZ2lFMXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yM2IxYzYtNGFkZC00YjYyLTgwZjMt
M2Q0YzZiNjRmOTg2LzEvNXJwR3dVS3J1bmotR1NWNmgwcWpPZ2lFMXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yM2IxYzYtNGFkZC00YjYyLTgwZjMtM2Q0YzZiNjRmOTg2
LzEvNXJwR3dVS3J1bmotR1NWNmgwcWpPZ2lFMXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4fdOq9l
O+Wlxw0XkaOuszJtptKKXj9MpXBKcoO6z0r37j5EU0IMBPOEq+DPw7Ta82BQ8Zwe
f/tr+tHFJmDw97o0qTSCSL85PqIvUBVRsoGXticdtEAxfGKRP+IPXClBsLbbYvRn
mumMsB/lc47qlzxWOpociB74G1qBLSq6V4hIpj9b7JJKoklkqW3yHkRnMMQba4KY
VGdV2TtfbZIQG+D9zJMOZC73PvmYuKmn+YBpvuN69eIeCpvSAjPvxfV0LUhQP0Wf
jREPZor74/4+239G7pAA6fgen7o2JSbzNpkko8PKIwMVtGVEs9Lrl3XeBbhL75im
c4Qkj183tc5MDA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:11 2025 by rpki-client