Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/CqRmf8UBNS--0X5HFoxGh9d1Yj8.mft
File: CqRmf8UBNS--0X5HFoxGh9d1Yj8.mft (raw, json)
Hash identifier: pnWGTMofqcSc8pnJ8eD1Tle7cAa7mw3oXx8J0IpEpYE=
Subject key identifier: 27:70:89:7E:2D:97:63:AD:E0:62:38:AA:2B:2E:20:B6:F3:00:29:AD
Authority key identifier: 0A:A4:66:7F:C5:01:35:2F:BE:D1:7E:47:16:8C:46:87:D7:75:62:3F
Certificate issuer: /CN=0aa4667fc501352fbed17e47168c4687d775623f
Certificate serial: 0189D2DF715C7CE4548DCAB1583CA15B5D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqRmf8UBNS--0X5HFoxGh9d1Yj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/CqRmf8UBNS--0X5HFoxGh9d1Yj8.mft
Manifest number: 0852
Signing time: Tue 08 Aug 2023 02:00:06 +0000
Manifest this update: Tue 08 Aug 2023 02:00:06 +0000
Manifest next update: Wed 09 Aug 2023 02:00:06 +0000
Files and hashes: 1: CqRmf8UBNS--0X5HFoxGh9d1Yj8.crl (hash: fr8nlWUeQepc+zlBw3MK28CyvQrK/B7UxPfsaFq1ltY=)
2: nHrM02aOl7np7HTV5CMPoVNAWkM.roa (hash: 4NP6IapzNt08D0fFT9F7OdNfYH2636EIT1La1znem/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d2:df:71:5c:7c:e4:54:8d:ca:b1:58:3c:a1:5b:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa4667fc501352fbed17e47168c4687d775623f
Validity
Not Before: Aug 8 02:00:06 2023 GMT
Not After : Aug 9 02:00:06 2023 GMT
Subject: CN=2770897e2d9763ade06238aa2b2e20b6f30029ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:e9:49:6c:b9:e5:6a:29:b4:0a:1b:3b:cc:
68:09:71:0e:5a:16:96:b5:fb:d2:e0:d7:0a:99:fe:
f8:cc:e2:04:8b:28:c9:70:db:f2:ca:dd:18:9f:07:
2e:97:10:44:64:e6:9c:5f:f3:a2:02:eb:10:ac:ec:
36:00:74:5e:73:a5:26:b9:e5:79:c1:50:61:ff:e1:
ce:bf:c8:43:c8:ba:68:4d:98:e2:90:68:e8:40:fb:
50:ce:42:8d:6e:77:c2:9a:d0:51:ed:66:ea:e1:16:
33:eb:46:2a:a7:11:a8:8a:54:b1:5d:9e:51:c8:37:
a1:b4:16:2a:18:45:14:44:52:fb:a0:4d:53:53:0c:
be:6f:f5:a3:76:75:37:c7:c9:ad:6f:d1:ce:f5:3f:
58:bf:46:e7:95:56:ff:89:82:3c:f5:5a:1e:47:86:
0c:0c:bf:88:54:e1:8d:3a:2e:8c:0b:53:5a:c3:c1:
33:8b:a8:c9:b9:a6:1c:d8:86:3c:3d:63:00:47:6e:
71:44:af:0a:3a:4d:e6:20:15:a5:5c:2d:f8:0e:bc:
8f:15:8d:1f:c3:8a:1f:0e:d0:21:e6:ed:ec:60:74:
e9:42:29:39:e3:42:d1:73:d0:fa:06:ad:05:1f:37:
f5:b7:8d:54:a6:be:db:0b:8f:2a:bf:a6:56:60:06:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:70:89:7E:2D:97:63:AD:E0:62:38:AA:2B:2E:20:B6:F3:00:29:AD
X509v3 Authority Key Identifier:
keyid:0A:A4:66:7F:C5:01:35:2F:BE:D1:7E:47:16:8C:46:87:D7:75:62:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqRmf8UBNS--0X5HFoxGh9d1Yj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/CqRmf8UBNS--0X5HFoxGh9d1Yj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/CqRmf8UBNS--0X5HFoxGh9d1Yj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e1:3a:8d:da:2b:93:19:fb:0f:a9:50:ee:e3:e8:ed:f8:2a:
a2:3c:35:ea:ff:5c:a6:3e:14:34:0e:29:45:a2:a8:d0:55:a9:
6e:58:a6:42:ba:91:dc:ad:c9:27:60:2f:ca:7f:bc:19:0e:a5:
09:1b:57:4f:39:95:93:2b:70:4f:c9:78:ab:64:7a:d2:fe:af:
e0:6c:50:27:23:d8:de:53:a6:c0:e9:02:fd:17:f2:9a:35:ae:
36:98:70:79:43:ca:72:d5:e7:87:0a:13:59:16:b9:3e:a3:5f:
69:1f:ea:ae:ab:25:d9:5f:5b:bc:f3:86:fc:fc:37:37:85:a2:
52:60:7b:6f:c3:4d:17:27:ca:88:4a:ee:88:0d:a4:ab:a3:29:
99:1e:bf:02:5c:92:03:f1:99:43:41:fb:fc:20:9f:df:d7:fc:
66:2d:f3:f8:88:93:c3:01:ee:1c:5a:5f:ea:8e:78:97:44:4b:
f0:6e:bc:bd:17:1c:4d:e1:55:22:bb:a4:6b:89:12:ef:06:2f:
5a:74:4a:b4:56:fe:1a:60:a7:e8:c8:ca:c1:89:b1:4e:ca:e5:
1d:76:39:42:c0:a6:7d:9d:02:1f:af:b2:1e:95:89:ae:6f:86:
bd:53:a7:a4:8c:cf:c3:7b:ad:21:0c:67:b7:1f:47:37:57:9f:
e7:35:a6:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnS33FcfORUjcqxWDyhW118MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTQ2NjdmYzUwMTM1MmZiZWQxN2U0NzE2OGM0Njg3ZDc3
NTYyM2YwHhcNMjMwODA4MDIwMDA2WhcNMjMwODA5MDIwMDA2WjAzMTEwLwYDVQQD
EygyNzcwODk3ZTJkOTc2M2FkZTA2MjM4YWEyYjJlMjBiNmYzMDAyOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h7pSWy55WoptAobO8xoCXEOWhaW
tfvS4NcKmf74zOIEiyjJcNvyyt0YnwculxBEZOacX/OiAusQrOw2AHRec6UmueV5
wVBh/+HOv8hDyLpoTZjikGjoQPtQzkKNbnfCmtBR7Wbq4RYz60YqpxGoilSxXZ5R
yDehtBYqGEUURFL7oE1TUwy+b/WjdnU3x8mtb9HO9T9Yv0bnlVb/iYI89VoeR4YM
DL+IVOGNOi6MC1Naw8Ezi6jJuaYc2IY8PWMAR25xRK8KOk3mIBWlXC34DryPFY0f
w4ofDtAh5u3sYHTpQik540LRc9D6Bq0FHzf1t41Upr7bC48qv6ZWYAYyMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdwiX4tl2Ot4GI4qisuILbzACmtMB8GA1UdIwQY
MBaAFAqkZn/FATUvvtF+RxaMRofXdWI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FSbWY4VUJOUy0tMFg1SEZveEdoOWQxWWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iNDFmNjMtNjViOS00MDNiLWEwNjct
NDAyMGE0ODk4M2IzLzEvQ3FSbWY4VUJOUy0tMFg1SEZveEdoOWQxWWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iNDFmNjMtNjViOS00MDNiLWEwNjctNDAyMGE0ODk4M2Iz
LzEvQ3FSbWY4VUJOUy0tMFg1SEZveEdoOWQxWWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauE6jdor
kxn7D6lQ7uPo7fgqojw16v9cpj4UNA4pRaKo0FWpblimQrqR3K3JJ2Avyn+8GQ6l
CRtXTzmVkytwT8l4q2R60v6v4GxQJyPY3lOmwOkC/RfymjWuNphweUPKctXnhwoT
WRa5PqNfaR/qrqsl2V9bvPOG/Pw3N4WiUmB7b8NNFyfKiEruiA2kq6MpmR6/AlyS
A/GZQ0H7/CCf39f8Zi3z+IiTwwHuHFpf6o54l0RL8G68vRccTeFVIruka4kS7wYv
WnRKtFb+GmCn6MjKwYmxTsrlHXY5QsCmfZ0CH6+yHpWJrm+GvVOnpIzPw3utIQxn
tx9HN1ef5zWmjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:27 2024 by rpki-client on console-ams.rpki-client.org