Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/745d47-a2f1-4e79-bb4a-2fcb511851b1/1/bS3TVw5X05nUpu8qUTebzDz_nd8.mft
File: bS3TVw5X05nUpu8qUTebzDz_nd8.mft (raw, json)
Hash identifier: apPcTuSsspJ6q8Q859WOyVHmlh0+AFUAwQwniYoJsTw=
Subject key identifier: 90:F2:68:87:80:AD:1F:35:FF:25:0D:F6:3A:1F:B2:BC:29:3C:7E:42
Authority key identifier: 6D:2D:D3:57:0E:57:D3:99:D4:A6:EF:2A:51:37:9B:CC:3C:FF:9D:DF
Certificate issuer: /CN=6d2dd3570e57d399d4a6ef2a51379bcc3cff9ddf
Certificate serial: 0184983AD8D26A01F3D2476706A2F62B80EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS3TVw5X05nUpu8qUTebzDz_nd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/745d47-a2f1-4e79-bb4a-2fcb511851b1/1/bS3TVw5X05nUpu8qUTebzDz_nd8.mft
Manifest number: 5E
Signing time: Mon 21 Nov 2022 03:28:24 +0000
Manifest this update: Mon 21 Nov 2022 03:28:24 +0000
Manifest next update: Tue 22 Nov 2022 03:28:24 +0000
Files and hashes: 1: SNosd2kg6fGR5chiiTyQcLKLbqA.roa (hash: a3aQpjEBH+eFNl87SemCWlC64L14XsZfjjNk6PrhTBQ=)
2: bS3TVw5X05nUpu8qUTebzDz_nd8.crl (hash: P0VYLrjC1zH7Lr5UWpfp87uMica9CbpzQqsrr4eajlw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:98:3a:d8:d2:6a:01:f3:d2:47:67:06:a2:f6:2b:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2dd3570e57d399d4a6ef2a51379bcc3cff9ddf
Validity
Not Before: Nov 21 03:28:24 2022 GMT
Not After : Nov 22 03:28:24 2022 GMT
Subject: CN=90f2688780ad1f35ff250df63a1fb2bc293c7e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:6c:0b:41:04:32:52:55:bf:44:9b:75:05:
18:f7:a9:d7:a5:e6:00:ba:d0:74:e8:c6:63:72:15:
8a:a6:fd:2a:6d:de:6b:1b:10:cd:41:63:c0:ce:73:
a4:1c:ba:44:68:0c:a4:87:2b:45:a7:9a:5f:b5:ff:
2b:39:2e:7d:ba:61:ed:ca:40:78:f3:26:4f:e0:93:
47:6b:9c:d0:96:92:3b:2e:17:a9:26:b5:b1:33:90:
5b:88:c0:74:3e:34:da:d7:e7:5d:35:91:aa:e3:4b:
14:6b:6c:69:60:b7:2f:f8:b4:00:f2:ef:c2:3a:7e:
86:87:07:f8:59:f5:d1:87:f5:5c:51:ce:58:eb:ee:
67:91:51:18:24:08:be:8f:86:05:32:d9:be:bf:0b:
75:36:af:5b:16:26:33:33:93:65:ed:39:e5:8e:de:
d2:ed:7a:cc:1a:fc:68:4d:d9:c7:23:b5:26:3b:33:
18:c6:01:ef:fc:bd:bd:ad:8f:60:83:61:05:e2:bc:
ef:fc:d5:5e:a5:04:d9:ef:64:c9:d4:57:0c:20:28:
4f:38:41:aa:b6:80:cc:c7:e7:04:42:50:57:44:06:
23:46:2b:47:b6:ab:4e:7d:2f:a9:67:b4:65:2e:52:
e4:84:dc:56:38:36:fe:8e:7e:21:d0:c9:26:65:e3:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F2:68:87:80:AD:1F:35:FF:25:0D:F6:3A:1F:B2:BC:29:3C:7E:42
X509v3 Authority Key Identifier:
keyid:6D:2D:D3:57:0E:57:D3:99:D4:A6:EF:2A:51:37:9B:CC:3C:FF:9D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS3TVw5X05nUpu8qUTebzDz_nd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/745d47-a2f1-4e79-bb4a-2fcb511851b1/1/bS3TVw5X05nUpu8qUTebzDz_nd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/745d47-a2f1-4e79-bb4a-2fcb511851b1/1/bS3TVw5X05nUpu8qUTebzDz_nd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c0:4c:c5:01:18:21:cd:e7:fd:50:88:53:f5:82:b3:42:15:
df:8f:32:ab:fa:99:02:80:c1:2e:a0:f9:95:75:f3:93:38:84:
2b:e1:dc:83:9a:a7:89:86:28:24:45:2f:53:15:41:c1:76:57:
c5:41:44:46:a6:67:e7:2a:17:0b:b1:69:31:29:e3:85:37:d0:
71:d0:98:d9:7e:b9:37:a8:f6:93:94:4b:54:d2:73:f9:6e:57:
8b:53:60:90:23:5e:78:61:21:b7:2c:3e:43:36:72:5d:34:07:
41:5a:b1:35:c7:51:97:67:09:b3:d3:64:dc:9a:34:d2:8f:a2:
2e:a9:a4:73:78:17:7e:7e:a4:5b:13:ce:e1:24:8e:ab:21:9c:
d4:2d:96:48:3e:27:b4:d2:d5:aa:ea:4c:da:30:64:22:ed:a3:
2b:c0:4d:a4:b1:7d:46:f5:b2:85:f4:fa:52:93:8f:96:3e:3b:
8f:6d:3c:d9:5e:0c:0d:09:f9:15:c3:7a:4c:c5:85:01:af:d4:
3c:55:66:81:13:ca:88:04:df:f4:fb:2c:ae:31:f3:a9:12:39:
c6:41:08:d8:41:d0:fc:20:3f:a2:81:6d:fa:aa:d0:d4:6d:d9:
19:6f:a4:7a:36:bd:bc:0f:dd:4c:2f:46:dc:4e:8d:31:56:6c:
12:f0:f5:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYSYOtjSagHz0kdnBqL2K4DvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmRkMzU3MGU1N2QzOTlkNGE2ZWYyYTUxMzc5YmNjM2Nm
ZjlkZGYwHhcNMjIxMTIxMDMyODI0WhcNMjIxMTIyMDMyODI0WjAzMTEwLwYDVQQD
Eyg5MGYyNjg4NzgwYWQxZjM1ZmYyNTBkZjYzYTFmYjJiYzI5M2M3ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaJsC0EEMlJVv0SbdQUY96nXpeYA
utB06MZjchWKpv0qbd5rGxDNQWPAznOkHLpEaAykhytFp5pftf8rOS59umHtykB4
8yZP4JNHa5zQlpI7LhepJrWxM5BbiMB0PjTa1+ddNZGq40sUa2xpYLcv+LQA8u/C
On6Ghwf4WfXRh/VcUc5Y6+5nkVEYJAi+j4YFMtm+vwt1Nq9bFiYzM5Nl7Tnljt7S
7XrMGvxoTdnHI7UmOzMYxgHv/L29rY9gg2EF4rzv/NVepQTZ72TJ1FcMIChPOEGq
toDMx+cEQlBXRAYjRitHtqtOfS+pZ7RlLlLkhNxWODb+jn4h0MkmZeNDCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDyaIeArR81/yUN9jofsrwpPH5CMB8GA1UdIwQY
MBaAFG0t01cOV9OZ1KbvKlE3m8w8/53fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlMzVFZ3NVgwNW5VcHU4cVVUZWJ6RHpfbmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NDVkNDctYTJmMS00ZTc5LWJiNGEt
MmZjYjUxMTg1MWIxLzEvYlMzVFZ3NVgwNW5VcHU4cVVUZWJ6RHpfbmQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NDVkNDctYTJmMS00ZTc5LWJiNGEtMmZjYjUxMTg1MWIx
LzEvYlMzVFZ3NVgwNW5VcHU4cVVUZWJ6RHpfbmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcBMxQEY
Ic3n/VCIU/WCs0IV348yq/qZAoDBLqD5lXXzkziEK+Hcg5qniYYoJEUvUxVBwXZX
xUFERqZn5yoXC7FpMSnjhTfQcdCY2X65N6j2k5RLVNJz+W5Xi1NgkCNeeGEhtyw+
QzZyXTQHQVqxNcdRl2cJs9Nk3Jo00o+iLqmkc3gXfn6kWxPO4SSOqyGc1C2WSD4n
tNLVqupM2jBkIu2jK8BNpLF9RvWyhfT6UpOPlj47j2082V4MDQn5FcN6TMWFAa/U
PFVmgRPKiATf9PssrjHzqRI5xkEI2EHQ/CA/ooFt+qrQ1G3ZGW+keja9vA/dTC9G
3E6NMVZsEvD1HA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:37 2025 by rpki-client