Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.mft
File: X5CYFOiG1sCZupCYJVl_5FeSQ8Y.mft (raw, json)
Hash identifier: 4qlJh57JVUkhnh/ESQsRLht9Lp0IuEJpXtLeafjEzGw=
Subject key identifier: 99:DC:18:97:41:33:59:C4:FE:73:79:51:71:24:E3:8F:D4:D6:7B:B8
Authority key identifier: 5F:90:98:14:E8:86:D6:C0:99:BA:90:98:25:59:7F:E4:57:92:43:C6
Certificate issuer: /CN=5f909814e886d6c099ba909825597fe4579243c6
Certificate serial: 0186EE38C1FD1209513F4B0E1115DF221A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.mft
Manifest number: 0920
Signing time: Fri 17 Mar 2023 06:19:02 +0000
Manifest this update: Fri 17 Mar 2023 06:19:02 +0000
Manifest next update: Sat 18 Mar 2023 06:19:02 +0000
Files and hashes: 1: X5CYFOiG1sCZupCYJVl_5FeSQ8Y.crl (hash: xJbIkx6jKh0+9li4E01lpbPX56B0jadtP6Zawb8UJHk=)
2: nDqIyOOvsDeAzfFCiAngUR_oqNg.roa (hash: Lar18pWDEVCbnfW4UfG49lws71CK0zcG1AWnx1ZSTMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:38:c1:fd:12:09:51:3f:4b:0e:11:15:df:22:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f909814e886d6c099ba909825597fe4579243c6
Validity
Not Before: Mar 17 06:19:02 2023 GMT
Not After : Mar 18 06:19:02 2023 GMT
Subject: CN=99dc1897413359c4fe7379517124e38fd4d67bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:e7:04:eb:27:8f:b8:6a:8c:9d:41:99:23:
e6:67:dc:c0:ce:05:3f:d7:78:89:3e:a2:7c:aa:58:
8c:40:a5:ff:7c:eb:7e:ee:01:68:31:7b:c2:00:3e:
d5:96:12:7a:41:52:23:88:89:20:6b:fb:0d:b0:ff:
e6:97:61:0a:db:61:96:d0:6a:b7:41:ee:f4:17:06:
81:1a:19:fc:e0:82:e5:e2:3d:c8:ee:74:d9:3b:3e:
0f:d2:90:cc:29:a7:ef:18:55:92:c6:fc:00:1a:0a:
d4:0c:bc:4e:6c:94:d5:c5:10:c4:29:05:a2:71:c9:
80:7e:5b:7f:8e:ea:ac:b2:7b:1e:27:b7:90:f6:65:
9b:85:ab:f9:16:a9:2d:74:f0:a3:bc:94:ce:ea:7b:
d5:21:72:f7:e9:60:b7:7e:2d:ed:97:93:b2:65:73:
db:c8:61:5c:27:13:35:35:89:5d:df:bf:4d:a5:91:
89:b0:4f:40:34:bd:b9:13:78:c3:7d:c7:5a:c6:e7:
97:1a:f8:37:59:e7:e3:f7:6d:c4:10:e3:60:23:a5:
59:2f:c5:dc:61:94:85:b6:59:69:b2:ee:78:92:05:
90:a1:2f:a9:98:18:fe:82:9d:ef:00:43:eb:ae:8e:
6d:70:05:1e:e5:5b:1d:e7:17:29:15:6a:49:01:25:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DC:18:97:41:33:59:C4:FE:73:79:51:71:24:E3:8F:D4:D6:7B:B8
X509v3 Authority Key Identifier:
keyid:5F:90:98:14:E8:86:D6:C0:99:BA:90:98:25:59:7F:E4:57:92:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3289cc-2d41-4be3-8ccb-4bdce352594b/1/X5CYFOiG1sCZupCYJVl_5FeSQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:16:5b:bd:e1:36:96:84:05:97:cc:6c:e8:2f:1a:8f:11:41:
11:1d:aa:df:41:dc:75:87:c4:ee:7a:ad:63:ab:7d:8e:e7:a9:
11:60:f9:85:5c:49:6a:0c:5a:2c:3c:35:e1:89:7f:e6:8a:57:
bb:17:41:2f:bb:90:15:fe:c2:61:16:e3:b1:2e:45:6f:a1:5e:
bc:86:a2:59:f4:fc:f8:51:32:47:50:9b:96:56:00:b5:49:45:
31:08:92:f2:50:fd:68:44:64:5c:de:8a:39:aa:4f:70:55:7a:
23:c2:73:f7:77:c1:c0:eb:91:70:3d:a5:2c:e7:0f:d8:f5:ff:
e8:6b:cc:42:fc:fa:9f:6e:ba:22:87:21:92:c6:2a:c8:c4:23:
8c:07:49:e2:26:32:b0:8c:f5:c5:06:59:6e:bf:28:1a:9a:57:
84:b0:ca:9b:e0:e3:91:68:b7:3f:7e:e8:07:0a:53:52:98:d0:
90:bb:7c:1a:2c:15:5c:92:3a:ea:03:a4:76:92:b3:36:05:35:
df:b8:8f:e3:c9:4e:26:27:87:2d:57:0c:c5:ee:cf:5b:cd:fd:
86:c6:59:8c:18:32:65:33:8e:a7:65:0a:19:84:8a:7d:7a:84:
98:8c:5e:40:c0:92:80:0f:71:3b:3b:4f:bd:61:d0:d1:70:b0:
91:dd:71:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYbuOMH9EglRP0sOERXfIhohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTA5ODE0ZTg4NmQ2YzA5OWJhOTA5ODI1NTk3ZmU0NTc5
MjQzYzYwHhcNMjMwMzE3MDYxOTAyWhcNMjMwMzE4MDYxOTAyWjAzMTEwLwYDVQQD
Eyg5OWRjMTg5NzQxMzM1OWM0ZmU3Mzc5NTE3MTI0ZTM4ZmQ0ZDY3YmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXznBOsnj7hqjJ1BmSPmZ9zAzgU/
13iJPqJ8qliMQKX/fOt+7gFoMXvCAD7VlhJ6QVIjiIkga/sNsP/ml2EK22GW0Gq3
Qe70FwaBGhn84ILl4j3I7nTZOz4P0pDMKafvGFWSxvwAGgrUDLxObJTVxRDEKQWi
ccmAflt/juqssnseJ7eQ9mWbhav5FqktdPCjvJTO6nvVIXL36WC3fi3tl5OyZXPb
yGFcJxM1NYld379NpZGJsE9ANL25E3jDfcdaxueXGvg3Wefj923EEONgI6VZL8Xc
YZSFtllpsu54kgWQoS+pmBj+gp3vAEPrro5tcAUe5Vsd5xcpFWpJASWC0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJncGJdBM1nE/nN5UXEk44/U1nu4MB8GA1UdIwQY
MBaAFF+QmBTohtbAmbqQmCVZf+RXkkPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVDWUZPaUcxc0NadXBDWUpWbF81RmVTUThZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMjg5Y2MtMmQ0MS00YmUzLThjY2It
NGJkY2UzNTI1OTRiLzEvWDVDWUZPaUcxc0NadXBDWUpWbF81RmVTUThZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMjg5Y2MtMmQ0MS00YmUzLThjY2ItNGJkY2UzNTI1OTRi
LzEvWDVDWUZPaUcxc0NadXBDWUpWbF81RmVTUThZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBZbveE2
loQFl8xs6C8ajxFBER2q30HcdYfE7nqtY6t9juepEWD5hVxJagxaLDw14Yl/5opX
uxdBL7uQFf7CYRbjsS5Fb6FevIaiWfT8+FEyR1CbllYAtUlFMQiS8lD9aERkXN6K
OapPcFV6I8Jz93fBwOuRcD2lLOcP2PX/6GvMQvz6n266IochksYqyMQjjAdJ4iYy
sIz1xQZZbr8oGppXhLDKm+DjkWi3P37oBwpTUpjQkLt8GiwVXJI66gOkdpKzNgU1
37iP48lOJieHLVcMxe7PW839hsZZjBgyZTOOp2UKGYSKfXqEmIxeQMCSgA9xOztP
vWHQ0XCwkd1x/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:03 2024 by rpki-client on console-fra.rpki-client.org