Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/26536a-dd3f-4cac-ac83-65914109c34d/1/I6CD9qCQ47i2UV_r1VSZR_y8h4k.mft
File: I6CD9qCQ47i2UV_r1VSZR_y8h4k.mft (raw, json)
Hash identifier: MZzTZ38cWVJm42V6NC5QFMLbr2csvVKlrT1mM5xd2o4=
Subject key identifier: A6:C5:7F:32:5B:1C:5B:55:B2:C9:DB:37:D6:B0:59:8F:B7:18:92:94
Authority key identifier: 23:A0:83:F6:A0:90:E3:B8:B6:51:5F:EB:D5:54:99:47:FC:BC:87:89
Certificate issuer: /CN=23a083f6a090e3b8b6515febd5549947fcbc8789
Certificate serial: 2A181459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6CD9qCQ47i2UV_r1VSZR_y8h4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/26536a-dd3f-4cac-ac83-65914109c34d/1/I6CD9qCQ47i2UV_r1VSZR_y8h4k.mft
Manifest number: 08A2
Signing time: Wed 16 Mar 2022 05:38:07 +0000
Manifest this update: Wed 16 Mar 2022 05:38:07 +0000
Manifest next update: Thu 17 Mar 2022 05:38:07 +0000
Files and hashes: 1: I6CD9qCQ47i2UV_r1VSZR_y8h4k.crl (hash: ZPWBz0dyeHlz2g2AsbXZz64m7/cgBMR7X4DcKbgWQsM=)
2: RZS7KSo_98sPn6_NOvnqIz787NE.roa (hash: Uf7xhTjuTP01HrQcVUix9DjmoSoWWxrPxnUITmIoxCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706221145 (0x2a181459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a083f6a090e3b8b6515febd5549947fcbc8789
Validity
Not Before: Mar 16 05:38:07 2022 GMT
Not After : Mar 17 05:38:07 2022 GMT
Subject: CN=a6c57f325b1c5b55b2c9db37d6b0598fb7189294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:72:6c:d0:fc:64:97:ee:b5:94:e7:22:5f:
d6:a5:18:a4:0e:48:1b:0c:36:bb:e9:68:36:10:e3:
3e:51:1b:78:0d:89:a1:d1:98:5e:63:91:44:ce:6f:
60:c6:24:10:15:48:e4:ab:d0:59:70:05:63:3a:47:
10:5e:f0:93:6d:b9:14:f2:53:be:2e:08:31:9c:ac:
5f:19:fd:7a:56:1c:6f:5f:66:07:c6:40:4d:0e:0d:
91:ef:71:db:99:17:0f:df:54:1f:62:36:e9:95:72:
a4:83:e5:d1:a4:a1:cb:2c:40:10:b7:8a:43:2c:8d:
dd:c3:68:40:32:1a:3c:0a:6c:bb:13:81:ae:71:22:
ba:d5:ef:ed:10:4d:3c:d2:19:7b:ff:fa:30:9f:f8:
1e:53:11:58:66:04:19:e6:e0:78:50:7b:b2:1b:ac:
9e:53:c8:de:de:2a:e4:5d:45:f7:27:f4:f7:14:82:
7e:3e:60:d0:27:77:ba:78:e9:86:84:00:ce:14:7e:
d3:6b:ac:5f:c4:6a:a0:c6:bb:84:f7:5b:46:f2:44:
c8:16:77:ab:f3:91:03:99:b1:ea:fc:39:e2:a2:22:
95:bd:b3:fa:1c:70:3e:b9:38:37:06:f4:43:bb:52:
c8:82:32:6f:06:fb:c1:ae:7d:e0:d3:ba:83:6b:48:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:7F:32:5B:1C:5B:55:B2:C9:DB:37:D6:B0:59:8F:B7:18:92:94
X509v3 Authority Key Identifier:
keyid:23:A0:83:F6:A0:90:E3:B8:B6:51:5F:EB:D5:54:99:47:FC:BC:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6CD9qCQ47i2UV_r1VSZR_y8h4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/26536a-dd3f-4cac-ac83-65914109c34d/1/I6CD9qCQ47i2UV_r1VSZR_y8h4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/26536a-dd3f-4cac-ac83-65914109c34d/1/I6CD9qCQ47i2UV_r1VSZR_y8h4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:78:0c:db:1a:11:61:c5:fa:d7:ef:58:3c:85:83:f5:6b:94:
9c:f5:79:2e:b9:42:f7:08:01:c7:4d:a8:ab:b5:06:c4:3e:b5:
8d:66:f3:e4:e5:eb:b7:89:7d:e4:37:78:96:55:d9:98:6e:3e:
35:87:5e:cf:4a:0a:4b:18:73:c5:81:9c:79:63:e3:e9:88:8a:
0d:64:1a:bb:7e:a6:b3:75:6c:84:b6:80:fa:bb:80:20:c6:4f:
c2:64:18:26:d7:67:a8:fb:07:9b:ed:74:5c:f7:f9:d1:74:52:
76:03:c3:7b:f1:24:92:ba:71:e5:65:99:ec:a4:54:1d:88:2e:
73:a5:ab:b4:2a:f3:61:d6:68:10:f9:17:75:85:1f:ea:d9:08:
7d:81:36:3a:fe:8f:b1:a9:87:2b:30:9e:b3:28:f3:75:40:3f:
08:50:76:7a:65:1e:2c:d1:7d:90:89:e3:b1:f5:10:ec:f7:68:
68:06:a9:c7:9d:51:ba:7c:f3:b6:fe:ce:2a:4f:9f:ef:2f:81:
32:e2:ab:86:2a:82:bd:3f:c8:4b:1c:55:06:7d:64:ad:a5:4b:
6b:77:16:40:2b:f6:40:5f:67:ba:a8:c3:ad:c4:c7:59:8d:58:
45:22:69:64:49:5c:eb:2c:0a:d9:8a:90:6c:54:44:1d:cf:bc:
db:5b:1c:2a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEKhgUWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
M2EwODNmNmEwOTBlM2I4YjY1MTVmZWJkNTU0OTk0N2ZjYmM4Nzg5MB4XDTIyMDMx
NjA1MzgwN1oXDTIyMDMxNzA1MzgwN1owMzExMC8GA1UEAxMoYTZjNTdmMzI1YjFj
NWI1NWIyYzlkYjM3ZDZiMDU5OGZiNzE4OTI5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdgcmzQ/GSX7rWU5yJf1qUYpA5IGww2u+loNhDjPlEbeA2J
odGYXmORRM5vYMYkEBVI5KvQWXAFYzpHEF7wk225FPJTvi4IMZysXxn9elYcb19m
B8ZATQ4Nke9x25kXD99UH2I26ZVypIPl0aShyyxAELeKQyyN3cNoQDIaPApsuxOB
rnEiutXv7RBNPNIZe//6MJ/4HlMRWGYEGebgeFB7shusnlPI3t4q5F1F9yf09xSC
fj5g0Cd3unjphoQAzhR+02usX8RqoMa7hPdbRvJEyBZ3q/ORA5mx6vw54qIilb2z
+hxwPrk4Nwb0Q7tSyIIybwb7wa594NO6g2tILf8CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSmxX8yWxxbVbLJ2zfWsFmPtxiSlDAfBgNVHSMEGDAWgBQjoIP2oJDjuLZR
X+vVVJlH/LyHiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0k2Q0Q5cUNRNDdpMlVWX3IxVlNaUl95OGg0ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjkvMjY1MzZhLWRkM2YtNGNhYy1hYzgzLTY1OTE0MTA5YzM0ZC8x
L0k2Q0Q5cUNRNDdpMlVWX3IxVlNaUl95OGg0ay5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkv
MjY1MzZhLWRkM2YtNGNhYy1hYzgzLTY1OTE0MTA5YzM0ZC8xL0k2Q0Q5cUNRNDdp
MlVWX3IxVlNaUl95OGg0ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHd4DNsaEWHF+tfvWDyFg/VrlJz1
eS65QvcIAcdNqKu1BsQ+tY1m8+Tl67eJfeQ3eJZV2ZhuPjWHXs9KCksYc8WBnHlj
4+mIig1kGrt+prN1bIS2gPq7gCDGT8JkGCbXZ6j7B5vtdFz3+dF0UnYDw3vxJJK6
ceVlmeykVB2ILnOlq7Qq82HWaBD5F3WFH+rZCH2BNjr+j7GphyswnrMo83VAPwhQ
dnplHizRfZCJ47H1EOz3aGgGqcedUbp887b+zipPn+8vgTLiq4Yqgr0/yEscVQZ9
ZK2lS2t3FkAr9kBfZ7qow63Ex1mNWEUiaWRJXOssCtmKkGxURB3PvNtbHCo=
-----END CERTIFICATE-----
Generated at Sun Apr 20 17:53:55 2025 by rpki-client