Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.mft
File: rDRefFkgzImj6mytor5QUoNoQnA.mft (raw, json)
Hash identifier: wRdDvaYoSpP5LoQXFQvJ835Tp/N6hdgAeYq78Z7WxWk=
Subject key identifier: A5:5D:62:C0:BF:72:E6:74:4C:48:E5:C4:94:DD:4B:D3:AF:78:A1:6E
Authority key identifier: AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
Certificate issuer: /CN=ac345e7c5920cc89a3ea6cada2be505283684270
Certificate serial: 018BDC14C42832AA7B76A01C4D406DC9F0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.mft
Manifest number: 0678
Signing time: Fri 17 Nov 2023 07:00:30 +0000
Manifest this update: Fri 17 Nov 2023 07:00:30 +0000
Manifest next update: Sat 18 Nov 2023 07:00:30 +0000
Files and hashes: 1: rDRefFkgzImj6mytor5QUoNoQnA.crl (hash: gTeNJK4kPdw6E+cUFLl2xOCDax3VUIgM5KoIUoV7Cgo=)
2: yGPqrJa3Zwq1lr8NTpt5X86glXI.roa (hash: 2jZcVKME4/6iNnTYuGCTDlNJXCs1FpJb/MUDlyZ9cDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:14:c4:28:32:aa:7b:76:a0:1c:4d:40:6d:c9:f0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac345e7c5920cc89a3ea6cada2be505283684270
Validity
Not Before: Nov 17 07:00:30 2023 GMT
Not After : Nov 18 07:00:30 2023 GMT
Subject: CN=a55d62c0bf72e6744c48e5c494dd4bd3af78a16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6f:6e:2a:cb:55:19:21:b9:94:ed:f2:9d:cf:
08:fc:ac:94:39:3a:00:8b:cf:12:99:18:29:7a:f6:
ed:48:e8:f9:8d:fb:b6:87:d1:3f:2d:68:19:29:f8:
1c:90:87:af:d0:e2:26:ec:bb:46:b9:80:73:e9:8c:
e2:16:c9:0f:ea:5e:60:d2:c4:1d:c9:29:64:e3:76:
de:0f:1a:e7:bd:96:24:6c:48:ea:c5:b1:bc:38:04:
b9:fd:bd:e0:bc:d7:cc:e9:b5:70:65:40:6f:21:07:
04:0b:89:bc:95:62:81:2f:7e:7e:1b:2c:d5:6e:70:
57:ae:a5:83:b2:2b:67:bd:d5:49:00:7b:8a:fc:24:
bb:99:64:f9:7b:75:1e:de:7b:6b:0a:59:76:ec:4c:
52:a5:a3:5a:db:91:d1:aa:83:15:6b:df:31:92:82:
52:f8:f1:9b:bc:53:46:2d:9b:4b:84:b4:79:be:d0:
6f:b9:9d:0b:11:66:f3:46:12:fb:c3:d0:ca:13:04:
b7:da:ec:41:81:3b:8a:7b:d0:9a:9f:b6:f2:5c:8a:
1a:5c:16:06:2c:59:4a:85:8c:ec:4b:13:69:5a:b5:
d7:62:3f:d0:26:73:6c:88:90:f5:9e:8b:f4:a0:bd:
a7:e1:17:45:a9:99:de:94:13:4a:32:ef:eb:b1:47:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:62:C0:BF:72:E6:74:4C:48:E5:C4:94:DD:4B:D3:AF:78:A1:6E
X509v3 Authority Key Identifier:
keyid:AC:34:5E:7C:59:20:CC:89:A3:EA:6C:AD:A2:BE:50:52:83:68:42:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRefFkgzImj6mytor5QUoNoQnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/578642-9428-4a17-b936-88329b03b2aa/1/rDRefFkgzImj6mytor5QUoNoQnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fc:03:56:06:13:d0:c4:52:73:c7:6d:6a:f4:45:8e:ed:58:
82:4e:1a:89:38:32:34:8a:d0:37:d5:e9:c1:bd:fa:4c:ce:bb:
a2:61:58:f2:4d:1d:94:5e:1b:4d:78:dc:84:af:b7:84:eb:ba:
12:69:a2:61:13:95:3b:a1:f4:8b:35:f8:64:b6:ac:7a:ad:66:
bd:49:9a:d3:80:d4:a4:63:47:22:ad:9e:02:16:36:d1:73:ee:
ef:f4:fc:ea:b1:28:16:22:16:ce:e6:82:3e:5c:64:e7:6f:b6:
56:1d:47:c5:07:b5:3d:95:18:ad:2f:b1:a8:81:3e:87:b5:a6:
9d:f8:30:92:ec:12:1c:49:2b:02:30:ea:ea:8b:de:13:7b:a2:
e6:51:64:70:d0:5a:2f:7c:24:23:61:05:c9:a0:59:ec:33:d7:
9e:e4:d3:e0:53:35:74:11:47:7e:30:ec:ce:5f:1a:7b:39:5e:
b9:5c:a2:0d:ee:4f:2d:24:c2:21:3f:f1:d1:35:0a:92:9c:ba:
67:a9:d8:27:6d:31:5f:14:a5:6f:5d:ed:21:01:4a:07:ea:c9:
d6:f3:84:b7:86:8e:25:ce:cf:da:95:a3:3c:3f:79:c0:73:44:
e6:6f:7b:52:75:14:4f:d4:97:21:b1:25:f1:96:57:dd:ad:bf:
fb:a5:3b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvcFMQoMqp7dqAcTUBtyfDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMzQ1ZTdjNTkyMGNjODlhM2VhNmNhZGEyYmU1MDUyODM2
ODQyNzAwHhcNMjMxMTE3MDcwMDMwWhcNMjMxMTE4MDcwMDMwWjAzMTEwLwYDVQQD
EyhhNTVkNjJjMGJmNzJlNjc0NGM0OGU1YzQ5NGRkNGJkM2FmNzhhMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW9uKstVGSG5lO3ync8I/KyUOToA
i88SmRgpevbtSOj5jfu2h9E/LWgZKfgckIev0OIm7LtGuYBz6YziFskP6l5g0sQd
ySlk43beDxrnvZYkbEjqxbG8OAS5/b3gvNfM6bVwZUBvIQcEC4m8lWKBL35+GyzV
bnBXrqWDsitnvdVJAHuK/CS7mWT5e3Ue3ntrCll27ExSpaNa25HRqoMVa98xkoJS
+PGbvFNGLZtLhLR5vtBvuZ0LEWbzRhL7w9DKEwS32uxBgTuKe9Can7byXIoaXBYG
LFlKhYzsSxNpWrXXYj/QJnNsiJD1nov0oL2n4RdFqZnelBNKMu/rsUdqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVdYsC/cuZ0TEjlxJTdS9OveKFuMB8GA1UdIwQY
MBaAFKw0XnxZIMyJo+psraK+UFKDaEJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckRSZWZGa2d6SW1qNm15dG9yNVFVb05vUW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2NDItOTQyOC00YTE3LWI5MzYt
ODgzMjliMDNiMmFhLzEvckRSZWZGa2d6SW1qNm15dG9yNVFVb05vUW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2NDItOTQyOC00YTE3LWI5MzYtODgzMjliMDNiMmFh
LzEvckRSZWZGa2d6SW1qNm15dG9yNVFVb05vUW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfwDVgYT
0MRSc8dtavRFju1Ygk4aiTgyNIrQN9Xpwb36TM67omFY8k0dlF4bTXjchK+3hOu6
EmmiYROVO6H0izX4ZLaseq1mvUma04DUpGNHIq2eAhY20XPu7/T86rEoFiIWzuaC
Plxk52+2Vh1HxQe1PZUYrS+xqIE+h7WmnfgwkuwSHEkrAjDq6oveE3ui5lFkcNBa
L3wkI2EFyaBZ7DPXnuTT4FM1dBFHfjDszl8aezleuVyiDe5PLSTCIT/x0TUKkpy6
Z6nYJ20xXxSlb13tIQFKB+rJ1vOEt4aOJc7P2pWjPD95wHNE5m97UnUUT9SXIbEl
8ZZX3a2/+6U78Q==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:48:01 2025 by rpki-client