Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft
File: xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft (raw, json)
Hash identifier: 76AzLzci4Cyg9Qc6X4uthVbKgCqIODKAGrQAyP5ecfw=
Subject key identifier: C0:2F:AB:AB:83:41:58:D5:DC:61:D4:7B:0E:13:0F:2D:64:B3:F0:FD
Authority key identifier: C4:45:7A:30:96:43:B9:A1:64:DA:9F:73:6F:32:41:C0:C1:6A:50:E9
Certificate issuer: /CN=c4457a309643b9a164da9f736f3241c0c16a50e9
Certificate serial: 0188E8A031CFECE82B114D8D9D0034AF6652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEV6MJZDuaFk2p9zbzJBwMFqUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft
Manifest number: 0DF4
Signing time: Fri 23 Jun 2023 14:19:52 +0000
Manifest this update: Fri 23 Jun 2023 14:19:52 +0000
Manifest next update: Sat 24 Jun 2023 14:19:52 +0000
Files and hashes: 1: kcDY5iWbwLMuQ-6WEPw12DjN0FU.roa (hash: VpCrbbbheG8Q+qpGvirqR6jLmMhEdxtmv36rbWiM4kU=)
2: xEV6MJZDuaFk2p9zbzJBwMFqUOk.crl (hash: Yb4/PGRcB6Y7VxLJqs93RFbHxSFVJusETiaChFjlhN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:a0:31:cf:ec:e8:2b:11:4d:8d:9d:00:34:af:66:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4457a309643b9a164da9f736f3241c0c16a50e9
Validity
Not Before: Jun 23 14:19:52 2023 GMT
Not After : Jun 24 14:19:52 2023 GMT
Subject: CN=c02fabab834158d5dc61d47b0e130f2d64b3f0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:8b:c5:ca:fc:45:a6:f8:33:15:c1:91:fe:
34:6b:a4:25:a5:1a:02:32:89:28:05:c1:6b:d7:29:
44:9e:4a:62:ef:d1:1a:21:45:9c:1c:db:26:ac:e2:
5d:f3:a4:d8:16:a9:b0:97:71:b0:09:5f:9a:86:2e:
5b:98:c0:e5:32:3b:bf:80:23:0e:18:a1:99:3e:d9:
14:3e:75:ed:0b:0c:3e:ab:17:59:f7:40:2c:45:04:
fe:60:83:21:00:23:67:51:a7:96:97:ad:f1:5e:01:
d1:d8:59:93:5d:2f:a5:f8:ea:5d:3e:5d:44:06:aa:
16:37:48:4b:e9:f5:2d:a3:cd:75:04:36:0f:99:92:
b2:1c:19:9f:01:ec:6d:18:98:3b:be:b8:69:88:bc:
33:12:16:c2:a2:04:64:91:76:b7:a5:ec:d6:a2:5b:
82:cf:c5:b5:99:2a:96:95:a2:ee:ea:7b:60:05:1e:
02:e6:ec:d5:67:7f:c5:f0:bf:d2:9e:09:3b:c7:0c:
1e:20:c6:96:56:39:29:02:2a:00:5a:80:af:c1:2c:
3c:b7:56:07:89:4e:32:90:86:bd:37:d6:15:af:6c:
bc:4f:a3:84:f5:fb:19:34:46:10:7f:db:2d:f5:8b:
6d:36:42:ea:dd:56:59:8d:ab:33:da:5c:c0:47:13:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2F:AB:AB:83:41:58:D5:DC:61:D4:7B:0E:13:0F:2D:64:B3:F0:FD
X509v3 Authority Key Identifier:
keyid:C4:45:7A:30:96:43:B9:A1:64:DA:9F:73:6F:32:41:C0:C1:6A:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEV6MJZDuaFk2p9zbzJBwMFqUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:28:74:53:3a:ec:bf:fa:9a:81:ea:26:b6:01:f0:6b:6e:8a:
af:f9:15:e9:7c:0a:dc:e0:c6:55:70:a3:4a:2f:9a:84:4c:b0:
71:68:f1:38:f2:7e:1a:26:6e:42:85:1e:57:2f:93:5e:e5:fc:
00:f7:5d:ed:82:7d:1e:49:26:a4:44:f3:8c:09:31:9f:65:59:
cf:5f:eb:35:bc:2b:23:98:55:4b:84:6e:56:04:9b:0f:22:ec:
4c:ab:ba:5d:73:c6:d8:8f:79:9b:67:de:56:97:d6:d7:b8:b8:
07:1e:af:4b:f1:de:d7:0a:64:75:26:99:9b:40:2f:f2:5d:ae:
f1:6f:b9:9f:e7:c9:1f:8f:bd:bb:a4:6a:78:95:a8:09:46:c3:
81:09:8e:96:98:de:cd:17:06:7e:44:a7:08:ba:76:ed:57:f9:
b5:ec:e4:81:18:07:7b:a1:0f:9d:e1:e5:5a:51:0b:4c:b5:d2:
f2:f6:97:06:e5:fe:2e:0f:90:3f:55:24:e9:b3:ac:f5:6d:50:
ac:88:1a:bc:c9:e2:25:e0:19:fc:57:2e:8a:f4:fa:58:26:8f:
03:be:af:2c:1c:60:13:b9:62:18:b5:8e:55:cb:11:c5:1a:3c:
d6:aa:a6:7c:94:dd:ab:48:ee:4d:1e:c9:15:40:c0:64:7b:b7:
32:b1:12:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYjooDHP7OgrEU2NnQA0r2ZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDU3YTMwOTY0M2I5YTE2NGRhOWY3MzZmMzI0MWMwYzE2
YTUwZTkwHhcNMjMwNjIzMTQxOTUyWhcNMjMwNjI0MTQxOTUyWjAzMTEwLwYDVQQD
EyhjMDJmYWJhYjgzNDE1OGQ1ZGM2MWQ0N2IwZTEzMGYyZDY0YjNmMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv6Lxcr8Rab4MxXBkf40a6QlpRoC
MokoBcFr1ylEnkpi79EaIUWcHNsmrOJd86TYFqmwl3GwCV+ahi5bmMDlMju/gCMO
GKGZPtkUPnXtCww+qxdZ90AsRQT+YIMhACNnUaeWl63xXgHR2FmTXS+l+OpdPl1E
BqoWN0hL6fUto811BDYPmZKyHBmfAextGJg7vrhpiLwzEhbCogRkkXa3pezWoluC
z8W1mSqWlaLu6ntgBR4C5uzVZ3/F8L/Sngk7xwweIMaWVjkpAioAWoCvwSw8t1YH
iU4ykIa9N9YVr2y8T6OE9fsZNEYQf9st9YttNkLq3VZZjasz2lzARxNLDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAvq6uDQVjV3GHUew4TDy1ks/D9MB8GA1UdIwQY
MBaAFMRFejCWQ7mhZNqfc28yQcDBalDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVWNk1KWkR1YUZrMnA5emJ6SkJ3TUZxVU9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82ZmQzMDQtNjliZC00YmYyLWEwNzMt
NmE3OGY1NWE2Zjg5LzEveEVWNk1KWkR1YUZrMnA5emJ6SkJ3TUZxVU9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS82ZmQzMDQtNjliZC00YmYyLWEwNzMtNmE3OGY1NWE2Zjg5
LzEveEVWNk1KWkR1YUZrMnA5emJ6SkJ3TUZxVU9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCh0Uzrs
v/qageomtgHwa26Kr/kV6XwK3ODGVXCjSi+ahEywcWjxOPJ+GiZuQoUeVy+TXuX8
APdd7YJ9HkkmpETzjAkxn2VZz1/rNbwrI5hVS4RuVgSbDyLsTKu6XXPG2I95m2fe
VpfW17i4Bx6vS/He1wpkdSaZm0Av8l2u8W+5n+fJH4+9u6RqeJWoCUbDgQmOlpje
zRcGfkSnCLp27Vf5tezkgRgHe6EPneHlWlELTLXS8vaXBuX+Lg+QP1Uk6bOs9W1Q
rIgavMniJeAZ/FcuivT6WCaPA76vLBxgE7liGLWOVcsRxRo81qqmfJTdq0juTR7J
FUDAZHu3MrESYA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:50:10 2025 by rpki-client