Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.mft
File: X_Rhb1zKNGNLQjEaDqPRGGTa2iI.mft (raw, json)
Hash identifier: BXlt4pcV91rG6N0OsAzMallNC/obN3wcb9IqOCAlLX4=
Subject key identifier: AA:B8:10:B2:17:85:43:B6:F1:10:2F:B7:C8:F8:84:6A:20:49:ED:0D
Authority key identifier: 5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
Certificate issuer: /CN=5ff4616f5cca34634b42311a0ea3d11864dada22
Certificate serial: 018A3A61C21C2D4953CCCBA76C20B673FE4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.mft
Manifest number: 08E7
Signing time: Mon 28 Aug 2023 04:23:19 +0000
Manifest this update: Mon 28 Aug 2023 04:23:19 +0000
Manifest next update: Tue 29 Aug 2023 04:23:19 +0000
Files and hashes: 1: X_Rhb1zKNGNLQjEaDqPRGGTa2iI.crl (hash: mzDJGCx89/X9ZIHJwxiE6y0uJtWdZOGjpahZyzHQ+fI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3a:61:c2:1c:2d:49:53:cc:cb:a7:6c:20:b6:73:fe:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4616f5cca34634b42311a0ea3d11864dada22
Validity
Not Before: Aug 28 04:23:19 2023 GMT
Not After : Aug 29 04:23:19 2023 GMT
Subject: CN=aab810b2178543b6f1102fb7c8f8846a2049ed0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:ed:07:dc:b5:53:80:ad:dd:8c:20:f8:af:
c4:a3:00:bf:7e:6c:25:bd:4b:79:aa:86:3b:00:96:
88:ee:9d:e3:98:41:2a:98:a7:74:81:f3:e5:eb:71:
a1:1d:3f:8e:81:12:0d:3d:bd:d3:34:db:58:a5:70:
8a:f9:47:56:b6:47:d9:9f:c0:79:a0:57:f6:af:83:
4a:89:47:7e:03:8a:9c:01:56:12:c5:1b:09:0a:93:
be:a9:b4:b5:30:1d:4f:c6:e1:f1:b0:9c:1a:bc:09:
e2:32:e8:cd:0c:75:98:d2:ee:92:83:a0:9d:2a:99:
a5:ec:e6:ac:b7:48:c2:cf:43:90:31:a5:94:54:68:
eb:00:b0:6a:1f:3e:0c:d5:dd:d8:c2:76:d3:31:fe:
a9:65:41:13:db:40:99:1e:6f:ef:f3:48:07:62:44:
cb:c2:9d:fa:22:d1:6b:94:9e:e5:4a:ac:30:b8:36:
ec:2f:1f:cd:50:b8:b8:be:ee:a1:e1:81:91:44:6f:
77:80:25:22:8f:f0:c0:b5:c8:c4:7d:5a:3b:99:4d:
91:62:e5:8a:c2:65:37:4b:f4:c0:67:b0:72:c9:e3:
07:d9:b6:7a:dc:c8:3e:af:29:88:1e:54:a9:6d:55:
08:37:fc:c6:46:e4:fe:00:aa:21:aa:09:f8:42:a9:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:10:B2:17:85:43:B6:F1:10:2F:B7:C8:F8:84:6A:20:49:ED:0D
X509v3 Authority Key Identifier:
keyid:5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b7:a9:c6:9d:e8:1f:53:48:a8:da:0a:46:c2:99:c5:8f:46:
64:f3:23:6f:3a:95:38:82:98:f4:a7:36:b4:b8:85:44:d4:30:
2b:ef:11:39:8e:2a:06:04:ce:a1:fe:e0:15:c4:7c:09:bf:9c:
03:68:34:f0:89:85:54:7d:db:06:c1:3c:3c:02:eb:da:38:32:
18:eb:fe:4d:ec:13:68:0f:76:fd:72:c2:7d:13:38:ef:2c:23:
52:47:a5:18:5a:fe:1c:d1:71:06:0a:73:dd:0c:80:f3:9b:11:
db:2e:3c:db:a5:f5:20:52:a0:a3:5c:35:1b:44:fc:3a:8b:e1:
11:36:3c:38:d6:43:8f:ef:48:98:1f:6b:dc:ae:96:10:84:15:
d4:de:4a:7e:81:68:68:59:c9:1f:43:83:f3:f1:9b:af:52:73:
c3:33:b3:2a:33:84:67:cf:3e:a4:ce:af:5a:40:0c:44:40:91:
cb:63:a1:87:b7:c2:8c:d3:87:ff:27:09:79:c6:d0:85:c7:21:
fa:7a:f9:a1:1d:15:49:94:cb:8c:8c:d5:5f:cb:1b:44:82:49:
07:70:33:0b:4c:6e:fc:26:62:ec:2e:ec:f0:62:ab:79:20:25:
e4:ad:97:d5:f7:6d:61:ad:eb:63:03:95:08:32:be:1a:97:0c:
11:03:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:56:19 2025 by rpki-client