Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.mft
File: _qyIuvk9wHodKaUNs9UFddMyx5k.mft (raw, json)
Hash identifier: MI3aI6I2whQT5GBb1uoSFO9rncO/LFGft5SgBSelUD4=
Subject key identifier: 11:E0:F9:29:FA:67:96:38:CD:9C:8C:4A:9D:0A:5B:09:D4:17:E3:4E
Authority key identifier: FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
Certificate issuer: /CN=feac88baf93dc07a1d29a50db3d50575d332c799
Certificate serial: 018C3935F41C4986CEAF4EF9A8D02837EC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.mft
Manifest number: 086C
Signing time: Tue 05 Dec 2023 09:01:26 +0000
Manifest this update: Tue 05 Dec 2023 09:01:26 +0000
Manifest next update: Wed 06 Dec 2023 09:01:26 +0000
Files and hashes: 1: 0nckyU3FAa632p69srB4C7P-ujM.roa (hash: w2X3sQ92sDIq0uwqwTaP+v2+SINfIedcVhed8o/rP9Y=)
2: _qyIuvk9wHodKaUNs9UFddMyx5k.crl (hash: RsY9N30CViw5Z+EQ05gt4rmutGNS4HbcTuPU9cZXABo=)
3: kwJh6UT92BB7AGI1CredbetmL7M.roa (hash: MJs9hmodok+2xEIJTQJH+rLj3Ca/8N7b5mnIEwo/zdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:35:f4:1c:49:86:ce:af:4e:f9:a8:d0:28:37:ec:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feac88baf93dc07a1d29a50db3d50575d332c799
Validity
Not Before: Dec 5 09:01:26 2023 GMT
Not After : Dec 6 09:01:26 2023 GMT
Subject: CN=11e0f929fa679638cd9c8c4a9d0a5b09d417e34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:68:dc:d4:2d:a5:4a:47:60:a0:c8:90:0c:
31:cf:22:95:da:79:c3:46:b2:62:3d:ed:ae:86:b6:
84:64:5e:fa:7a:0c:83:a9:fc:08:cc:4c:50:90:34:
27:c5:76:2a:17:9e:72:cf:5e:ef:da:30:17:7c:b5:
d6:92:df:ee:f7:5e:33:a3:90:2a:36:24:0d:4f:6f:
62:8c:99:5c:d7:6d:3d:5f:15:2c:d0:a1:c0:0b:69:
ca:a9:d5:57:d2:ca:69:5c:3a:2c:1b:c7:1f:7b:92:
de:42:3a:e6:d8:28:df:71:ee:ef:78:9e:c3:08:89:
29:99:7c:1e:0c:34:96:df:72:36:01:8a:5e:77:3c:
7c:d1:ca:92:cd:af:fc:00:1d:88:22:f0:c3:66:84:
da:a1:7e:4c:a7:bb:66:5f:e9:6a:cb:da:95:b7:83:
94:5a:84:d7:7c:9c:39:ae:c5:57:a9:b6:8a:53:93:
5a:21:76:87:74:f3:ef:f6:5b:bb:02:cd:8d:73:31:
0f:f6:48:4d:a9:62:fd:09:34:2a:4b:2f:2e:d4:ea:
27:1b:b4:96:73:95:2b:30:72:99:ed:b4:55:70:c4:
8f:af:7a:c8:6b:65:37:86:4a:b1:85:f5:c0:73:94:
e5:9f:ff:ef:44:57:88:f0:af:6b:2d:99:d6:4a:4b:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:F9:29:FA:67:96:38:CD:9C:8C:4A:9D:0A:5B:09:D4:17:E3:4E
X509v3 Authority Key Identifier:
keyid:FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:70:23:27:84:4e:3d:b4:1b:b2:cb:cb:12:cc:3e:74:cb:a1:
42:f0:1b:4b:24:39:b8:2b:da:b5:b2:4b:cd:5b:2e:48:fd:94:
a2:9b:eb:e4:c1:3d:02:ea:12:18:6b:b4:d9:fd:98:c4:d6:1c:
2a:47:2e:df:c2:67:2c:49:64:3a:c4:b1:16:4a:cc:8b:fc:1e:
65:ee:8b:08:91:a5:c8:b7:bf:0a:00:e5:f4:8c:8c:25:47:81:
a7:99:c0:26:1f:8c:6c:e2:8f:23:e9:96:95:bd:fb:9f:a7:85:
e1:53:a9:76:72:f4:eb:8c:07:95:a1:e4:9f:40:5d:9b:94:7a:
cc:a3:d6:4f:02:3f:92:0b:3c:88:df:f4:28:6e:cc:3a:60:4b:
48:c0:33:42:21:8a:fa:81:eb:9b:10:cf:25:14:60:1e:03:59:
f5:4b:95:fb:1e:fb:2a:e8:d5:de:08:f0:d3:46:98:64:35:27:
56:af:ab:50:7b:76:3f:00:61:44:24:78:3e:52:5d:3c:f7:ff:
5d:8d:1a:05:3b:6b:8b:99:16:e3:fc:cf:8f:a1:57:af:10:11:
8d:e1:a6:2c:3a:d6:c6:c8:cc:c0:89:9a:23:fd:67:84:1e:51:
a9:98:41:e9:88:26:72:e0:fa:cb:6f:71:b7:ad:d6:f2:98:02:
c6:2f:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:50:42 2025 by rpki-client