Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/mwcMB6KSYYGGOFzCBOyV-2SvXRk.mft
File: mwcMB6KSYYGGOFzCBOyV-2SvXRk.mft (raw, json)
Hash identifier: SLYJSyeQlnQNFN06wJbB9TBh/QhTGlDOskndIyLq7i4=
Subject key identifier: FB:AE:7F:4C:EC:F3:2E:DA:A7:09:12:80:A7:05:29:0A:B9:06:68:2F
Authority key identifier: 9B:07:0C:07:A2:92:61:81:86:38:5C:C2:04:EC:95:FB:64:AF:5D:19
Certificate issuer: /CN=9b070c07a292618186385cc204ec95fb64af5d19
Certificate serial: 018B8F43F4CDA2FEF7B24D98D5F22BA414DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwcMB6KSYYGGOFzCBOyV-2SvXRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/mwcMB6KSYYGGOFzCBOyV-2SvXRk.mft
Manifest number: 0877
Signing time: Thu 02 Nov 2023 09:01:17 +0000
Manifest this update: Thu 02 Nov 2023 09:01:17 +0000
Manifest next update: Fri 03 Nov 2023 09:01:17 +0000
Files and hashes: 1: 1-q3wtGkhV7-o8h2hIvypKzIf64I.roa (hash: erJDX4II/cCpt4To74UhpWjwDkKiwhO3o7XM+ybSyBM=)
2: mwcMB6KSYYGGOFzCBOyV-2SvXRk.crl (hash: 4E07F6Yhpf2I+TkyLkjgExbV69Hf/NyQBobn/wkH0FI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:f4:cd:a2:fe:f7:b2:4d:98:d5:f2:2b:a4:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b070c07a292618186385cc204ec95fb64af5d19
Validity
Not Before: Nov 2 09:01:17 2023 GMT
Not After : Nov 3 09:01:17 2023 GMT
Subject: CN=fbae7f4cecf32edaa7091280a705290ab906682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:08:84:1d:ed:5f:74:f4:8f:aa:0a:a3:6d:
71:d1:55:7f:a8:15:33:db:31:55:26:94:a7:c4:2d:
be:03:74:c8:64:3b:e4:1c:10:5a:29:3a:37:2a:e7:
d0:c1:be:49:a7:b8:e0:a1:2e:28:33:09:ac:77:e4:
24:d9:c8:f1:bb:b4:0a:63:31:d2:99:3b:ff:92:fa:
11:0c:88:bd:9d:c2:78:9a:3b:ca:42:5f:51:9e:ac:
c7:a3:fb:c8:39:89:81:e7:38:c5:91:19:87:dc:cd:
a9:dc:6f:ed:f8:4c:dd:eb:22:d6:92:39:d5:df:4a:
35:83:2f:a6:d7:49:28:c4:02:22:ce:a7:c9:39:d9:
3c:32:d5:e0:22:7a:41:bb:1f:6a:ba:49:58:39:1b:
d4:88:b6:fd:00:77:30:31:b9:9b:51:d5:81:d9:07:
ce:6d:53:11:fd:ce:de:43:2c:f0:9b:e3:ad:08:0e:
fb:7e:4c:7b:a6:80:ce:29:f1:7b:58:b3:d8:e5:16:
e4:b6:d1:c7:b6:2f:97:c2:d4:85:0c:69:81:24:27:
e3:d2:83:5a:31:d9:a2:ba:61:12:3a:77:1d:8f:54:
7d:0b:b2:0c:31:11:09:97:d8:85:80:38:ec:01:e4:
13:c9:89:cc:dc:ef:35:64:e1:5d:ab:7a:8e:cd:9a:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:7F:4C:EC:F3:2E:DA:A7:09:12:80:A7:05:29:0A:B9:06:68:2F
X509v3 Authority Key Identifier:
keyid:9B:07:0C:07:A2:92:61:81:86:38:5C:C2:04:EC:95:FB:64:AF:5D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwcMB6KSYYGGOFzCBOyV-2SvXRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/mwcMB6KSYYGGOFzCBOyV-2SvXRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a3e2b-5d40-467e-b467-fe3d6ecd4b3c/1/mwcMB6KSYYGGOFzCBOyV-2SvXRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6b:61:64:1b:33:0e:bd:19:60:99:61:ff:f6:4e:db:d1:c8:
41:cb:f6:cf:03:e6:5a:80:c8:69:b7:e1:e4:1e:04:4b:7c:9e:
9a:a5:e2:43:33:55:d6:90:9d:95:68:37:54:65:c6:93:e8:48:
91:93:3f:c4:88:91:81:d3:1b:9f:a4:a7:6b:77:de:aa:ef:4e:
3a:b1:e8:4c:d6:fa:a3:69:6c:7d:e4:e5:5c:bc:97:5e:1d:c4:
28:90:33:88:5d:59:80:34:dc:84:7d:22:37:04:8d:3d:79:ad:
be:9a:55:a6:d6:05:c7:92:70:3f:d9:79:0c:02:71:7c:17:50:
37:59:65:a0:7f:8c:86:a6:40:53:d1:f0:fa:1c:b9:bd:8b:95:
8f:7b:40:fa:f3:6e:cd:5f:b2:eb:a7:86:4f:30:1b:b3:6d:b1:
26:d7:d3:96:92:af:22:5c:0e:01:c7:d9:96:7f:1e:93:e0:75:
f0:9b:8b:2b:11:d6:72:93:f1:98:e2:f6:9f:a3:a3:fb:11:8b:
ca:f9:56:fc:8e:7d:47:9e:37:6e:51:d9:f4:87:f5:1d:28:96:
5a:ba:d9:e0:3b:43:57:34:8f:3c:1c:c3:88:39:4f:4a:d8:29:
3d:9f:36:a2:4d:a5:45:f4:fc:bf:48:e5:49:ab:af:b2:68:b4:
89:84:f4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:07:59 2025 by rpki-client