Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ec80f-924d-4b12-b81c-a07483da7c65/1/R2oLZh3MZlKL6B4iOfQviLPCkEo.mft
File: R2oLZh3MZlKL6B4iOfQviLPCkEo.mft (raw, json)
Hash identifier: gltJ/1bCBPYHPaB5gbiGUNrxUkfy5EUwFqNxv4hkGug=
Subject key identifier: C7:E3:F0:80:CD:62:6B:9C:11:FA:CD:8E:FD:15:3C:7D:80:30:EA:E8
Authority key identifier: 47:6A:0B:66:1D:CC:66:52:8B:E8:1E:22:39:F4:2F:88:B3:C2:90:4A
Certificate issuer: /CN=476a0b661dcc66528be81e2239f42f88b3c2904a
Certificate serial: 018B02EE51C745BE1121B7DEA4A895B0F8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2oLZh3MZlKL6B4iOfQviLPCkEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ec80f-924d-4b12-b81c-a07483da7c65/1/R2oLZh3MZlKL6B4iOfQviLPCkEo.mft
Manifest number: 087F
Signing time: Fri 06 Oct 2023 03:00:54 +0000
Manifest this update: Fri 06 Oct 2023 03:00:54 +0000
Manifest next update: Sat 07 Oct 2023 03:00:54 +0000
Files and hashes: 1: OJPlm83T3ielwnrXVdJQGAVdmNI.roa (hash: /SIvHOL/ICGnXLSxx6fodHILIuk/xvbAUXQOCobthWQ=)
2: R2oLZh3MZlKL6B4iOfQviLPCkEo.crl (hash: zYCkz0kmdwY+GYtSJBuz5QjJ2x2GQKvNaCI99XnnKPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:ee:51:c7:45:be:11:21:b7:de:a4:a8:95:b0:f8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476a0b661dcc66528be81e2239f42f88b3c2904a
Validity
Not Before: Oct 6 03:00:54 2023 GMT
Not After : Oct 7 03:00:54 2023 GMT
Subject: CN=c7e3f080cd626b9c11facd8efd153c7d8030eae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:05:04:34:9d:fc:5d:7f:0f:91:b3:02:21:32:
bc:02:71:f9:28:3a:b4:a3:ba:33:01:50:fb:f1:39:
10:14:99:5e:92:c2:e4:2c:01:f2:4f:d1:09:00:d3:
e5:db:77:75:82:81:e6:99:7d:f9:d1:d0:0b:01:da:
48:e1:7d:f2:78:25:3a:6f:68:d8:01:ba:33:e3:50:
b7:9d:d6:d0:2c:5b:bd:01:19:66:ef:59:a5:8d:fc:
03:ac:c7:00:65:c6:f0:5a:10:47:76:73:e5:59:be:
92:eb:0a:e1:a0:93:6f:60:94:27:73:4f:69:50:a0:
2c:f4:38:42:23:bd:c5:67:62:17:61:74:f7:7f:8b:
bd:fd:45:a1:8a:b8:88:5b:95:ad:9e:c2:4a:5f:b1:
27:2c:d4:20:e1:49:cb:18:34:5c:37:ea:47:9e:45:
16:af:2c:9f:cb:99:64:bc:a5:dc:d7:aa:1e:d5:2b:
70:75:30:b3:97:25:f2:e5:e3:c3:97:6d:ba:dd:21:
53:ae:86:44:0e:77:1a:75:8e:70:d5:f7:f2:42:eb:
e2:eb:3f:0e:2e:24:3c:7b:a7:da:44:a7:81:18:28:
df:87:2e:22:05:c4:34:77:38:d0:bb:64:d5:05:7f:
75:2c:c2:e5:01:49:e9:b9:c7:5a:45:bc:7a:c4:64:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:F0:80:CD:62:6B:9C:11:FA:CD:8E:FD:15:3C:7D:80:30:EA:E8
X509v3 Authority Key Identifier:
keyid:47:6A:0B:66:1D:CC:66:52:8B:E8:1E:22:39:F4:2F:88:B3:C2:90:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2oLZh3MZlKL6B4iOfQviLPCkEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ec80f-924d-4b12-b81c-a07483da7c65/1/R2oLZh3MZlKL6B4iOfQviLPCkEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ec80f-924d-4b12-b81c-a07483da7c65/1/R2oLZh3MZlKL6B4iOfQviLPCkEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:47:f5:3f:5c:e6:b6:73:0d:f8:18:15:4b:93:2d:2c:a3:30:
ee:5a:81:a2:ef:1d:74:b5:cf:f3:6d:e9:4b:7c:d4:0c:ba:f3:
b3:fb:3e:fc:38:1f:52:64:f5:8b:fa:ce:35:e6:4f:75:e4:77:
bd:4f:3b:d3:f8:f4:c4:ea:89:4d:3f:74:d1:bb:76:80:f4:20:
30:88:e8:e8:03:b3:24:a1:41:49:25:d8:02:ab:2d:f2:a7:bf:
44:d0:c4:50:6f:13:8e:dd:e6:bf:83:a7:7d:d3:c5:97:d2:fe:
f2:6a:22:e3:d0:70:bc:c8:67:89:d3:59:af:da:ca:76:d8:b6:
c8:91:48:75:86:1b:bf:eb:e4:17:a3:b9:71:e6:0d:51:9d:cd:
9d:8a:c6:5f:31:71:59:c4:a0:0a:c1:71:75:80:f8:27:5f:d2:
b8:de:32:35:ee:f3:30:68:15:2e:09:a9:7b:f5:85:4f:c4:b1:
d7:1e:8c:44:b4:30:8e:a8:5b:44:34:ef:fc:64:01:0f:b7:46:
e8:cb:6c:1c:3c:c1:b0:a3:67:97:75:d2:88:75:3c:9b:cb:10:
00:f2:8c:d5:b8:0f:16:d3:81:a5:91:f7:82:93:03:fc:ec:ed:
58:32:b0:c9:8a:ce:6d:52:61:18:27:20:30:24:fb:ad:db:9a:
6e:0d:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:20:27 2025 by rpki-client