Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft
File: xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft (raw, json)
Hash identifier: wKTETyvRAP1Nm7ZXWNy1HWhzm3pC1wwQyrqCc1ruywY=
Subject key identifier: 72:C3:65:06:91:0C:C4:74:8F:64:81:59:FA:3F:E8:17:F8:76:DA:9E
Authority key identifier: C4:45:7A:30:96:43:B9:A1:64:DA:9F:73:6F:32:41:C0:C1:6A:50:E9
Certificate issuer: /CN=c4457a309643b9a164da9f736f3241c0c16a50e9
Certificate serial: 0188E35AF5CFFE43245DCBE37AB8CCE89E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEV6MJZDuaFk2p9zbzJBwMFqUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft
Manifest number: 0DF1
Signing time: Thu 22 Jun 2023 13:46:09 +0000
Manifest this update: Thu 22 Jun 2023 13:46:09 +0000
Manifest next update: Fri 23 Jun 2023 13:46:09 +0000
Files and hashes: 1: kcDY5iWbwLMuQ-6WEPw12DjN0FU.roa (hash: VpCrbbbheG8Q+qpGvirqR6jLmMhEdxtmv36rbWiM4kU=)
2: xEV6MJZDuaFk2p9zbzJBwMFqUOk.crl (hash: Cs2p/PTk+X9Vsk3wg0Uou/AOWM+/bSzHluIfsHu1shU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:5a:f5:cf:fe:43:24:5d:cb:e3:7a:b8:cc:e8:9e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4457a309643b9a164da9f736f3241c0c16a50e9
Validity
Not Before: Jun 22 13:46:09 2023 GMT
Not After : Jun 23 13:46:09 2023 GMT
Subject: CN=72c36506910cc4748f648159fa3fe817f876da9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:7b:cf:2d:f7:02:44:8e:31:b3:38:95:6f:
fa:03:31:5a:d8:7c:00:c4:01:f9:6b:84:f9:80:d5:
b7:6c:92:e0:32:ac:86:ad:4f:ee:01:6d:13:32:19:
dc:1f:eb:88:3b:8c:ce:3a:63:b0:04:21:07:02:1a:
95:d1:a5:6f:d4:cb:25:39:00:9d:65:fd:39:43:bb:
c6:a5:b3:be:78:1a:09:ce:44:6c:38:f8:7e:53:7d:
fe:9e:19:12:93:55:4c:92:72:f3:6f:49:90:f4:6a:
32:d2:19:f8:06:3d:d5:49:3f:ad:b8:c2:b5:b9:00:
a9:60:b9:6d:0c:49:d3:69:51:12:a8:d1:96:66:37:
12:d5:b8:bc:ad:1b:e6:29:ff:f6:08:4d:2d:57:d9:
e4:13:41:a4:f6:df:0e:c7:50:cb:09:29:21:f4:a1:
e8:51:f1:cf:26:09:a3:1e:ff:a0:09:fa:21:3d:17:
db:06:54:f0:34:b5:97:f2:4f:d3:86:10:73:09:b1:
b6:d2:50:b1:60:7f:40:fa:01:a0:44:45:41:ca:6f:
a9:63:77:9a:cb:42:83:63:4e:44:14:bf:a1:8e:de:
17:cc:b7:ae:58:f8:ac:20:28:04:b7:5b:49:76:24:
d1:c1:2f:6e:9f:7a:20:71:8a:12:60:de:a4:ab:58:
99:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C3:65:06:91:0C:C4:74:8F:64:81:59:FA:3F:E8:17:F8:76:DA:9E
X509v3 Authority Key Identifier:
keyid:C4:45:7A:30:96:43:B9:A1:64:DA:9F:73:6F:32:41:C0:C1:6A:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEV6MJZDuaFk2p9zbzJBwMFqUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fd304-69bd-4bf2-a073-6a78f55a6f89/1/xEV6MJZDuaFk2p9zbzJBwMFqUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1e:08:e2:71:39:7c:74:04:2f:3c:af:46:9e:ac:6e:15:e8:
29:10:31:cc:ab:51:8c:a0:e1:2b:18:85:d3:5a:f4:a4:6c:66:
f4:3f:91:33:d8:6b:5e:0e:e7:b6:55:ec:48:a9:d7:1b:de:40:
9f:61:25:6d:3d:78:12:9f:1e:95:35:bb:d6:ae:86:e0:9a:de:
64:86:b8:a1:58:d1:de:6d:2e:ce:e3:23:c3:c8:ce:89:2a:01:
2a:eb:cf:05:86:c8:ad:64:10:1c:59:35:a7:18:e3:a9:36:d5:
84:6e:ee:4b:be:15:22:16:4b:1a:e4:51:47:4a:e4:32:3c:2f:
3d:88:e2:d9:e9:5e:60:38:aa:cc:60:0e:c9:d9:cb:13:6a:bc:
57:95:44:b1:00:81:10:01:94:ec:55:d8:5c:92:b4:47:32:fa:
d9:b4:94:5d:6b:8e:e1:33:7c:50:01:b1:29:ed:98:5c:d9:99:
5c:39:2c:21:e5:9a:7d:4f:1f:a2:dd:9a:7c:94:f2:65:8d:0c:
13:c6:b5:a8:67:5d:5b:7a:48:05:55:05:a3:61:db:23:3d:35:
5c:33:68:57:df:8d:db:3a:40:fc:d2:bc:b5:c1:ef:7a:be:a8:
48:d5:b3:da:ac:11:d6:c8:d0:a7:dc:55:0b:57:34:34:7b:2d:
9a:41:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:22:04 2025 by rpki-client