Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/_iB0IuHvs8uHwlDERuwioXU__FA.mft
File: _iB0IuHvs8uHwlDERuwioXU__FA.mft (raw, json)
Hash identifier: EXc7FJ5nl7/T2LHTa3ouYaTsUdx7zD9z/3mImqxAc2g=
Subject key identifier: F4:FC:BF:C1:E6:18:AB:91:87:6F:62:8E:5C:A5:37:39:D8:E2:05:72
Authority key identifier: FE:20:74:22:E1:EF:B3:CB:87:C2:50:C4:46:EC:22:A1:75:3F:FC:50
Certificate issuer: /CN=fe207422e1efb3cb87c250c446ec22a1753ffc50
Certificate serial: 018C1FAC1CDBDB0FF23336A2EE24ACD45589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iB0IuHvs8uHwlDERuwioXU__FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/_iB0IuHvs8uHwlDERuwioXU__FA.mft
Manifest number: 0CB7
Signing time: Thu 30 Nov 2023 10:00:22 +0000
Manifest this update: Thu 30 Nov 2023 10:00:22 +0000
Manifest next update: Fri 01 Dec 2023 10:00:22 +0000
Files and hashes: 1: 1-WBgAjJPuRyexfyhE7pZIai77Jg.roa (hash: zLaRmB+93bkn/7W0orUviXnsNrK88DlmN/NWoaVcvTM=)
2: _iB0IuHvs8uHwlDERuwioXU__FA.crl (hash: bWzYYneYeMcjSC3wOcFoHsrgTcu3inUFBnrucaSa4FQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:ac:1c:db:db:0f:f2:33:36:a2:ee:24:ac:d4:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe207422e1efb3cb87c250c446ec22a1753ffc50
Validity
Not Before: Nov 30 10:00:22 2023 GMT
Not After : Dec 1 10:00:22 2023 GMT
Subject: CN=f4fcbfc1e618ab91876f628e5ca53739d8e20572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:d6:7f:42:db:5d:75:c7:1a:ee:7d:ab:96:
8f:50:b1:fa:9f:52:ae:9c:9b:8a:c8:62:1a:5a:84:
f9:56:ce:a4:ab:66:44:33:0a:5c:66:33:22:46:5c:
bd:0d:ed:de:aa:18:8d:4a:63:5b:9b:cb:d9:a1:cb:
cf:9e:db:b2:20:3b:52:82:f0:d2:f1:36:28:34:10:
be:1c:a9:25:55:10:5f:3a:0b:f4:16:8c:86:a0:45:
50:fb:ba:e2:82:1a:98:04:a6:26:f8:1c:ef:69:22:
cd:6d:07:f4:69:81:3b:0c:f6:8e:78:28:da:8b:49:
71:da:37:4e:aa:78:84:1a:5f:81:7f:5c:c8:c6:b7:
33:88:33:a2:2d:6f:15:4e:78:55:3b:d3:2f:c6:02:
0a:85:9f:47:98:1c:af:78:b8:db:c1:8f:ec:04:65:
0e:92:16:5f:38:2b:8b:4e:d6:68:20:c5:99:9f:1a:
3f:c1:a5:f9:3f:d5:3f:22:48:86:b9:59:ce:69:f7:
6a:09:35:0e:cc:f1:9b:ce:48:b7:f5:b1:34:50:eb:
f4:21:d2:1a:79:15:77:e6:5a:8b:50:ed:eb:51:29:
10:91:e8:f9:35:e1:38:7b:4d:6d:ec:ca:f4:d3:35:
fe:cb:7f:6e:14:f4:ed:92:8e:bc:e4:d2:93:94:b1:
f9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:BF:C1:E6:18:AB:91:87:6F:62:8E:5C:A5:37:39:D8:E2:05:72
X509v3 Authority Key Identifier:
keyid:FE:20:74:22:E1:EF:B3:CB:87:C2:50:C4:46:EC:22:A1:75:3F:FC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iB0IuHvs8uHwlDERuwioXU__FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/_iB0IuHvs8uHwlDERuwioXU__FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f2ec4-8eae-42b1-b74a-01aea4d300a6/1/_iB0IuHvs8uHwlDERuwioXU__FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:65:74:c7:8c:c7:96:bd:eb:c0:9c:fd:8a:04:8e:d0:9b:
df:01:15:0e:58:26:d1:b8:b9:9e:1d:97:09:92:40:b6:f2:b9:
d0:9b:ff:02:72:63:f1:d7:63:ca:ee:d2:d2:b7:53:e6:aa:54:
46:b6:33:61:13:b1:a2:9f:1a:dd:77:68:9d:7b:1c:e5:ff:a4:
9e:04:ff:28:51:9a:6f:71:29:25:18:ab:48:95:09:93:6b:0a:
c9:c5:c9:b0:c1:be:92:51:7b:1b:21:63:b3:c4:44:a5:63:4a:
0d:b2:97:e6:d7:70:6b:73:2c:3b:21:13:5a:63:f8:2a:68:56:
95:ce:a0:5a:7b:60:c3:77:78:59:b9:40:1d:78:e9:09:84:ad:
5e:91:78:68:89:38:7b:2a:2b:e3:e8:97:68:17:63:64:dc:5c:
cd:2e:ff:3f:2c:59:9c:fc:f2:34:c3:18:3e:84:6c:3e:49:0f:
cf:56:2e:19:18:30:f4:57:c4:a5:90:df:09:42:dc:d4:cb:78:
5f:f6:8b:76:94:02:be:8e:e9:ff:44:4e:a4:d8:20:7d:bc:c8:
f3:3b:f0:7e:20:5a:57:24:aa:78:8d:45:e3:e2:5b:6d:2b:95:
22:67:5c:70:e8:f6:e8:92:a1:33:11:7b:ef:69:ac:71:be:55:
8a:04:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:23 2025 by rpki-client