Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/P1AbS4r8I5ziVs0dOR1xdPk7JRU.mft
File: P1AbS4r8I5ziVs0dOR1xdPk7JRU.mft (raw, json)
Hash identifier: OpCR+jdpm8kv9x0vQzDGgWdrouZyQEqrxJ4cIQ/W38k=
Subject key identifier: 66:90:EB:72:2D:3C:CA:E5:51:73:1E:14:0C:92:EC:7C:02:1F:46:B3
Authority key identifier: 3F:50:1B:4B:8A:FC:23:9C:E2:56:CD:1D:39:1D:71:74:F9:3B:25:15
Certificate issuer: /CN=3f501b4b8afc239ce256cd1d391d7174f93b2515
Certificate serial: 018B385BD5A58083C63746FBD95D54D333B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1AbS4r8I5ziVs0dOR1xdPk7JRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/P1AbS4r8I5ziVs0dOR1xdPk7JRU.mft
Manifest number: 074F
Signing time: Mon 16 Oct 2023 12:00:24 +0000
Manifest this update: Mon 16 Oct 2023 12:00:24 +0000
Manifest next update: Tue 17 Oct 2023 12:00:24 +0000
Files and hashes: 1: JuP7JOSzKtzgX8XX8pZfUZdAl4w.roa (hash: lCRQAKGH/XtSbGk2k2zL9fYCueICKPjbp2fZMW48kj4=)
2: P1AbS4r8I5ziVs0dOR1xdPk7JRU.crl (hash: wZngRgbdxpWGb+NGrt9Pssam9RXGH7sVk/wS7/GeSGE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:5b:d5:a5:80:83:c6:37:46:fb:d9:5d:54:d3:33:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f501b4b8afc239ce256cd1d391d7174f93b2515
Validity
Not Before: Oct 16 12:00:24 2023 GMT
Not After : Oct 17 12:00:24 2023 GMT
Subject: CN=6690eb722d3ccae551731e140c92ec7c021f46b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:57:b5:37:9b:db:b0:d6:30:1f:40:2c:a2:50:
f5:f3:1e:cb:3a:28:2b:5a:56:2f:29:dc:30:c9:61:
ed:2a:9f:bc:79:0e:4a:1b:2a:7c:fe:c6:55:be:c8:
8c:52:78:b4:fe:26:31:ff:17:fd:f1:fc:dd:6a:1a:
e5:4b:89:9e:04:96:42:87:71:cd:b3:21:8c:46:0f:
87:a4:7e:be:57:16:66:07:3c:06:27:5d:e5:bf:74:
bb:e3:0d:b7:a9:9d:59:dc:45:ca:0d:26:96:73:b0:
10:22:da:87:80:5d:a3:2a:07:37:5e:f2:c2:92:ac:
c1:c2:9d:48:88:83:3d:37:7b:bf:7d:c8:f6:ed:bb:
7b:12:8a:8d:98:a7:a5:63:58:35:48:58:d1:dc:02:
93:b3:cb:f8:da:03:b6:be:33:6b:e0:42:8a:ce:fa:
e9:a1:ac:fb:4a:9b:b8:84:64:1e:bf:53:d8:45:43:
9e:9b:d1:70:b2:ec:6d:4a:4f:05:52:ca:85:49:f1:
d6:60:34:46:a2:f1:99:8e:d4:d7:4b:58:4c:7e:d2:
a7:9c:47:41:8d:03:75:a0:fc:91:f2:95:38:b5:8d:
d5:96:10:cf:c2:ce:92:a2:17:8f:fc:fc:16:bd:bc:
6a:ff:2a:6e:ad:54:28:35:ef:9b:97:86:d9:c7:b0:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:EB:72:2D:3C:CA:E5:51:73:1E:14:0C:92:EC:7C:02:1F:46:B3
X509v3 Authority Key Identifier:
keyid:3F:50:1B:4B:8A:FC:23:9C:E2:56:CD:1D:39:1D:71:74:F9:3B:25:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1AbS4r8I5ziVs0dOR1xdPk7JRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/P1AbS4r8I5ziVs0dOR1xdPk7JRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/P1AbS4r8I5ziVs0dOR1xdPk7JRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:14:c6:e1:19:24:73:15:22:26:76:14:e8:6f:a5:6c:bf:59:
02:5d:68:9d:1f:11:a9:37:84:52:90:5d:3f:45:6e:ba:5f:2c:
87:56:f4:61:3f:f0:07:86:08:14:9f:e3:42:48:50:b8:f1:8f:
33:38:46:d2:2e:50:12:cf:77:2b:77:d1:74:6a:80:0d:ab:b5:
b9:89:fe:be:fa:7e:1b:94:aa:cb:f4:3b:0d:27:37:76:c1:0a:
b9:1d:e2:7a:9f:a2:08:e3:6b:0b:e9:2d:09:47:99:71:eb:51:
de:b1:e6:89:8a:f9:48:84:33:14:b7:85:a2:48:8a:3d:0f:88:
62:b5:6a:d0:84:8c:39:a7:ff:09:b0:37:ad:2e:f5:2b:05:93:
16:05:46:f7:4e:cd:0e:0f:7d:34:cb:f4:e7:ef:cc:db:f3:80:
00:8c:e6:34:06:6f:41:85:2a:93:dc:17:26:43:01:63:44:34:
dd:ac:5f:7f:58:93:4a:2d:da:b5:8b:cc:74:25:8c:2a:67:65:
8b:ea:e9:45:ba:c3:c6:c8:77:8f:5e:bd:f0:14:5c:7e:e5:60:
5b:86:63:2a:0e:89:e5:57:93:85:6f:d4:4c:15:7e:ba:33:a4:
60:65:b4:68:61:36:a5:33:83:92:f2:ab:79:48:f6:9d:0f:52:
b9:39:54:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:53:57 2025 by rpki-client