Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfc002-c1c0-4b65-aa7c-2213691facfb/1/P-RyPe76IQkZipV_36cRLDQvz8k.mft
File: P-RyPe76IQkZipV_36cRLDQvz8k.mft (raw, json)
Hash identifier: 7DPIowwVXmhgGIlGZO9rNmIspIpwinq1CpsQIaKsmlI=
Subject key identifier: 96:68:A3:FF:BB:B6:5B:EA:E2:BC:F2:C9:34:15:2B:CE:B2:18:1E:22
Authority key identifier: 3F:E4:72:3D:EE:FA:21:09:19:8A:95:7F:DF:A7:11:2C:34:2F:CF:C9
Certificate issuer: /CN=3fe4723deefa2109198a957fdfa7112c342fcfc9
Certificate serial: 018BEA07B9F37AA821DB67318130E8028C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-RyPe76IQkZipV_36cRLDQvz8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfc002-c1c0-4b65-aa7c-2213691facfb/1/P-RyPe76IQkZipV_36cRLDQvz8k.mft
Manifest number: 0868
Signing time: Mon 20 Nov 2023 00:00:56 +0000
Manifest this update: Mon 20 Nov 2023 00:00:56 +0000
Manifest next update: Tue 21 Nov 2023 00:00:56 +0000
Files and hashes: 1: JyLCZ_bR6wM80rw16r6avCjwz0Y.roa (hash: 6zadc1R7fT4zJIakPb+UDH/ampE8zd7xVejRJnevl/o=)
2: P-RyPe76IQkZipV_36cRLDQvz8k.crl (hash: +BvN+TDOyCFWfxBto34hi0govfhCWdX/iGU6OiitypM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ea:07:b9:f3:7a:a8:21:db:67:31:81:30:e8:02:8c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe4723deefa2109198a957fdfa7112c342fcfc9
Validity
Not Before: Nov 20 00:00:56 2023 GMT
Not After : Nov 21 00:00:56 2023 GMT
Subject: CN=9668a3ffbbb65beae2bcf2c934152bceb2181e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:a9:56:24:1e:9c:29:df:9a:bf:3f:6e:b6:
ed:80:ba:01:26:3f:12:07:ee:b5:6a:2e:92:9a:b3:
be:f7:7f:a6:4e:29:f1:c0:1f:a3:b7:f2:d6:d2:4e:
2d:e6:3e:27:fc:25:f7:03:3e:a6:3e:8e:2c:01:e7:
f0:c0:8b:7f:79:ae:62:d5:d8:58:e6:4c:d6:f4:91:
c6:4f:f7:a9:ca:66:34:56:9e:1c:6c:19:01:92:fd:
45:21:35:40:5c:6d:f1:0d:04:02:9d:dc:b3:bd:7a:
44:ee:27:93:ee:3e:81:1a:91:9f:fd:03:b9:fc:2d:
81:16:d2:c8:59:58:48:48:89:be:ed:39:b1:8c:b5:
6c:da:df:39:8e:f9:c3:d6:10:ac:7f:79:6f:8b:58:
1d:32:c8:11:04:5d:85:8b:2d:7a:1f:b8:3b:89:49:
79:28:7a:bd:be:56:a0:d4:99:32:af:74:35:38:ed:
0c:9b:9e:0c:01:1c:c3:19:a3:0a:83:7c:f5:7b:df:
38:87:74:ab:3f:7c:49:e1:ec:2d:db:cd:6d:ea:8c:
2e:fa:cb:14:f6:07:d5:e2:eb:64:c7:d1:b8:96:02:
03:69:08:e0:a3:35:a3:98:e2:5e:c2:16:e9:bd:fc:
1e:18:95:8e:67:31:9a:23:b0:ee:ea:4a:29:9d:ec:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:A3:FF:BB:B6:5B:EA:E2:BC:F2:C9:34:15:2B:CE:B2:18:1E:22
X509v3 Authority Key Identifier:
keyid:3F:E4:72:3D:EE:FA:21:09:19:8A:95:7F:DF:A7:11:2C:34:2F:CF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-RyPe76IQkZipV_36cRLDQvz8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfc002-c1c0-4b65-aa7c-2213691facfb/1/P-RyPe76IQkZipV_36cRLDQvz8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfc002-c1c0-4b65-aa7c-2213691facfb/1/P-RyPe76IQkZipV_36cRLDQvz8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:05:cc:a4:41:73:83:05:2f:ba:22:bc:28:c0:c3:09:58:2e:
5e:93:08:3f:cf:24:e1:60:54:a9:2f:a9:ac:59:58:11:97:fa:
88:d8:54:75:f0:8c:2a:6c:f7:7b:72:88:b0:2f:9e:c6:12:db:
1a:d4:6f:5b:bd:33:93:43:95:86:18:c3:42:c9:cc:6d:a3:1e:
b3:cc:f1:a1:2d:d8:fc:d6:67:be:76:d2:8a:01:ec:d1:ad:0c:
d5:30:98:5d:8c:66:d4:b5:e0:a4:70:fb:10:95:ac:34:10:e1:
17:2c:67:97:d1:24:09:be:b1:ba:cb:c4:61:00:3a:99:45:e8:
8a:a5:21:02:30:c3:f6:20:25:0f:7b:91:12:04:9c:26:d6:66:
88:56:2e:10:a3:91:fa:e5:47:19:62:f0:ab:a8:4a:61:cd:4e:
b3:05:3b:2f:3a:40:32:63:3c:f4:cb:7f:65:df:cf:a6:a6:17:
24:ec:bc:5a:0c:88:94:7c:94:22:79:7b:8d:e7:90:95:e2:48:
a0:d0:fb:af:e8:89:e7:b0:14:ec:86:2e:6b:8e:eb:57:61:08:
bb:c0:41:6e:ba:c8:fe:c0:3b:83:47:01:25:fd:b1:6c:64:0b:
1f:47:2d:be:ef:7e:22:e3:8c:fd:26:de:81:8e:31:93:96:34:
cf:96:b7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:55 2025 by rpki-client