Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/878550-252b-478d-bbd9-896ff2304c97/1/R57mSNgpNDU9IHZYPaCPO7xDhc0.mft
File: R57mSNgpNDU9IHZYPaCPO7xDhc0.mft (raw, json)
Hash identifier: UYZQPJTsXy4uzEOB2e0ZqfhesThT28uSm99cU1hCD+A=
Subject key identifier: F8:07:2C:C7:72:D5:A0:87:FE:B6:B0:7D:B4:BF:EA:F9:00:66:7F:77
Authority key identifier: 47:9E:E6:48:D8:29:34:35:3D:20:76:58:3D:A0:8F:3B:BC:43:85:CD
Certificate issuer: /CN=479ee648d82934353d2076583da08f3bbc4385cd
Certificate serial: 018BB1D05F9F0A07A46CE77854A24C230D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R57mSNgpNDU9IHZYPaCPO7xDhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/878550-252b-478d-bbd9-896ff2304c97/1/R57mSNgpNDU9IHZYPaCPO7xDhc0.mft
Manifest number: 0866
Signing time: Thu 09 Nov 2023 02:01:45 +0000
Manifest this update: Thu 09 Nov 2023 02:01:45 +0000
Manifest next update: Fri 10 Nov 2023 02:01:45 +0000
Files and hashes: 1: C2AMq8i3xCPPqtUDT51YT619978.roa (hash: we7cYwnSg4TF4wsLQaiGDwFgfPA2hq4K7WHJ8q+0NDQ=)
2: R57mSNgpNDU9IHZYPaCPO7xDhc0.crl (hash: L+qAGhVcOaG8G6ij/Q8XgNqKcjnp7LiJY3B9o+RtTcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b1:d0:5f:9f:0a:07:a4:6c:e7:78:54:a2:4c:23:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479ee648d82934353d2076583da08f3bbc4385cd
Validity
Not Before: Nov 9 02:01:45 2023 GMT
Not After : Nov 10 02:01:45 2023 GMT
Subject: CN=f8072cc772d5a087feb6b07db4bfeaf900667f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:84:a8:86:3a:2a:cb:fa:41:57:a3:37:11:
db:61:f6:74:ec:f7:51:0e:74:f7:3e:00:24:ea:c0:
02:7c:a9:99:38:17:91:21:40:57:0e:dd:e4:64:29:
8c:cd:66:a4:83:5c:44:00:5d:81:fd:70:4f:6c:2d:
d4:a9:95:ba:19:48:22:dc:13:cf:bf:59:f6:5f:b7:
1b:d1:c8:11:4f:fb:35:85:05:2d:b0:84:2f:ba:38:
cc:c9:6e:99:19:1f:59:ec:12:65:85:ef:d2:2e:ee:
f2:02:d0:e4:f8:d0:26:fa:dd:68:1c:06:79:2e:69:
47:15:c9:1f:e1:0c:6c:40:b0:11:7e:a2:46:0a:f0:
12:e9:fb:ec:64:f4:3a:ca:0a:71:8e:32:7e:8b:73:
73:15:a9:e5:5b:a6:46:c2:c9:73:81:b6:5a:f6:34:
52:1a:23:4b:a6:ab:a9:da:bf:81:a5:74:2b:33:53:
46:6d:c6:8c:7d:a1:ff:7d:c5:af:cc:79:f0:01:47:
14:05:22:93:36:a4:28:94:12:23:49:6b:a5:33:42:
a9:bb:e4:61:ad:84:08:c4:22:fa:19:52:0e:a3:a4:
dc:fa:6e:dc:5f:54:27:83:a5:2f:2e:bd:70:a1:1a:
69:f3:4c:4e:b2:a8:41:d3:4b:57:0f:e6:21:90:60:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:2C:C7:72:D5:A0:87:FE:B6:B0:7D:B4:BF:EA:F9:00:66:7F:77
X509v3 Authority Key Identifier:
keyid:47:9E:E6:48:D8:29:34:35:3D:20:76:58:3D:A0:8F:3B:BC:43:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R57mSNgpNDU9IHZYPaCPO7xDhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/878550-252b-478d-bbd9-896ff2304c97/1/R57mSNgpNDU9IHZYPaCPO7xDhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/878550-252b-478d-bbd9-896ff2304c97/1/R57mSNgpNDU9IHZYPaCPO7xDhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:dc:6c:38:2f:8d:18:1b:75:8f:b0:4d:91:28:6e:6e:85:98:
ec:b8:8f:bc:b3:25:dc:41:0f:b5:80:19:13:81:1c:3c:49:e4:
05:ef:9d:2a:29:72:45:a6:0d:ca:d4:aa:12:44:aa:26:87:d1:
58:47:48:6c:74:d5:45:cc:74:d6:c2:96:87:f3:b4:d9:5c:0b:
44:69:34:79:2a:f3:84:f2:6f:2f:45:aa:19:13:5d:40:7f:96:
c7:e2:ea:66:23:42:4f:f6:ce:6a:d4:98:1f:7c:92:bb:88:73:
84:2f:df:cc:92:db:01:6e:c1:f4:b1:5b:80:5b:f3:ba:bd:b6:
1c:df:a8:33:26:58:59:3a:12:49:ca:88:47:0e:d0:63:3c:f3:
f3:73:99:ef:b9:37:c8:e7:58:ae:87:91:90:29:98:6d:50:53:
3d:94:d0:ef:05:d4:39:8f:14:11:21:21:e4:04:fa:89:9c:13:
ad:ce:76:ce:0a:04:2c:fd:dd:88:38:fd:cb:a5:12:6c:38:a9:
e6:4f:1e:b8:6f:64:d4:f0:b9:25:ed:f2:cc:c5:1c:ca:ba:d5:
75:50:89:e0:d2:a3:09:dd:34:ae:d9:b4:5b:93:d3:9d:ae:09:
67:64:92:94:10:b7:4f:91:c1:d6:e2:82:58:e7:24:ed:d5:a2:
45:fc:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:25:46 2025 by rpki-client