Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/52f0c5-95dd-44f5-b190-a90f06abb0c4/1/RiLq7fkIXdb9-F7KxuZOPVh8fDk.mft
File: RiLq7fkIXdb9-F7KxuZOPVh8fDk.mft (raw, json)
Hash identifier: 55LNuLNOUE7synI02xUeSF6FI3a9Edrmao4kXGOZB1c=
Subject key identifier: BC:31:B2:D9:FA:F4:1F:2B:9A:5C:CE:A0:55:4B:05:44:E4:D8:39:6A
Authority key identifier: 46:22:EA:ED:F9:08:5D:D6:FD:F8:5E:CA:C6:E6:4E:3D:58:7C:7C:39
Certificate issuer: /CN=4622eaedf9085dd6fdf85ecac6e64e3d587c7c39
Certificate serial: 038303C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiLq7fkIXdb9-F7KxuZOPVh8fDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/52f0c5-95dd-44f5-b190-a90f06abb0c4/1/RiLq7fkIXdb9-F7KxuZOPVh8fDk.mft
Manifest number: 04B1
Signing time: Fri 27 May 2022 05:45:20 +0000
Manifest this update: Fri 27 May 2022 05:45:20 +0000
Manifest next update: Sat 28 May 2022 05:45:20 +0000
Files and hashes: 1: 6PXhLXPhhrtXyVSLSvRBTIRIMjw.roa (hash: X3XaCIlpsCahY9qPmWEWhJcS0hHIDWoA4ZSGfHdvPPA=)
2: RiLq7fkIXdb9-F7KxuZOPVh8fDk.crl (hash: e6RhqXFeB38VXA4oP6AgWUOswausfFrHFpHRCOKSQzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58917825 (0x38303c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4622eaedf9085dd6fdf85ecac6e64e3d587c7c39
Validity
Not Before: May 27 05:45:20 2022 GMT
Not After : May 28 05:45:20 2022 GMT
Subject: CN=bc31b2d9faf41f2b9a5ccea0554b0544e4d8396a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:44:2f:24:83:06:f5:3e:09:55:4c:40:86:
ae:5d:2e:6e:14:0a:d6:aa:fb:5f:d5:2f:91:33:50:
7a:71:f1:69:54:44:37:cc:07:5d:8d:7c:99:de:63:
c1:7f:93:15:54:74:60:10:b3:4c:f3:14:04:78:44:
b9:66:ab:67:63:d4:4c:78:8a:95:b0:54:3e:60:f7:
f6:ad:61:e2:b3:f9:2e:b8:64:42:64:0e:d0:4c:74:
1b:2a:f2:fd:36:bb:dd:e9:b8:31:df:52:ff:c6:ca:
f5:89:5c:ca:6a:dd:a8:95:fa:5f:d7:1b:8b:8e:e0:
de:53:c5:2a:10:e7:6e:c3:5f:63:76:72:ac:11:96:
59:41:09:a5:74:89:25:be:ac:6a:fc:4c:a8:a8:99:
cd:19:a1:ab:a1:63:07:91:57:a9:d8:ae:24:7b:a9:
14:1f:15:48:66:27:de:2c:9a:fd:c9:d9:25:62:41:
66:cc:43:e2:07:33:e5:23:a1:87:80:9b:14:ac:83:
f4:5c:cc:8b:2e:d0:bd:6b:7f:38:03:e7:72:8a:6e:
72:19:ee:c6:11:de:54:2e:12:b7:8d:75:f8:67:4b:
09:8c:1f:66:8a:15:f8:61:dd:61:07:a5:15:50:2e:
ff:4d:f3:69:bb:4f:06:a0:eb:4e:6c:bd:1c:f2:a5:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:31:B2:D9:FA:F4:1F:2B:9A:5C:CE:A0:55:4B:05:44:E4:D8:39:6A
X509v3 Authority Key Identifier:
keyid:46:22:EA:ED:F9:08:5D:D6:FD:F8:5E:CA:C6:E6:4E:3D:58:7C:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiLq7fkIXdb9-F7KxuZOPVh8fDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/52f0c5-95dd-44f5-b190-a90f06abb0c4/1/RiLq7fkIXdb9-F7KxuZOPVh8fDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/52f0c5-95dd-44f5-b190-a90f06abb0c4/1/RiLq7fkIXdb9-F7KxuZOPVh8fDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:57:46:b3:e6:43:03:5b:62:47:79:88:18:09:8c:28:ba:22:
a3:6d:4c:62:5f:61:ea:84:0f:81:81:e9:56:43:5f:3e:c6:95:
58:1b:a7:51:e3:ba:44:62:3f:dd:b2:18:ac:04:03:ac:3c:4b:
f5:8e:ec:c2:7c:d4:8f:6c:9a:90:75:ef:77:30:cf:fd:65:50:
b9:85:5d:8c:fc:8b:2d:04:9e:21:ce:4b:1d:47:df:9e:97:81:
b3:a9:8a:c2:48:3e:06:46:04:13:aa:e4:af:2b:ec:7e:7d:94:
9e:79:8e:84:13:b4:db:04:49:2d:cc:f9:d9:61:b1:28:74:a3:
40:bd:56:30:cf:2e:8c:c0:87:85:52:d6:0c:f6:b9:95:47:2f:
f1:40:72:3a:cf:47:11:27:c7:77:d3:dd:cd:c9:54:cd:eb:7b:
9e:d4:13:84:df:3f:de:d0:5f:f2:90:1f:76:9d:48:c8:36:14:
72:b0:ae:b1:1d:42:34:16:1a:38:5a:f2:3c:c1:e9:32:7b:f5:
d0:58:f3:86:15:bd:14:f4:3a:01:46:0a:f1:29:b1:18:ba:2c:
97:40:df:a2:4b:4e:2e:8c:2c:8f:c6:0c:7b:ee:59:7c:b4:0e:
97:76:9b:30:cb:2c:93:bf:ae:6d:55:60:89:f9:17:90:bd:c5:
d0:c9:65:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:21 2025 by rpki-client