Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.mft
File: S50e1m3wGh5JkqdF_9u81anmCMs.mft (raw, json)
Hash identifier: OzYfj5WwdTQgxa8XvGlfW0nTV4NnrxK1VuyVESom8T8=
Subject key identifier: D4:4B:A4:F6:08:55:98:33:23:B1:F0:16:72:3D:35:39:C3:A6:65:3C
Authority key identifier: 4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
Certificate issuer: /CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
Certificate serial: 0188329B98B3716DE05E8F34BCCA887E655C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.mft
Manifest number: 07EB
Signing time: Fri 19 May 2023 06:03:57 +0000
Manifest this update: Fri 19 May 2023 06:03:57 +0000
Manifest next update: Sat 20 May 2023 06:03:57 +0000
Files and hashes: 1: S50e1m3wGh5JkqdF_9u81anmCMs.crl (hash: jCPmhvHgt2c9XHV+KcjkjqhMNr+kuSJ4ioxJyZETHGQ=)
2: _DGUdigNlKiD9xO4QSEF4BKCt08.roa (hash: z7WDVXgi3Pw2TkLUYXKxpCULS1iHPgf/F7suU7KGInU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:9b:98:b3:71:6d:e0:5e:8f:34:bc:ca:88:7e:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9d1ed66df01a1e4992a745ffdbbcd5a9e608cb
Validity
Not Before: May 19 06:03:57 2023 GMT
Not After : May 20 06:03:57 2023 GMT
Subject: CN=d44ba4f60855983323b1f016723d3539c3a6653c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:81:3c:e8:31:c4:9e:7f:cb:4e:79:15:99:
e8:02:26:dc:d7:ca:a7:e9:e1:8a:48:cf:7c:b0:68:
16:bc:5c:ff:04:2b:a3:0a:a3:f1:08:ed:da:8f:27:
3a:44:90:bb:2a:bf:dd:35:de:ba:ef:7d:a8:09:e4:
37:6f:5f:a3:ca:88:c7:8b:62:da:69:4a:be:77:95:
b5:f9:7a:f8:30:15:af:38:ec:ba:3b:f7:95:a8:d8:
84:4a:c6:a3:52:28:25:e2:ea:06:5e:84:77:46:5b:
6d:3f:81:75:0c:c8:a4:5a:85:74:c6:61:9a:51:24:
0c:99:c2:4c:f8:1b:5d:b9:52:52:a0:8f:e6:73:a8:
aa:88:39:d6:b0:e2:ed:be:ac:ea:5a:c0:75:5a:3f:
40:3d:0f:dd:34:ea:ee:a3:ca:8a:9f:70:86:73:52:
b6:1a:f8:00:04:3b:7e:57:d5:87:95:ff:a2:82:eb:
77:90:8f:d2:5d:4e:17:b8:66:77:df:ba:81:9d:b5:
f1:a7:a6:bd:2f:6a:8e:cf:87:32:87:91:50:58:8c:
d4:bd:4b:9d:dc:22:ab:1c:a9:d8:70:a9:ac:e7:a4:
d3:fb:d6:28:4d:9c:52:a7:47:cf:8a:ef:5f:e0:8a:
d0:33:f0:b9:6d:85:1c:a0:33:35:e9:52:17:9b:24:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4B:A4:F6:08:55:98:33:23:B1:F0:16:72:3D:35:39:C3:A6:65:3C
X509v3 Authority Key Identifier:
keyid:4B:9D:1E:D6:6D:F0:1A:1E:49:92:A7:45:FF:DB:BC:D5:A9:E6:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S50e1m3wGh5JkqdF_9u81anmCMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd683-3105-4b31-927e-f35845bac915/1/S50e1m3wGh5JkqdF_9u81anmCMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6d:30:40:d5:50:88:ee:04:71:40:2e:d9:7a:6a:f7:a9:8c:
ea:49:2f:60:b1:54:19:f4:27:26:2d:e6:91:ea:4a:7f:53:d4:
da:31:f5:94:8a:4d:88:32:ff:62:ee:1b:55:aa:ce:ba:fd:3d:
87:1d:bf:c9:c6:ac:54:af:62:9b:9e:43:43:d9:97:cc:eb:8b:
47:61:84:9c:c7:50:11:3b:e4:66:b7:b3:d4:76:bf:92:1f:0e:
12:1e:a8:2b:a4:8a:e9:a9:35:da:02:93:89:d0:ab:99:e3:67:
d4:d1:2a:89:63:23:18:e5:8e:65:9f:8c:2d:fe:8f:68:87:a1:
97:bf:ce:b3:5f:f2:ce:48:d4:32:fa:49:42:05:d1:d8:2c:c5:
8b:b3:8c:81:8d:3f:ec:86:eb:1b:e6:76:49:67:26:99:6a:98:
ff:f3:73:33:bc:bc:8f:d8:e0:9e:ff:09:78:f1:ff:0b:e0:88:
20:86:69:e1:66:79:02:e9:29:ab:2c:8a:73:2b:65:e1:02:c8:
bf:ec:f6:78:aa:48:93:6d:73:5b:c4:34:25:5c:e7:94:21:16:
7e:0e:66:8e:ac:cf:4a:66:02:10:7a:47:c1:3b:82:b2:38:93:
89:5a:01:7f:ca:ed:0e:ce:70:f1:a3:b6:32:1e:64:51:fc:65:
21:81:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:39 2025 by rpki-client