Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.mft
File: aQ2FgcRkyZa8-Ca8JWVKVQSVf40.mft (raw, json)
Hash identifier: 2sGdkSZ6f5+avHa/0AgVJ6l4b/bYhkfBi9O0oWfvS+g=
Subject key identifier: E1:69:9A:BB:8A:28:0B:E5:49:99:90:9C:B0:65:84:24:A3:9F:F7:A7
Authority key identifier: 69:0D:85:81:C4:64:C9:96:BC:F8:26:BC:25:65:4A:55:04:95:7F:8D
Certificate issuer: /CN=690d8581c464c996bcf826bc25654a5504957f8d
Certificate serial: 0189066A069739DE5D049CCAF1EFAC4F519E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.mft
Manifest number: 0878
Signing time: Thu 29 Jun 2023 09:09:18 +0000
Manifest this update: Thu 29 Jun 2023 09:09:18 +0000
Manifest next update: Fri 30 Jun 2023 09:09:18 +0000
Files and hashes: 1: ABJeBSRerc6ln8Nq1O24UKU-kIQ.roa (hash: wbHLDg1zgSa2lEkw/I9y9oawv8nZRjML/tbJECp7ZGQ=)
2: aQ2FgcRkyZa8-Ca8JWVKVQSVf40.crl (hash: w+LdHqTXqo5+SARIqzFPC5NhX70pSPZmiI/Mr3EDNHA=)
3: tw47GNmTZrjPWL35egmoBkYJhEw.roa (hash: S1CiwroLJFppp4FVAx+GNzmZIvQlkfEHvcwoaTgLluw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:6a:06:97:39:de:5d:04:9c:ca:f1:ef:ac:4f:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690d8581c464c996bcf826bc25654a5504957f8d
Validity
Not Before: Jun 29 09:09:18 2023 GMT
Not After : Jun 30 09:09:18 2023 GMT
Subject: CN=e1699abb8a280be54999909cb0658424a39ff7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b5:33:9a:04:c8:a5:ee:8d:c2:f4:6a:79:fd:
7f:fe:88:fc:6c:ac:65:fc:c8:e1:42:02:aa:37:01:
8a:3d:5f:cd:72:58:31:df:bf:fe:8e:e1:b5:2a:e8:
04:91:71:11:eb:d6:68:99:18:5c:ae:9a:57:73:65:
46:12:2d:4b:5f:77:f4:72:39:c6:aa:62:35:5c:0b:
27:78:6f:55:91:96:63:a5:60:7f:9c:65:29:17:42:
7f:4d:e5:99:34:36:49:da:40:cd:f4:2a:a3:c8:34:
53:76:70:47:ae:2d:eb:3f:fd:2c:90:42:6e:06:b3:
34:bc:35:c1:a3:bc:bc:99:33:15:10:b7:96:e7:51:
53:43:3e:11:b6:55:d8:52:58:1b:28:9f:77:2d:0e:
47:26:4d:69:15:1d:20:7b:d8:04:8b:a0:db:d5:3f:
6c:e5:52:65:0c:7d:00:df:69:07:c6:6d:29:d9:3e:
48:80:ca:d8:e5:48:79:45:e9:38:f5:64:96:75:35:
22:d2:22:aa:49:a1:4a:c9:99:e0:a3:c8:45:5c:99:
28:05:52:1a:59:1f:e3:55:f4:1b:b3:f4:32:f0:c1:
01:46:05:5f:15:e1:43:bd:81:69:67:e1:5d:86:a6:
d1:df:c9:96:76:55:f3:26:aa:50:f1:75:8e:e4:8c:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:9A:BB:8A:28:0B:E5:49:99:90:9C:B0:65:84:24:A3:9F:F7:A7
X509v3 Authority Key Identifier:
keyid:69:0D:85:81:C4:64:C9:96:BC:F8:26:BC:25:65:4A:55:04:95:7F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:aa:db:16:7f:b6:64:34:66:35:64:b9:5a:55:a8:b9:40:07:
8b:18:20:64:8c:a4:a1:88:30:c5:ea:45:ba:ac:09:9a:db:c5:
a1:78:37:4d:cb:4c:5d:ca:81:8b:b6:50:1e:43:fe:69:eb:01:
09:c8:dc:f3:08:b8:71:cc:47:23:50:6e:b5:be:0a:70:0c:9d:
2e:94:66:8f:85:20:43:79:b4:0e:95:1f:3e:fa:16:0f:e6:1c:
d5:8a:ac:04:1c:bb:45:fa:bb:81:4e:77:8d:12:57:18:78:10:
ee:62:1e:94:ef:3a:e8:53:92:87:f3:94:74:07:7c:f4:94:09:
2a:a8:62:35:42:ed:1a:8c:0f:f6:3b:97:0f:3f:8a:b9:65:fe:
fb:78:41:f8:fc:4b:71:78:bf:a7:25:5e:5c:8b:d5:49:58:49:
31:df:c3:0c:15:13:66:80:c9:79:a8:31:17:1f:47:7e:c6:cf:
b6:d1:34:ed:0e:5c:64:0b:28:fe:64:70:c9:64:f2:34:5e:0e:
78:57:62:2c:47:2a:c8:7c:cb:49:08:a5:4b:23:7c:35:14:31:
dc:c0:19:ec:bb:1e:67:11:dd:a2:db:77:b3:5b:b0:7b:d5:3e:
0a:ef:c9:3e:55:45:07:ce:4c:8a:e6:5c:bb:7a:c0:91:08:82:
10:ea:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:53:38 2025 by rpki-client