Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/968e74-8315-4056-a81d-04fd81c1080a/1/S12I5UjO6qYnwA1xjaBP1mfSxdE.mft
File: S12I5UjO6qYnwA1xjaBP1mfSxdE.mft (raw, json)
Hash identifier: SJhi02IKZDKmf8wfb7q7wmlwrWtHqnWRKqwUulMJZSY=
Subject key identifier: 30:DE:40:92:59:B6:0B:10:28:1B:E9:5E:6F:95:9B:C8:AD:49:C5:F9
Authority key identifier: 4B:5D:88:E5:48:CE:EA:A6:27:C0:0D:71:8D:A0:4F:D6:67:D2:C5:D1
Certificate issuer: /CN=4b5d88e548ceeaa627c00d718da04fd667d2c5d1
Certificate serial: 0186BB4AEEFF808512DB3C48B2D0CBBB656E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S12I5UjO6qYnwA1xjaBP1mfSxdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/968e74-8315-4056-a81d-04fd81c1080a/1/S12I5UjO6qYnwA1xjaBP1mfSxdE.mft
Manifest number: 0207
Signing time: Tue 07 Mar 2023 08:58:15 +0000
Manifest this update: Tue 07 Mar 2023 08:58:15 +0000
Manifest next update: Wed 08 Mar 2023 08:58:15 +0000
Files and hashes: 1: Hl9LE_aLl1nWjamelkbMuOlBDNc.roa (hash: f+38coOv/hUNXQlnR63I4qUWQPnti3EXtuOzgDobpv8=)
2: S12I5UjO6qYnwA1xjaBP1mfSxdE.crl (hash: KIAf/p28Vbq1NgLAUVKMqjzBkW/IhDXi+aWaktfro0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:4a:ee:ff:80:85:12:db:3c:48:b2:d0:cb:bb:65:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d88e548ceeaa627c00d718da04fd667d2c5d1
Validity
Not Before: Mar 7 08:58:15 2023 GMT
Not After : Mar 8 08:58:15 2023 GMT
Subject: CN=30de409259b60b10281be95e6f959bc8ad49c5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:7a:65:05:f3:07:9c:3d:35:08:5d:54:72:
b1:60:bb:f0:39:9a:47:56:aa:25:31:d0:fe:90:55:
48:f6:5a:24:aa:11:84:95:18:a8:26:fe:04:21:3b:
bf:fe:c1:19:ff:ef:f2:a4:1b:80:5f:ce:ae:33:5e:
c4:ac:aa:f7:75:de:a7:de:e3:91:13:4c:e7:5e:48:
f9:f7:c7:b5:31:b4:2a:ca:7a:f0:b2:19:bb:0c:87:
f7:53:f1:28:2c:88:1d:86:ee:44:31:62:cf:2a:8c:
96:15:d6:45:0d:9b:38:7c:c9:33:25:7d:fd:d6:a7:
c4:44:88:bd:cb:d4:5c:be:bb:28:69:56:11:4e:80:
18:1c:b8:eb:fb:04:b1:ba:bf:31:b9:44:66:8d:6a:
a8:66:91:28:0e:dc:24:19:68:4b:a3:b3:17:09:d0:
c3:37:99:ba:f4:ce:09:7e:64:19:2e:75:4f:ad:17:
da:81:64:77:7b:d7:13:c2:02:88:9d:4e:e4:52:eb:
c9:f8:1a:ae:05:2f:f0:b5:cc:80:24:02:38:15:50:
83:20:8b:26:9b:11:3d:ea:38:75:62:0a:20:8a:1d:
1f:88:c9:d8:4f:cf:df:1b:64:46:f9:b6:b4:eb:27:
2c:6f:91:dd:de:bb:b8:cc:8b:7c:78:0f:dc:86:89:
82:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DE:40:92:59:B6:0B:10:28:1B:E9:5E:6F:95:9B:C8:AD:49:C5:F9
X509v3 Authority Key Identifier:
keyid:4B:5D:88:E5:48:CE:EA:A6:27:C0:0D:71:8D:A0:4F:D6:67:D2:C5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S12I5UjO6qYnwA1xjaBP1mfSxdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/968e74-8315-4056-a81d-04fd81c1080a/1/S12I5UjO6qYnwA1xjaBP1mfSxdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/968e74-8315-4056-a81d-04fd81c1080a/1/S12I5UjO6qYnwA1xjaBP1mfSxdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6a:98:5a:ee:43:bd:89:e0:12:f1:c3:3f:56:98:d3:4d:2c:
b4:58:e3:12:76:09:d5:b8:9e:db:44:cb:13:0f:04:82:b6:fa:
77:26:a0:9b:1d:4c:c7:47:12:06:56:b2:96:5f:33:d9:78:f6:
00:80:3e:c7:f3:65:ee:f5:41:cf:40:78:01:e0:95:6a:74:24:
b2:fb:22:50:26:7e:cc:a8:2e:90:e1:73:f7:c6:2e:64:50:b2:
65:7a:3c:be:dc:14:27:bb:86:7c:79:73:67:48:ee:d9:9c:51:
a6:56:d1:14:d4:22:d4:8b:e0:82:58:a2:f4:2f:42:cb:fd:c6:
9c:81:dd:f0:82:c8:68:b6:30:6e:91:30:21:ff:59:fe:a5:ea:
3f:9a:ea:5d:09:eb:c5:0d:cb:ca:9f:f2:44:05:cb:83:20:e4:
57:b9:ab:2a:f8:72:14:d0:fb:ca:c6:c8:f8:2e:22:e1:4d:46:
a5:e9:81:af:64:c4:f8:51:da:f3:26:f3:c6:ce:92:dc:ef:af:
c1:61:98:cd:3c:6c:d9:ca:aa:cd:a2:f3:90:3f:f1:52:91:f4:
c4:58:d0:74:fc:fd:11:d1:49:3c:d0:5e:87:47:57:cd:63:f0:
d0:ec:5c:88:41:0a:cb:36:e3:68:7a:4f:12:4d:d6:34:b6:a1:
a5:09:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:18:44 2025 by rpki-client