Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.mft
File: M-91L9mXi9QJO4LqtACb3L_3ec4.mft (raw, json)
Hash identifier: UlYjsBiZ8yhQfzhAphf6aVD/AWpK0vVvNkEB4ptrUQE=
Subject key identifier: F3:41:97:A3:28:F1:BD:00:88:9D:FA:93:53:F5:58:7A:A8:AB:27:E1
Authority key identifier: 33:EF:75:2F:D9:97:8B:D4:09:3B:82:EA:B4:00:9B:DC:BF:F7:79:CE
Certificate issuer: /CN=33ef752fd9978bd4093b82eab4009bdcbff779ce
Certificate serial: 018C6C46B8D86A7061A47AEBCED0AA266EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-91L9mXi9QJO4LqtACb3L_3ec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.mft
Manifest number: 0690
Signing time: Fri 15 Dec 2023 07:00:23 +0000
Manifest this update: Fri 15 Dec 2023 07:00:23 +0000
Manifest next update: Sat 16 Dec 2023 07:00:23 +0000
Files and hashes: 1: M-91L9mXi9QJO4LqtACb3L_3ec4.crl (hash: d5Tav0Z4ZdLQSjiArXLXPcZCCd/fMC9Hs6xFnAUHCP4=)
2: m4G8R3I2AG8wCi_2jPDmNKNcP9M.roa (hash: LM5QnM5Cyrh8zdHVW5rz11Y32ZhIuvJpcEm0E5UUzhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:46:b8:d8:6a:70:61:a4:7a:eb:ce:d0:aa:26:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ef752fd9978bd4093b82eab4009bdcbff779ce
Validity
Not Before: Dec 15 07:00:23 2023 GMT
Not After : Dec 16 07:00:23 2023 GMT
Subject: CN=f34197a328f1bd00889dfa9353f5587aa8ab27e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:e9:2d:ec:0c:1f:c0:4d:4d:bf:67:c8:79:
29:57:c9:6b:34:75:8c:cb:6b:84:c6:62:3a:8f:9d:
ac:01:7d:4b:5c:89:ec:72:7d:52:60:22:81:fa:03:
06:11:00:d8:1d:af:85:8f:b1:15:d0:bd:1f:d5:60:
76:73:b4:b5:99:67:80:59:5d:4b:cf:8b:ab:c1:0b:
ba:a9:a5:4d:10:65:a7:3e:1a:55:cf:40:96:35:2e:
89:05:0e:76:d1:f9:ad:7d:e5:00:19:6d:69:6f:7b:
24:4f:9f:fd:ce:80:3c:60:cf:1f:7f:d5:b8:29:98:
a6:4d:4c:56:61:b2:01:38:f6:83:80:de:cb:35:0c:
f9:75:ce:7c:19:88:94:b1:95:75:4f:9a:5f:1b:51:
50:40:a3:47:41:4d:53:04:d8:7a:06:15:f9:4c:89:
4b:7d:36:fd:42:4d:63:87:45:6b:56:6d:aa:c7:63:
e4:9c:0f:52:ed:e2:57:60:f3:7f:2a:c5:ca:17:ff:
74:f4:e9:24:77:c5:99:cb:52:95:c0:fa:ae:0e:01:
63:a0:10:58:5b:7c:ad:60:f0:99:bb:a8:e7:da:48:
a9:b3:b0:13:eb:62:2a:f8:cb:89:b9:81:f3:3e:6f:
9e:cb:0c:ce:8a:f9:45:07:2d:46:9f:80:7d:c4:c9:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:97:A3:28:F1:BD:00:88:9D:FA:93:53:F5:58:7A:A8:AB:27:E1
X509v3 Authority Key Identifier:
keyid:33:EF:75:2F:D9:97:8B:D4:09:3B:82:EA:B4:00:9B:DC:BF:F7:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-91L9mXi9QJO4LqtACb3L_3ec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/920469-38a8-4396-abfc-aea28de4b679/1/M-91L9mXi9QJO4LqtACb3L_3ec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6b:b3:47:57:fb:82:73:54:32:e0:b6:e3:0c:da:04:83:4d:
69:43:6f:32:30:d9:0d:b7:0f:76:d8:d0:d6:99:3e:a1:56:11:
53:a7:a5:72:91:b4:4a:cc:f9:56:dc:d2:8c:e9:4a:fb:df:1b:
8a:3b:a0:ec:9d:85:9a:8a:8e:2c:ed:aa:d8:89:6c:db:8d:a2:
86:2e:c3:af:db:cb:10:12:77:39:00:8e:2c:61:bd:36:57:fd:
09:89:1a:e6:1e:ff:33:25:1d:f0:5f:02:e4:78:bf:5d:42:11:
8a:f3:0b:e1:d6:54:2a:5c:4d:50:3b:48:fa:85:a4:e8:db:c4:
ae:42:13:aa:15:3b:29:ac:3c:88:6e:60:09:5b:16:23:66:7f:
7f:6d:11:71:40:24:94:ad:31:33:99:23:6e:6f:e3:ab:ef:fd:
1c:82:a9:87:c9:83:fc:d8:32:f6:33:01:b6:ad:b8:4f:cb:39:
44:26:aa:99:eb:1d:d5:9a:13:0f:dc:89:d6:14:2d:d8:49:4b:
1b:c8:9a:14:09:82:35:78:17:8c:a9:e3:91:2d:99:b7:6a:68:
2d:ad:d7:ff:a0:68:fa:76:a4:bc:28:f4:3b:6c:80:c2:78:cc:
71:91:e0:c9:33:ef:db:48:07:1f:b5:71:db:ed:fb:b9:eb:25:
32:d6:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:08 2025 by rpki-client