Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/unH5gVBTju5p3u0tUyMSqinXxyE.mft
File: unH5gVBTju5p3u0tUyMSqinXxyE.mft (raw, json)
Hash identifier: wdiCOYtsY7aZuH+tHAZ6qNIUNSnAL188JAhAjY2OJiE=
Subject key identifier: 90:A7:BE:B2:19:BC:60:2B:4D:3B:B0:6F:89:5B:BC:E2:54:D1:93:5D
Authority key identifier: BA:71:F9:81:50:53:8E:EE:69:DE:ED:2D:53:23:12:AA:29:D7:C7:21
Certificate issuer: /CN=ba71f98150538eee69deed2d532312aa29d7c721
Certificate serial: 018B68DAE233452AE8FD72F32EE1AF1DE104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unH5gVBTju5p3u0tUyMSqinXxyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/unH5gVBTju5p3u0tUyMSqinXxyE.mft
Manifest number: 086A
Signing time: Wed 25 Oct 2023 22:00:56 +0000
Manifest this update: Wed 25 Oct 2023 22:00:56 +0000
Manifest next update: Thu 26 Oct 2023 22:00:56 +0000
Files and hashes: 1: dregSeRH74s91Vr4NnXjtYIWnI0.roa (hash: jGB3Pq0VaIDyStw4crfdMVsBV6vhTnO/9ssyILnqFiI=)
2: foDInVDDMIHsrUCjxc6XkS5gKvA.roa (hash: 2lk7javdqVu7Bvq2VQ6kL5AWfUMPB35khZNUraPube0=)
3: unH5gVBTju5p3u0tUyMSqinXxyE.crl (hash: DjtHnX0GjT5ojowDAlbc+cwTzFa4uZQ/vSv66tv/Uds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:da:e2:33:45:2a:e8:fd:72:f3:2e:e1:af:1d:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba71f98150538eee69deed2d532312aa29d7c721
Validity
Not Before: Oct 25 22:00:56 2023 GMT
Not After : Oct 26 22:00:56 2023 GMT
Subject: CN=90a7beb219bc602b4d3bb06f895bbce254d1935d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:81:13:d6:f9:63:20:2d:48:8c:5b:7a:36:
5e:3f:11:e1:a3:c1:44:8e:76:f6:4a:01:06:8e:4e:
99:89:64:02:58:d5:c8:02:cb:f8:81:3e:9d:30:57:
bb:28:4c:98:2b:e6:72:ad:37:b2:0e:bf:f2:6e:9a:
65:f8:c5:ae:a9:0f:bd:b9:c0:ef:ca:49:d0:46:40:
7d:9c:ad:e6:56:1d:6c:cc:1c:66:30:57:c7:44:ec:
ba:af:87:e0:9a:8a:40:53:3a:06:5b:75:b1:cc:cb:
16:2e:ad:40:c8:09:fd:2f:6c:9d:ec:b1:f2:a1:da:
79:2c:87:76:95:35:70:7b:de:dc:24:98:3a:a4:05:
d9:6f:c5:7b:15:69:a1:06:ed:eb:0a:e0:57:c5:44:
07:84:3d:24:e7:a6:7d:db:f9:85:18:03:1e:cf:c3:
94:5a:bc:1e:7b:2d:09:a1:0b:5a:54:33:92:48:f1:
95:f4:c2:96:af:80:b7:9d:f2:52:73:38:cb:67:82:
e8:a8:b9:36:bb:5f:e7:44:f7:9f:16:41:4e:c2:11:
8e:ff:77:f5:55:a1:68:0c:74:cc:ad:4a:46:23:0b:
5e:1d:96:56:8f:17:a4:a0:0c:45:94:b1:fe:0d:92:
83:54:f3:65:65:92:dd:c6:66:3e:6c:bf:58:0d:8d:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A7:BE:B2:19:BC:60:2B:4D:3B:B0:6F:89:5B:BC:E2:54:D1:93:5D
X509v3 Authority Key Identifier:
keyid:BA:71:F9:81:50:53:8E:EE:69:DE:ED:2D:53:23:12:AA:29:D7:C7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unH5gVBTju5p3u0tUyMSqinXxyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/unH5gVBTju5p3u0tUyMSqinXxyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/768e6f-9444-4633-825d-6010261eee91/1/unH5gVBTju5p3u0tUyMSqinXxyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b2:04:43:0c:e5:17:22:41:5a:da:4d:ea:48:3b:da:cf:8e:
db:c7:92:53:c8:16:6d:ff:8b:9b:9e:e2:91:93:af:2a:7d:7a:
95:35:82:4d:27:c8:69:d5:c8:24:9d:15:5a:ef:1c:b9:d3:27:
77:8c:0b:1c:db:51:bb:0b:f9:c3:9a:f8:60:e2:af:66:b7:d8:
59:eb:4d:c7:dc:a7:b1:ea:1a:70:f9:d1:cf:de:ea:1c:11:17:
f3:09:b7:47:48:fe:53:69:f9:bb:5a:ed:07:13:df:48:69:e1:
d0:e4:ef:54:ad:5f:f2:3c:fd:79:e8:aa:ee:f6:37:9c:2c:0c:
ce:a0:3a:f4:8b:06:2d:b4:9b:5f:f7:10:25:86:af:27:a8:64:
ef:10:1e:fb:43:d9:99:84:95:fc:91:23:d6:6f:1c:7c:6e:13:
ed:c9:14:09:a9:10:1e:7e:c9:1c:ee:a0:9e:cd:33:c6:0a:48:
d0:29:4c:60:b1:0c:db:bd:47:fe:89:88:18:0a:f1:94:20:92:
0a:ba:e7:85:79:f9:88:62:0c:de:cf:79:0c:1f:bc:f0:ad:f9:
1e:1a:b0:71:84:08:d7:07:42:32:22:8e:de:a5:1c:0b:a7:a3:
52:46:f6:6d:68:34:fd:a1:cd:74:5a:97:f4:46:b8:72:3a:35:
15:68:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:36:19 2025 by rpki-client