Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/rXb3kUOBFfTQWp0gDCNldV3RlHE.mft
File: rXb3kUOBFfTQWp0gDCNldV3RlHE.mft (raw, json)
Hash identifier: xc8liTQgjNkzNqnA+7xWr6pbnssVYi9bKyyaQ0AYQoY=
Subject key identifier: BB:3F:A9:2C:BC:FC:87:33:C6:AC:72:FE:22:CC:93:66:CD:EF:6C:22
Authority key identifier: AD:76:F7:91:43:81:15:F4:D0:5A:9D:20:0C:23:65:75:5D:D1:94:71
Certificate issuer: /CN=ad76f791438115f4d05a9d200c2365755dd19471
Certificate serial: 018C1ED117B4EDCF782FF0A7D9431DF9FCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXb3kUOBFfTQWp0gDCNldV3RlHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/rXb3kUOBFfTQWp0gDCNldV3RlHE.mft
Manifest number: 088E
Signing time: Thu 30 Nov 2023 06:01:08 +0000
Manifest this update: Thu 30 Nov 2023 06:01:08 +0000
Manifest next update: Fri 01 Dec 2023 06:01:08 +0000
Files and hashes: 1: KVcbVD103UVOEQaiDS68iQxdSnw.roa (hash: E9oX9FUR16Hu+YoDGyXTLs2s/lXjApWlTVZkrvjp62w=)
2: rXb3kUOBFfTQWp0gDCNldV3RlHE.crl (hash: RpAQFsZ4scF2v2PmLUGDu2n9ezY/EQILBmd/J0BDP98=)
3: yLUku1LmKaMMR9gUJkP-1HDNHAA.roa (hash: 04t9RnjuxrbYLBRxBkfmLrTQbPxfh2loNU4WY+o5Hoo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:d1:17:b4:ed:cf:78:2f:f0:a7:d9:43:1d:f9:fc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad76f791438115f4d05a9d200c2365755dd19471
Validity
Not Before: Nov 30 06:01:08 2023 GMT
Not After : Dec 1 06:01:08 2023 GMT
Subject: CN=bb3fa92cbcfc8733c6ac72fe22cc9366cdef6c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:c0:86:0c:6b:e8:b7:5a:7a:e3:f9:10:40:
e3:20:50:e0:bb:f0:e4:b5:1e:91:ec:ce:84:93:d4:
3c:a3:b1:10:87:32:db:ea:c7:5b:95:09:f3:2d:c1:
ad:12:60:43:23:74:82:7c:a2:36:a1:f4:6d:a0:7b:
ec:a0:06:a5:ac:41:4c:fe:88:8b:d4:47:45:f6:45:
8d:21:1b:9f:ee:6a:4c:ba:20:87:94:8d:64:44:12:
59:f6:cd:92:b7:4b:d1:c3:24:75:ba:95:ec:c6:e3:
f2:3f:c6:f3:44:e0:11:8e:9c:ca:46:e1:0b:bf:7f:
a4:bf:9f:25:e4:a6:b8:da:b6:ca:e3:ea:2e:0b:e3:
d1:ca:b0:64:e9:e4:28:93:b6:91:37:ba:94:d4:fc:
ba:59:97:b7:73:6c:4d:6a:8f:34:7e:c2:e0:cc:9e:
af:23:f2:37:71:04:44:ce:24:84:dd:86:dc:73:c7:
56:0f:61:bf:84:29:e8:90:fe:2c:71:54:36:77:2c:
3a:da:19:35:54:8b:5e:5c:84:49:20:bb:fd:ac:59:
d7:87:77:18:5b:7e:b3:4b:d6:70:72:48:2a:13:a3:
3b:b5:e8:91:87:85:eb:23:2f:ee:d9:95:c8:66:86:
c5:f9:6f:29:69:74:ef:45:20:27:15:3e:81:08:97:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:A9:2C:BC:FC:87:33:C6:AC:72:FE:22:CC:93:66:CD:EF:6C:22
X509v3 Authority Key Identifier:
keyid:AD:76:F7:91:43:81:15:F4:D0:5A:9D:20:0C:23:65:75:5D:D1:94:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXb3kUOBFfTQWp0gDCNldV3RlHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/rXb3kUOBFfTQWp0gDCNldV3RlHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d7d4d-5b93-499d-bd6c-2327cf2ae788/1/rXb3kUOBFfTQWp0gDCNldV3RlHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4b:26:9f:59:65:37:bb:b2:6e:95:7b:36:cc:64:28:c8:77:
29:97:26:6f:e3:46:ad:0f:f6:b1:19:72:d5:99:09:62:1b:51:
46:0d:88:6b:6e:4e:cc:77:74:22:ea:68:69:3e:ff:b7:03:b0:
fa:49:f1:3d:40:23:8c:5f:a6:41:83:58:5b:b1:6c:42:b6:2b:
63:90:88:7d:12:fc:7e:c5:15:c9:32:f0:e2:56:58:e0:7e:91:
d6:69:08:7e:07:bb:87:47:27:f1:8e:15:7a:36:4e:e0:64:85:
64:ce:db:1e:2f:16:1d:97:16:b4:44:d2:f2:f7:5d:02:cc:4a:
b4:91:30:50:f9:c8:59:4a:c5:21:12:e7:5c:9e:5d:f4:6e:1c:
8a:c3:55:e8:8f:40:b7:67:14:7e:17:4c:07:6a:26:77:6d:c1:
49:53:b7:82:7b:f9:0b:de:e6:c0:73:23:3e:03:f7:bf:e3:6f:
60:60:fa:71:27:5d:38:5d:05:ee:d0:39:c5:f5:22:00:f9:1f:
c0:be:ca:c9:49:71:6c:79:61:62:bd:5f:52:3c:58:41:72:74:
35:b6:f0:34:31:97:9d:99:00:5a:43:96:1c:01:db:13:71:04:
ec:02:85:2d:71:dc:ce:72:d2:eb:9d:4d:e8:45:d8:a6:4b:81:
0c:aa:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:49 2025 by rpki-client