Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft
File: kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft (raw, json)
Hash identifier: xcbO3xu3BcvQkfrE5Eo6sL8JQkuEVCfWNnqeGHZW60Q=
Subject key identifier: 63:C0:00:DD:1F:A2:F0:0F:27:89:EB:E7:74:6C:B0:30:98:52:C1:AA
Authority key identifier: 90:AF:98:73:83:86:5A:4A:FC:67:40:3B:60:D3:F3:38:9F:69:5F:5B
Certificate issuer: /CN=90af987383865a4afc67403b60d3f3389f695f5b
Certificate serial: 0188E4369ECDF7BAC0CBDFC7E6531160C1D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft
Manifest number: 070D
Signing time: Thu 22 Jun 2023 17:46:04 +0000
Manifest this update: Thu 22 Jun 2023 17:46:04 +0000
Manifest next update: Fri 23 Jun 2023 17:46:04 +0000
Files and hashes: 1: 1-U93vkX4Yb_VWIBq9kJnKTvcSBM.roa (hash: 7pQCZjS2z6+K/Y8xg7yaKW/1hpPkt6DGDMD6QllNOeo=)
2: kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.crl (hash: IkI7bmwP5DIe2W3Ve3REgcOO/sh//wK4AxVkZhWuXw0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:36:9e:cd:f7:ba:c0:cb:df:c7:e6:53:11:60:c1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90af987383865a4afc67403b60d3f3389f695f5b
Validity
Not Before: Jun 22 17:46:04 2023 GMT
Not After : Jun 23 17:46:04 2023 GMT
Subject: CN=63c000dd1fa2f00f2789ebe7746cb0309852c1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:af:91:87:08:0f:c6:3c:e2:6b:29:96:57:
1b:2a:60:12:6f:7a:9f:d4:0e:fc:51:15:f6:6d:49:
7b:61:e2:e7:bb:c9:09:18:97:4f:20:73:65:07:b3:
43:fe:f3:70:05:f8:52:25:de:6f:9f:d0:c4:a4:ce:
ae:60:0a:09:fd:b1:57:eb:ad:9a:8a:33:d0:9c:7f:
6d:f5:c2:ee:4e:d5:5d:1e:71:79:45:bd:d0:f9:e8:
9e:92:bf:eb:b6:ab:31:0d:b3:40:a5:a6:9e:08:a5:
ba:74:b7:ec:97:d5:34:bb:88:5d:f0:17:aa:d8:49:
ae:b4:0a:14:85:e5:4d:f6:bc:94:82:4a:1d:98:46:
c0:40:42:31:b2:4a:48:30:e6:59:f1:3e:95:0a:1f:
ff:10:09:5e:d6:54:71:cf:c1:ed:08:22:c9:88:93:
fe:85:e2:f3:c1:cb:d1:ae:1d:e8:b9:4d:4d:6e:a0:
bf:23:48:74:95:40:7c:9f:84:e8:43:ef:75:95:87:
c1:d3:25:dc:90:34:7a:17:6d:ea:61:25:9c:38:94:
f0:a9:c8:cd:86:74:44:34:36:9d:5c:68:99:d0:0f:
ab:77:75:bb:49:78:2a:cc:24:64:c1:11:1d:b6:27:
e8:ed:d0:bd:59:2a:ca:69:b3:f8:bf:a4:05:6b:0c:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:00:DD:1F:A2:F0:0F:27:89:EB:E7:74:6C:B0:30:98:52:C1:AA
X509v3 Authority Key Identifier:
keyid:90:AF:98:73:83:86:5A:4A:FC:67:40:3B:60:D3:F3:38:9F:69:5F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fd:bf:8d:95:86:24:11:cd:e0:60:02:be:71:95:0a:ff:e3:
a6:84:83:e7:ae:9e:41:de:7e:66:a6:9a:58:65:d6:cf:9a:68:
2b:2d:1d:c4:e0:32:e9:83:1c:ed:90:3b:71:1e:79:03:a6:6e:
58:c2:9f:bb:bf:77:ca:19:be:08:2f:f5:01:f2:dd:fa:54:56:
85:44:f4:4d:4e:79:ab:1f:c7:b3:15:2f:e2:12:31:35:1c:c4:
56:b1:75:c3:87:a9:9c:e2:de:d8:72:b5:85:89:09:f0:67:a7:
7c:0d:89:0f:25:a7:62:48:3b:25:1f:f9:ef:ed:ab:d8:b1:c3:
b4:47:b1:2f:75:66:85:33:3a:e1:6f:cf:cc:b9:c0:78:42:6e:
b0:51:5b:c1:0a:67:54:b4:b5:17:63:ca:d6:da:91:65:8d:77:
60:78:9f:c1:d3:04:d7:53:bb:8b:ce:a8:b8:9a:5a:41:42:c7:
48:29:31:5f:ad:17:ba:0a:37:25:fa:d9:27:a2:d6:1a:92:5e:
05:da:f6:17:d5:71:8b:b2:52:e9:1e:e5:15:00:64:59:5e:05:
06:68:04:a0:62:a0:6f:a0:58:9a:40:7d:d5:47:1d:4e:9a:ac:
28:6a:5c:48:c4:ca:17:1b:c0:7f:dc:80:db:ea:e9:71:d0:a3:
21:23:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:08:39 2025 by rpki-client