Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.mft
File: 0aEkSjxXuf67aNaEqDKwZx4-TIQ.mft (raw, json)
Hash identifier: 4oG8DV4b1RnryNySjMi8ZdiaglMVY9wZCjNWKeXhzeI=
Subject key identifier: 93:31:22:A2:37:88:FB:C5:A1:1B:64:3A:F5:90:A4:CE:F2:52:2E:FD
Authority key identifier: D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
Certificate issuer: /CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Certificate serial: 018EC05F17413311F642839C1299C33FB1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.mft
Manifest number: 10A2
Signing time: Tue 09 Apr 2024 01:00:41 +0000
Manifest this update: Tue 09 Apr 2024 01:00:41 +0000
Manifest next update: Wed 10 Apr 2024 01:00:41 +0000
Files and hashes: 1: 0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl (hash: 1qwKZT2pNF/VsZHW7FEFkA+LF0CMwf9gLygeQVy5A5A=)
2: ltulORma-P3wSZy8kJxgbvD19do.roa (hash: 3uqahYMVTtnE2H28OWI+8QzVU2R+VXC5p06rtgEZIiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c0:5f:17:41:33:11:f6:42:83:9c:12:99:c3:3f:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Validity
Not Before: Apr 9 01:00:41 2024 GMT
Not After : Apr 10 01:00:41 2024 GMT
Subject: CN=933122a23788fbc5a11b643af590a4cef2522efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:54:aa:e7:16:31:33:4a:c4:37:78:be:db:
e9:cf:43:7f:80:48:4f:1d:92:9e:23:d7:82:43:58:
d4:83:32:3f:ee:2f:a6:57:1a:c1:b8:07:4d:6d:17:
24:6c:e4:8e:16:9b:27:1d:7c:9e:8c:57:17:29:a3:
d8:91:49:e8:21:2d:77:1c:c0:be:ce:73:58:e2:42:
d0:d8:dd:2d:d0:da:97:84:dc:49:1f:1d:01:aa:68:
d0:d3:dd:57:d9:1c:de:b0:99:5a:b5:e3:43:ac:3f:
5a:90:35:98:44:89:a7:b0:0c:cc:45:6c:31:48:b3:
63:1c:dd:81:e1:be:9f:67:2c:86:99:82:f4:ea:d9:
a9:97:7c:0e:93:ab:65:34:5a:ca:07:78:bf:1c:4f:
5c:87:ba:fc:f8:26:e2:f1:10:e8:08:be:0a:52:9d:
a4:98:cb:94:05:40:e0:00:2f:8e:02:6a:9d:3c:89:
51:1a:08:e7:d5:d3:71:93:d5:b6:70:c0:19:61:09:
19:0e:11:f8:59:3f:95:8b:2a:2b:9e:d5:9e:4f:fd:
ad:22:0e:3a:47:25:e5:23:fb:94:cc:e1:52:b2:e4:
8f:d6:00:e9:43:a2:aa:68:b1:f7:65:2c:55:a0:64:
88:53:fe:49:fa:ec:b0:de:02:d1:13:d1:03:91:ae:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:22:A2:37:88:FB:C5:A1:1B:64:3A:F5:90:A4:CE:F2:52:2E:FD
X509v3 Authority Key Identifier:
keyid:D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:76:97:43:6a:02:11:58:61:f3:62:7b:08:b3:2a:54:22:
c0:b2:8e:97:9d:e4:d0:d9:a9:af:52:fa:3f:e5:ac:e1:83:7f:
c3:dc:65:8f:e0:33:d1:d6:9c:bf:df:2f:80:be:d6:f1:e2:5e:
f3:26:c7:82:6f:c8:2d:da:bb:b8:8b:43:77:a5:63:2b:07:86:
ed:5f:b4:f4:f4:94:ff:a5:e5:d8:a4:a4:9c:fb:b2:4b:bd:e8:
54:b3:95:30:4f:bf:2d:0d:14:73:92:9b:07:fe:9a:5f:ac:7d:
fc:6e:10:37:4b:0a:ef:fd:e7:45:dd:8a:66:b1:80:a9:d8:08:
63:3b:03:a4:68:75:c5:9c:d1:42:c8:7f:a0:36:e8:c6:0e:c6:
a8:83:4f:36:0f:f1:d4:06:63:e6:1c:ac:9f:fb:87:67:1c:62:
41:2f:f5:45:82:24:d3:66:ae:04:ee:5b:f8:90:b2:1a:80:5f:
7c:76:72:e0:ed:80:85:50:6b:7f:32:f1:05:55:88:c9:bc:5a:
6a:e2:b1:86:7b:89:dd:c1:ea:eb:33:a7:88:e2:f3:c7:b9:54:
fe:4f:0e:5e:b9:fe:e5:59:48:63:4c:a9:00:35:0b:f0:93:e3:
62:ba:fc:ee:ba:83:95:01:4d:d1:fa:1b:34:4a:56:29:27:b3:
13:37:95:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:52:20 2025 by rpki-client