Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.mft
File: _9hgnOeow8EokI_EXz5tm2cmDk4.mft (raw, json)
Hash identifier: nf5BeV6VEhKDpdcgSzEx8q4lEt7s3O0Q5w5jmCO44A4=
Subject key identifier: 43:60:24:6A:14:87:81:59:5F:BA:90:8D:E2:ED:18:13:22:98:C6:C6
Authority key identifier: FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
Certificate issuer: /CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Certificate serial: 018C1F078B8E67CE7FD34E970535D22411D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.mft
Manifest number: 0FB5
Signing time: Thu 30 Nov 2023 07:00:37 +0000
Manifest this update: Thu 30 Nov 2023 07:00:37 +0000
Manifest next update: Fri 01 Dec 2023 07:00:37 +0000
Files and hashes: 1: Z5U3s0ijb4zOkLVJ6h-8jc_vB70.roa (hash: Y+fVVSJgspj9Woqv2+/7WykmBUR2U1zxuWi6atWf7k8=)
2: _9hgnOeow8EokI_EXz5tm2cmDk4.crl (hash: 2Mu0Vke0hoEeoZbuWOZH2dMXxIkg5G0X2X5DhEpkHrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:07:8b:8e:67:ce:7f:d3:4e:97:05:35:d2:24:11:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffd8609ce7a8c3c128908fc45f3e6d9b67260e4e
Validity
Not Before: Nov 30 07:00:37 2023 GMT
Not After : Dec 1 07:00:37 2023 GMT
Subject: CN=4360246a148781595fba908de2ed18132298c6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:67:27:c1:1d:a2:1b:52:87:8f:be:38:58:
e4:b0:49:c3:00:dc:8f:4f:b0:5d:7d:ec:b2:ab:ad:
3f:ce:f2:71:e6:f2:02:08:7c:a4:9e:cb:cc:7d:7e:
54:de:2a:0c:d7:d0:9a:83:08:b9:38:e5:5a:e6:d1:
57:e7:ea:8c:08:8c:b6:11:25:a0:c5:b0:a1:9b:2f:
9c:ba:f9:73:92:fa:ba:b1:63:43:ef:35:f5:b9:13:
cb:e2:f0:36:01:6f:42:72:e8:07:7e:58:8d:5c:a0:
3b:d1:2c:42:57:e2:76:fd:bc:72:8d:5d:5b:6f:4b:
95:78:c0:e5:62:cd:ca:01:ca:51:ce:47:5a:d5:56:
fa:68:40:88:e9:d8:2a:b8:ed:71:1b:b3:4a:6a:93:
c8:2b:ff:f5:91:9a:bd:e9:16:22:e9:a9:19:ad:0e:
1e:2e:ac:00:a1:ef:05:89:ef:0e:68:8c:1e:a6:3c:
61:0c:d0:a7:a9:36:83:44:ca:64:50:fb:6c:ea:b6:
99:05:d0:8f:e0:08:0b:0a:98:1e:fb:63:f2:0f:f6:
2d:91:ff:18:12:bd:a8:f1:7e:c4:e0:b7:cc:32:60:
6b:06:a6:ce:08:7c:35:af:4c:a4:4c:45:d7:f8:6c:
33:c9:02:8f:23:be:ff:fd:45:6a:37:45:7e:4f:c3:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:60:24:6A:14:87:81:59:5F:BA:90:8D:E2:ED:18:13:22:98:C6:C6
X509v3 Authority Key Identifier:
keyid:FF:D8:60:9C:E7:A8:C3:C1:28:90:8F:C4:5F:3E:6D:9B:67:26:0E:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9hgnOeow8EokI_EXz5tm2cmDk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b66b69-d225-4be7-853e-9f4c98098c45/1/_9hgnOeow8EokI_EXz5tm2cmDk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:57:13:6d:ca:41:65:4f:63:69:06:a9:20:67:b5:97:68:a5:
9d:ad:1a:1c:34:a1:ca:a5:ba:ed:76:4a:ec:6a:92:f3:7b:d1:
a0:70:c1:04:5a:4b:74:95:f7:12:a6:d3:51:e2:dd:de:78:7d:
11:6c:a2:d4:ea:44:a8:92:c1:3f:37:9e:12:8a:e8:42:7f:5f:
50:09:f3:19:50:ee:a4:a7:a7:75:ea:3d:2b:ae:d3:17:4a:a7:
ee:b1:0b:30:49:15:0f:f1:45:95:7e:2f:90:fa:c3:d2:dc:3d:
4d:9a:f0:7a:75:f9:04:e0:bc:8b:a6:d5:95:8b:42:d3:68:89:
00:de:06:7e:07:8a:2a:03:cd:97:03:36:40:07:53:de:2c:01:
36:16:5c:d9:d5:0a:77:08:93:63:08:cc:bb:d6:fe:60:bb:5c:
0b:02:f0:51:f0:47:3d:f1:ee:04:09:46:61:b9:2f:36:e3:05:
10:7a:80:53:9a:39:40:9f:0e:bb:73:d3:ef:bc:03:17:0a:57:
2d:5d:33:4c:ff:34:38:76:6e:e9:f1:2b:19:d8:3b:80:54:ed:
86:13:8d:cb:b2:84:ba:88:43:30:4e:4a:16:c1:15:6f:f0:13:
fa:8f:1f:ca:6c:3f:6b:00:44:1d:5c:28:a1:24:3e:39:67:f1:
fe:37:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:48 2025 by rpki-client