Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.mft
File: RWKHhwTK4hMrBVji8oKXh0bYirw.mft (raw, json)
Hash identifier: 69Fdkpo0t/EjjDR/a69lM8zrByQ7+mTfxVY13lv3ibo=
Subject key identifier: 8D:09:9A:A6:BE:F1:4F:33:CF:DC:C7:87:19:62:E0:31:76:34:6A:4F
Authority key identifier: 45:62:87:87:04:CA:E2:13:2B:05:58:E2:F2:82:97:87:46:D8:8A:BC
Certificate issuer: /CN=4562878704cae2132b0558e2f282978746d88abc
Certificate serial: 01852174F8D11F2E41828FFAF1126C880C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWKHhwTK4hMrBVji8oKXh0bYirw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.mft
Manifest number: A8
Signing time: Sat 17 Dec 2022 18:59:51 +0000
Manifest this update: Sat 17 Dec 2022 18:59:51 +0000
Manifest next update: Sun 18 Dec 2022 18:59:51 +0000
Files and hashes: 1: RWKHhwTK4hMrBVji8oKXh0bYirw.crl (hash: tjzFVsxGSBBgE8xdu43uqIYpxlgZFcMmTVtITMl8lZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:74:f8:d1:1f:2e:41:82:8f:fa:f1:12:6c:88:0c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4562878704cae2132b0558e2f282978746d88abc
Validity
Not Before: Dec 17 18:59:51 2022 GMT
Not After : Dec 18 18:59:51 2022 GMT
Subject: CN=8d099aa6bef14f33cfdcc7871962e03176346a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:38:70:d9:25:b9:90:7b:54:db:79:82:47:
2a:4d:dc:31:e7:f3:28:18:08:fc:40:f4:e9:91:a3:
8e:c0:eb:28:33:7d:df:ea:a5:0c:6e:8e:b6:e3:d0:
ac:34:84:8c:00:66:fa:5e:03:ec:97:13:01:11:e8:
0e:c1:0f:05:4b:54:8a:1c:9e:0e:16:21:c1:c7:af:
92:e9:60:ae:69:29:ec:03:47:f2:be:cd:64:b0:31:
ca:e0:b4:53:01:23:ba:47:a0:b1:0b:87:30:89:f6:
e1:c0:10:ec:c2:f7:8a:e3:bc:79:6e:9c:1a:92:1c:
55:b7:d9:c4:06:31:5f:a7:9b:ed:ae:8c:ab:77:08:
ec:88:8a:55:b3:30:a6:25:aa:54:44:f8:d7:a5:dd:
0c:ad:82:f8:e8:1f:65:e0:36:33:10:0a:51:24:39:
c4:9f:8c:29:d9:9d:d5:15:09:c5:3c:51:c7:87:0c:
9b:8c:5f:06:a6:67:8c:62:6e:89:d5:5e:d7:f2:0d:
80:ba:14:93:c1:f3:be:bd:ef:b6:b6:d0:b7:47:17:
40:c1:93:54:d9:c8:1e:ee:31:3f:b3:41:b7:df:27:
0d:8b:aa:5f:c4:8a:a1:2f:fe:87:15:33:89:9d:36:
46:c1:8b:79:8d:ef:1d:b5:f0:9a:c7:98:df:4d:31:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:9A:A6:BE:F1:4F:33:CF:DC:C7:87:19:62:E0:31:76:34:6A:4F
X509v3 Authority Key Identifier:
keyid:45:62:87:87:04:CA:E2:13:2B:05:58:E2:F2:82:97:87:46:D8:8A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWKHhwTK4hMrBVji8oKXh0bYirw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e2512f-5a02-4508-bb31-51a06093b3ba/1/RWKHhwTK4hMrBVji8oKXh0bYirw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:75:26:56:ea:e7:2d:5a:a1:71:da:d4:d4:54:59:4d:8e:fd:
76:00:3f:45:fa:ca:fc:a0:14:0b:42:2e:0b:93:5b:22:08:93:
a1:17:b6:8a:bb:b8:14:8b:fa:ae:4a:a3:b0:26:be:e1:c2:2d:
c7:3d:a3:91:d1:35:58:05:3e:76:23:bf:52:ef:ef:a0:47:fb:
fc:b9:ac:43:a9:9a:83:04:ab:28:fe:cc:0f:ef:bb:7b:58:22:
22:92:67:e9:af:4d:53:7d:98:c3:5d:8e:02:a8:44:ae:90:16:
40:98:ac:68:f3:48:8e:93:54:e6:dd:1f:f3:22:bf:08:40:2a:
b7:6a:a4:47:fe:cb:6e:47:b7:6e:57:b6:a5:2d:35:23:64:fc:
87:e3:64:8c:35:19:d2:78:a4:30:c0:be:9a:27:e0:76:e2:39:
19:0c:76:2f:d7:39:f1:00:86:70:6b:b8:53:ca:0f:7e:34:91:
1f:47:b3:df:08:60:68:e6:23:fb:91:dd:ce:df:f7:c5:16:b4:
ae:34:31:2f:11:2e:40:cd:c8:0f:85:a8:21:d8:08:2c:1b:de:
de:d1:1c:fd:7e:a9:22:95:90:ed:d6:a3:a3:ac:72:a8:d6:c8:
d9:e2:6c:5e:a9:a9:a1:fe:31:2d:ad:90:4c:6f:73:6c:1d:ed:
77:43:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:22 2025 by rpki-client