Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/ipx8QSb_QYDbnWXN06wsZyaskac.mft
File: ipx8QSb_QYDbnWXN06wsZyaskac.mft (raw, json)
Hash identifier: upcBYx9EPLVRsayR5hm+6EDUev6Z/04VZkPPimEGHHU=
Subject key identifier: 9C:18:C9:F7:29:78:70:33:55:90:17:78:A7:9E:33:4E:9B:E9:B6:A0
Authority key identifier: 8A:9C:7C:41:26:FF:41:80:DB:9D:65:CD:D3:AC:2C:67:26:AC:91:A7
Certificate issuer: /CN=8a9c7c4126ff4180db9d65cdd3ac2c6726ac91a7
Certificate serial: 018A62DAED5A341128F676ADDCF9B6EB28B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipx8QSb_QYDbnWXN06wsZyaskac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/ipx8QSb_QYDbnWXN06wsZyaskac.mft
Manifest number: 086A
Signing time: Tue 05 Sep 2023 01:00:29 +0000
Manifest this update: Tue 05 Sep 2023 01:00:29 +0000
Manifest next update: Wed 06 Sep 2023 01:00:29 +0000
Files and hashes: 1: K5ywvz0jPPpUu0MGlPLvQo9wyXw.roa (hash: V8CtuEADnlha71XjSKoCErER4Y41qV1YZtbWCVfKa64=)
2: ipx8QSb_QYDbnWXN06wsZyaskac.crl (hash: n3kr8pTqVjzzNGp8HtpG9Htrs0Q0bylT8OMmZW3C82Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:62:da:ed:5a:34:11:28:f6:76:ad:dc:f9:b6:eb:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9c7c4126ff4180db9d65cdd3ac2c6726ac91a7
Validity
Not Before: Sep 5 01:00:29 2023 GMT
Not After : Sep 6 01:00:29 2023 GMT
Subject: CN=9c18c9f72978703355901778a79e334e9be9b6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:b9:a4:8d:f4:09:ef:af:b6:8f:4a:a5:81:
3d:5f:7f:bd:d7:f3:a2:4a:06:f8:05:cc:71:04:17:
f3:c0:e0:a8:e9:08:66:fc:bf:ee:ba:7f:11:86:45:
13:8e:25:aa:9c:e2:dd:b8:3a:40:ea:10:e0:a9:c3:
b9:c2:c2:5f:c9:f5:41:ab:2c:76:15:35:bb:7d:95:
e6:4f:66:0b:c8:a4:31:e7:2f:cf:22:6a:d1:4d:7a:
e5:5c:7f:bd:73:d4:75:3a:2c:d0:b4:b6:58:11:a9:
7a:9c:83:99:d1:ff:cd:5a:0f:8d:20:53:3e:b4:1c:
01:8a:75:0c:f0:c1:f6:53:29:51:18:50:ff:78:5a:
ec:d8:7c:7f:c0:4e:0d:5a:af:85:98:0e:4c:d4:4c:
35:c8:07:f1:fd:8f:c5:af:b7:3c:73:35:24:1a:d0:
5c:02:0b:a1:32:57:82:11:5d:6e:f6:63:db:db:92:
39:ae:8d:08:14:0e:24:f1:88:cf:a3:73:e7:20:5e:
d6:7c:37:71:35:4a:66:be:4b:ce:4b:8f:ed:d0:80:
9a:05:94:72:af:e0:c7:72:6b:79:1a:ac:8c:29:0d:
52:d7:95:02:9a:92:d5:d0:42:ee:71:2d:f8:3f:f2:
1e:06:5f:34:0f:62:ed:6e:e9:ed:6f:61:f5:20:f1:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:C9:F7:29:78:70:33:55:90:17:78:A7:9E:33:4E:9B:E9:B6:A0
X509v3 Authority Key Identifier:
keyid:8A:9C:7C:41:26:FF:41:80:DB:9D:65:CD:D3:AC:2C:67:26:AC:91:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipx8QSb_QYDbnWXN06wsZyaskac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/ipx8QSb_QYDbnWXN06wsZyaskac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/ipx8QSb_QYDbnWXN06wsZyaskac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:40:42:d2:ff:75:4e:60:7b:5d:94:f4:cc:aa:48:4c:65:
df:bd:61:de:00:7c:9f:dd:b5:07:f5:f0:90:40:4c:b2:4b:9f:
7a:77:c2:e5:43:ea:c2:38:fd:08:e4:a4:6f:6f:ca:d6:3f:65:
53:10:1b:7f:2a:ca:c6:dc:1e:00:7c:55:db:ef:3c:4a:e7:0a:
a2:af:15:b1:c3:01:01:ef:78:6d:eb:a7:e6:87:01:1f:9f:cf:
dd:72:02:76:bb:9a:f5:d1:e8:5c:9d:01:0e:9b:18:9a:09:a9:
94:3c:99:ea:25:b3:69:e7:0b:12:b6:87:0a:3c:28:86:75:0c:
dd:29:96:c2:fc:54:fa:20:22:b0:e2:f3:df:ad:39:d4:3d:62:
4a:4f:79:29:af:25:63:0e:69:5d:40:e0:1f:f0:a9:bb:e6:70:
62:82:a8:0e:94:1e:73:2f:e1:45:e5:bb:22:e4:c9:4a:c1:12:
e0:82:b9:62:2f:0c:77:49:d1:9f:99:05:64:6e:60:72:58:9b:
58:ad:b1:b3:32:8c:c6:c6:ca:7e:2c:42:31:1a:fc:fc:ab:af:
42:ec:ba:6e:50:83:27:c2:ca:92:bc:7c:92:2a:c3:a4:fe:a8:
53:bd:5d:47:07:5d:ef:2d:3d:c7:2a:34:3a:c4:ce:da:1b:52:
72:43:c0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:43 2025 by rpki-client