Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.mft
File: n3OtsqkJxoH__WzbGsNyVzn26Gg.mft (raw, json)
Hash identifier: LAqOt99Rr4JJPg8EOps07zldlRVwnHwx4IX1KJMIu/4=
Subject key identifier: B1:55:49:1D:95:A7:70:6A:26:D7:BA:20:9A:0E:48:12:1C:FD:34:ED
Authority key identifier: 9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
Certificate issuer: /CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
Certificate serial: 0185152771731E7A13791E97234E9B61F1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.mft
Manifest number: 04BA
Signing time: Thu 15 Dec 2022 09:39:44 +0000
Manifest this update: Thu 15 Dec 2022 09:39:44 +0000
Manifest next update: Fri 16 Dec 2022 09:39:44 +0000
Files and hashes: 1: LbOvYceSTIynIMCrLX6ZQ5TJjug.roa (hash: 3rF9oh0b0058htJNjG4wEt+X1YSMVZ0kahp9A39qMf0=)
2: n3OtsqkJxoH__WzbGsNyVzn26Gg.crl (hash: pjgmr5QWgRUwF+/qNAH+Hozu4/zCCWumK7oeJKjv9zQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:27:71:73:1e:7a:13:79:1e:97:23:4e:9b:61:f1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f73adb2a909c681fffd6cdb1ac3725739f6e868
Validity
Not Before: Dec 15 09:39:44 2022 GMT
Not After : Dec 16 09:39:44 2022 GMT
Subject: CN=b155491d95a7706a26d7ba209a0e48121cfd34ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:7a:bc:6e:30:c4:4c:26:a9:76:29:d0:1f:
0d:ac:41:f5:f4:64:9c:b3:57:ad:7d:9f:10:60:fd:
ce:43:7b:cd:88:1c:d6:54:24:ff:24:e1:2f:44:71:
c1:21:52:c9:ce:71:80:42:57:21:d6:df:1f:fb:24:
88:c6:34:40:a6:9b:8c:db:e7:00:d0:34:64:7e:07:
7b:7f:99:a9:57:4d:99:20:8f:73:33:71:4c:5e:94:
18:14:bb:e0:f8:42:c1:5c:5c:a0:c3:19:84:66:c1:
e8:92:9b:f7:f3:2e:41:16:72:3e:25:64:70:c6:ca:
ce:67:10:d1:04:13:12:00:30:fd:38:57:17:0b:a8:
d0:1b:a2:7d:8c:35:6c:63:2d:31:e5:02:79:9d:a5:
9c:dc:a3:c9:be:a5:52:00:73:c0:68:f0:cd:63:ec:
a7:b9:28:85:b0:5f:90:10:8c:26:ad:1b:f0:5b:2e:
83:41:85:b0:00:b4:eb:de:a9:d0:19:90:34:a0:1f:
f6:0a:c2:95:36:ca:04:dd:96:d5:ee:e2:6c:be:a5:
3c:d3:09:a4:f1:8e:6f:bb:2a:af:3e:86:d5:fd:d5:
b0:81:a7:bf:38:2f:f9:a8:d1:27:4c:90:3c:9d:d4:
2c:68:97:b6:82:83:ad:f9:23:a2:d8:73:80:61:8e:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:55:49:1D:95:A7:70:6A:26:D7:BA:20:9A:0E:48:12:1C:FD:34:ED
X509v3 Authority Key Identifier:
keyid:9F:73:AD:B2:A9:09:C6:81:FF:FD:6C:DB:1A:C3:72:57:39:F6:E8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3OtsqkJxoH__WzbGsNyVzn26Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ec326d-849f-409c-8933-19cca912d827/1/n3OtsqkJxoH__WzbGsNyVzn26Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d7:86:ad:31:34:04:d8:a5:01:7f:65:48:01:7b:a7:74:2e:
b6:b6:ab:56:e1:b9:d0:f8:59:df:88:9f:55:89:1b:72:58:b6:
35:fe:00:1c:77:fb:cf:6c:bb:22:3d:15:1b:20:11:3b:fb:78:
c0:bd:77:27:fe:c9:20:dd:47:77:f4:c0:8b:10:b9:76:cd:af:
8c:7d:c5:cc:86:3d:69:35:65:88:87:40:55:d7:71:8f:69:72:
01:20:05:e0:25:8b:d6:17:31:d7:5c:0c:f6:33:94:2f:62:d8:
32:69:7c:2e:04:49:65:f0:22:7a:ca:56:cc:9c:e8:96:ed:22:
85:00:f4:b5:11:d0:a1:93:95:bd:ad:0a:54:0e:30:fc:d2:c8:
35:9c:38:86:83:cc:5d:18:b7:39:73:10:58:44:d1:f9:5c:c3:
d0:e4:fc:26:01:30:d1:0d:79:ed:18:ee:f7:dc:96:3b:cb:7f:
e3:cc:68:a0:eb:5a:6a:6a:dd:1e:52:62:ad:3c:db:03:a8:83:
23:97:66:4a:5e:ba:4a:29:b2:d6:51:68:56:1e:7b:d2:34:29:
c2:53:5e:53:b1:89:8a:90:8e:3e:03:20:33:ce:3d:dd:48:1d:
83:d2:bc:ce:89:6b:d2:a4:37:56:e6:44:02:74:f3:9b:1b:0d:
0b:3e:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:21:45 2025 by rpki-client