Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.mft
File: RP64nGxyXfHp8Ul9Iwf4aSa3DxE.mft (raw, json)
Hash identifier: cv3vrE57mIglr5prVLWUbW+1YS1talKYTdux2XslUwQ=
Subject key identifier: AD:F1:E4:35:7E:8A:1B:28:7A:D1:8E:56:97:E9:AC:6F:A8:42:BD:09
Authority key identifier: 44:FE:B8:9C:6C:72:5D:F1:E9:F1:49:7D:23:07:F8:69:26:B7:0F:11
Certificate issuer: /CN=44feb89c6c725df1e9f1497d2307f86926b70f11
Certificate serial: 0187275596FEA47D003700985326E543234A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.mft
Manifest number: 0908
Signing time: Tue 28 Mar 2023 08:28:53 +0000
Manifest this update: Tue 28 Mar 2023 08:28:53 +0000
Manifest next update: Wed 29 Mar 2023 08:28:53 +0000
Files and hashes: 1: RP64nGxyXfHp8Ul9Iwf4aSa3DxE.crl (hash: gHSTYTJ7yhj8NsR5zbS3AEQ5AJDJ+oVX64Ric66mtgs=)
2: gCcPh2bilhG_DI1Sav39CEXB0Oc.roa (hash: 8kESu1A0fVemXjDDT7FtKndZhJX2GmlpwEKXOto+U2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:55:96:fe:a4:7d:00:37:00:98:53:26:e5:43:23:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44feb89c6c725df1e9f1497d2307f86926b70f11
Validity
Not Before: Mar 28 08:28:53 2023 GMT
Not After : Mar 29 08:28:53 2023 GMT
Subject: CN=adf1e4357e8a1b287ad18e5697e9ac6fa842bd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:4c:f4:16:14:f1:7a:d4:43:e5:b9:c7:fe:
aa:9a:91:b5:02:51:a5:e8:7f:0c:5c:5f:c3:cd:4e:
40:94:ea:ff:93:61:c6:48:94:a0:f0:16:2a:a5:b0:
cf:8b:2d:21:d3:45:2f:9b:76:3f:15:10:e3:22:bc:
6f:31:4f:29:05:0a:50:58:d1:bd:b5:08:28:c0:fb:
b7:cd:df:21:95:c7:0c:35:c4:9f:7b:e6:ca:1b:75:
4e:da:2c:32:33:32:41:77:7e:d2:b3:a9:c7:9f:4d:
b1:13:d8:13:c3:5e:5b:15:86:fe:61:de:82:52:92:
84:1f:1d:f5:09:4c:f3:87:06:82:85:61:f5:df:e4:
c6:dc:55:db:11:fa:f1:ff:c4:be:9a:91:4a:14:e8:
92:4d:1a:7d:19:ce:d5:7e:5e:96:85:b1:a7:1b:07:
8c:b5:ac:d9:54:9d:19:0b:30:f1:87:a7:da:b9:d6:
af:0a:9f:57:13:1a:0a:98:95:bf:58:71:3c:28:5c:
1b:98:13:a0:75:97:cc:6a:f6:99:c8:8f:b0:e8:34:
f8:eb:f0:43:98:32:b3:90:73:c5:c2:b4:65:e7:29:
6e:82:4a:3b:b6:b2:2c:82:31:89:18:74:ae:ef:17:
f8:d7:c8:53:f2:17:63:59:2b:aa:95:cc:e3:22:c6:
a3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F1:E4:35:7E:8A:1B:28:7A:D1:8E:56:97:E9:AC:6F:A8:42:BD:09
X509v3 Authority Key Identifier:
keyid:44:FE:B8:9C:6C:72:5D:F1:E9:F1:49:7D:23:07:F8:69:26:B7:0F:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f5:b7:82:72:49:20:1d:3c:12:1b:8f:f9:9c:6b:6e:85:8f:
8f:bd:29:67:68:a5:69:79:07:74:f5:3d:3c:f7:ad:7a:db:7a:
04:a8:0b:df:91:31:67:fe:34:25:9f:d4:f5:1f:ae:65:d1:fb:
ac:d5:61:a4:b8:f9:ad:a6:fa:64:b4:60:75:d2:6d:9c:ee:7e:
cb:18:a8:c0:c3:cf:a7:48:bc:1a:9c:76:6d:77:31:2e:1c:a8:
7c:15:08:9c:99:c7:80:91:a8:a9:1e:2e:af:43:ca:20:6d:15:
28:cb:47:d4:de:1a:5f:f0:98:8e:35:e1:47:85:1f:b7:9b:ea:
aa:7f:91:91:59:b7:47:3a:d5:1f:21:81:b8:ba:29:0e:da:b5:
f4:f3:9d:8f:02:9a:89:16:35:fa:cd:00:ef:f4:26:5f:94:74:
6a:dc:8e:cb:54:63:11:80:c6:36:56:ed:2d:dd:0a:19:90:f6:
a8:1c:91:ae:2c:d2:b0:bf:6e:8b:8b:19:04:9b:2c:2b:ff:5e:
67:2e:07:d5:b6:27:1f:6a:53:24:af:d8:ad:c8:62:3e:18:b2:
05:26:b3:53:3d:db:5d:10:c1:ab:79:4e:f2:47:48:01:c6:a7:
3b:21:29:60:e0:59:5d:4d:5d:57:33:6c:6b:d0:bb:b0:86:2b:
0c:a7:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:08 2025 by rpki-client