Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.mft
File: 0U2zPOytHuEGjN-xHmFnOyFAw34.mft (raw, json)
Hash identifier: vm5CdhaIf3T1w7L6kQrqBbWowd1FOq+Ic+6A463Z6zM=
Subject key identifier: CF:8B:D6:64:4A:3A:46:DC:39:5E:C2:CE:AE:77:9B:9B:B5:4D:3A:46
Authority key identifier: D1:4D:B3:3C:EC:AD:1E:E1:06:8C:DF:B1:1E:61:67:3B:21:40:C3:7E
Certificate issuer: /CN=d14db33cecad1ee1068cdfb11e61673b2140c37e
Certificate serial: 01845BD23DD31A97CBA0E0313E34A412D0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0U2zPOytHuEGjN-xHmFnOyFAw34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.mft
Manifest number: 0AE3
Signing time: Wed 09 Nov 2022 09:56:55 +0000
Manifest this update: Wed 09 Nov 2022 09:56:55 +0000
Manifest next update: Thu 10 Nov 2022 09:56:55 +0000
Files and hashes: 1: 0U2zPOytHuEGjN-xHmFnOyFAw34.crl (hash: gDuygsvoTA+YiUOe4WRxrgubO3KepXKkgyHYTsWrXiI=)
2: NTHKIVmfMMuw14dckM7HDv7ZOu4.roa (hash: TlHRYEbn/THRpLUNg8pCBzgv3kObNob5atoKjEPEjBg=)
3: l_m6OUxyZBFOPaqTXVAUtkvAnM8.roa (hash: UxAeiUuOaXaiGbV+2P2mcxbx8P/GsRdSCQZ3xsYDP4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:d2:3d:d3:1a:97:cb:a0:e0:31:3e:34:a4:12:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14db33cecad1ee1068cdfb11e61673b2140c37e
Validity
Not Before: Nov 9 09:56:55 2022 GMT
Not After : Nov 10 09:56:55 2022 GMT
Subject: CN=cf8bd6644a3a46dc395ec2ceae779b9bb54d3a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:96:8b:a3:c0:32:1c:00:22:5c:b5:f8:d9:
be:3b:1e:05:cd:92:a6:8e:0e:ec:3a:07:c1:38:9a:
51:4e:55:ed:05:16:eb:0f:bc:18:77:12:41:ff:87:
b9:ff:fa:c0:78:7b:70:7c:e7:77:cc:43:97:a9:71:
f3:f8:7d:31:83:98:57:d0:6d:8c:cc:ad:2c:c2:67:
ee:0d:57:07:d1:e8:72:76:9a:42:9a:b8:76:c4:5a:
86:3e:a3:91:83:e3:15:76:12:dd:e8:6e:e3:18:1c:
a2:44:8e:30:fa:5b:5c:05:e4:87:bc:e2:77:ff:5f:
71:2f:af:a3:11:e3:74:fe:ba:ea:3a:cb:33:2c:fb:
64:2a:dc:66:a0:a1:4b:8f:12:61:e8:e6:8b:1f:68:
de:d6:0b:b3:0c:00:b1:d9:2a:9e:33:67:cd:90:8b:
80:95:db:a5:00:0a:74:ec:88:01:5d:bf:e0:b7:c9:
37:fd:62:39:95:76:80:07:1b:94:67:1f:88:e2:82:
ae:77:76:71:d6:b3:35:87:bb:3a:81:13:18:f4:45:
f1:5a:46:2d:db:69:c9:57:01:6b:23:40:36:a2:e9:
96:bb:32:78:2a:a1:56:66:7f:c2:92:27:df:1b:97:
57:98:43:90:3f:6b:6a:90:2e:05:4f:34:dd:1a:49:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8B:D6:64:4A:3A:46:DC:39:5E:C2:CE:AE:77:9B:9B:B5:4D:3A:46
X509v3 Authority Key Identifier:
keyid:D1:4D:B3:3C:EC:AD:1E:E1:06:8C:DF:B1:1E:61:67:3B:21:40:C3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0U2zPOytHuEGjN-xHmFnOyFAw34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/56e308-bdf2-407e-9130-4830a514ff29/1/0U2zPOytHuEGjN-xHmFnOyFAw34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9b:ea:52:2e:b1:a8:90:89:3c:de:09:02:b5:8f:6b:b2:9d:
02:fd:e0:20:d7:b5:92:6f:77:d2:ca:25:8c:b2:ed:96:07:94:
fa:34:2a:44:c3:8d:68:fd:2e:56:33:46:1f:0c:e8:ba:d6:cd:
dc:57:75:f4:02:53:fb:a5:eb:fb:95:ec:bf:a2:6d:75:cd:53:
78:7f:f3:a9:f5:b1:e6:c0:b3:d5:6b:aa:f1:4d:fc:99:73:e6:
8e:9f:13:e9:f1:e8:c6:98:04:28:da:7b:e7:74:b9:f8:4b:7e:
11:98:6f:f0:2b:bd:a8:71:f4:d1:c6:5c:4b:26:50:9e:83:3e:
ba:b6:1a:9a:cc:9d:97:00:65:ac:7b:42:e1:f4:48:d5:a0:f7:
42:76:06:14:62:41:4d:11:0d:10:0e:fc:5f:8e:c0:53:e2:44:
a7:a1:34:d9:ea:35:61:63:5b:4e:60:5c:b4:a8:dc:1a:28:e9:
d6:f3:6f:5c:ca:44:fd:2d:be:6f:36:cb:7f:53:28:f5:23:f8:
ea:0f:7b:51:87:76:59:c7:f6:91:4b:2a:81:5a:51:27:2e:e7:
1e:bb:d3:0a:07:c1:9c:7a:6c:41:1d:05:7e:15:41:b5:18:9c:
3e:2b:02:f7:ff:ef:b8:e8:d6:03:86:0e:3a:76:f8:ac:92:a2:
6c:65:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:44 2025 by rpki-client