Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8d9f9c-29d6-44af-973e-99ca01beab76/1/zaQg3gjV04NKkKy7n8hyfW_Mlgc.mft
File: zaQg3gjV04NKkKy7n8hyfW_Mlgc.mft (raw, json)
Hash identifier: U8R49o0B7Vl5gf6to3TQT+xCMgOPbbGtcmEitjKBGJg=
Subject key identifier: 47:BA:D2:A6:D7:15:A7:57:A6:5E:6D:33:F7:55:A1:53:F0:74:1C:70
Authority key identifier: CD:A4:20:DE:08:D5:D3:83:4A:90:AC:BB:9F:C8:72:7D:6F:CC:96:07
Certificate issuer: /CN=cda420de08d5d3834a90acbb9fc8727d6fcc9607
Certificate serial: 018924A15C6182AD55A9EFCEEE2235ED6FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaQg3gjV04NKkKy7n8hyfW_Mlgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8d9f9c-29d6-44af-973e-99ca01beab76/1/zaQg3gjV04NKkKy7n8hyfW_Mlgc.mft
Manifest number: 04E9
Signing time: Wed 05 Jul 2023 05:58:21 +0000
Manifest this update: Wed 05 Jul 2023 05:58:21 +0000
Manifest next update: Thu 06 Jul 2023 05:58:21 +0000
Files and hashes: 1: zaQg3gjV04NKkKy7n8hyfW_Mlgc.crl (hash: NyiOLsNVCyaxdoL6HzSVZnIWOSl+CXgR6HhKH3j+b5M=)
2: zrK8rWRQIj1txhmhOZJ8Nprrt8E.roa (hash: RYQLFNFRgbjEtAoImfPxL9bo2YQB+8BdkJ3unT+kFKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:24:a1:5c:61:82:ad:55:a9:ef:ce:ee:22:35:ed:6f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda420de08d5d3834a90acbb9fc8727d6fcc9607
Validity
Not Before: Jul 5 05:58:21 2023 GMT
Not After : Jul 6 05:58:21 2023 GMT
Subject: CN=47bad2a6d715a757a65e6d33f755a153f0741c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:4d:a9:2f:01:ab:99:ff:ee:b0:69:9e:22:
87:5f:74:37:85:c2:eb:e5:92:cb:2e:c6:27:5b:69:
46:3e:70:76:8f:09:16:4a:46:0b:0f:8e:c9:ce:2f:
41:d4:e4:65:af:f5:b0:d6:6d:a5:5a:03:12:f3:04:
ed:a6:5b:bf:a0:73:90:0b:d2:69:0d:0e:d1:03:34:
1a:d6:df:32:5b:56:72:90:ff:48:2b:1b:b7:94:db:
b9:44:92:f3:0b:51:cc:7a:3a:a4:4e:87:57:e4:60:
53:d2:34:c6:9e:bb:65:20:03:5a:b9:92:55:d2:78:
da:be:3a:32:ed:e7:4f:a2:36:fd:ec:2c:69:45:93:
1b:f3:4f:94:f5:13:25:22:71:57:ad:cf:55:3d:ad:
c8:55:03:20:73:ca:74:07:9d:9f:a4:37:ea:e9:de:
f9:29:05:98:ba:96:48:3d:cc:51:70:12:13:4a:c4:
43:f7:72:2c:af:df:5f:66:ba:24:96:f7:bd:d8:c6:
ed:1b:a6:c7:f7:e8:e9:9e:55:88:a3:22:e0:73:4b:
71:34:74:17:2b:c1:f5:ff:7b:96:d3:f6:90:bc:0f:
f7:19:bc:42:29:f6:57:bf:d2:74:d6:22:88:94:be:
da:2b:51:fe:fb:1b:ff:5e:7e:84:6f:2f:01:ae:a8:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:D2:A6:D7:15:A7:57:A6:5E:6D:33:F7:55:A1:53:F0:74:1C:70
X509v3 Authority Key Identifier:
keyid:CD:A4:20:DE:08:D5:D3:83:4A:90:AC:BB:9F:C8:72:7D:6F:CC:96:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaQg3gjV04NKkKy7n8hyfW_Mlgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8d9f9c-29d6-44af-973e-99ca01beab76/1/zaQg3gjV04NKkKy7n8hyfW_Mlgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8d9f9c-29d6-44af-973e-99ca01beab76/1/zaQg3gjV04NKkKy7n8hyfW_Mlgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6a:ce:0e:23:0c:10:ac:41:eb:b4:7a:71:23:75:48:70:dc:
91:3a:3f:54:73:8b:49:fd:a5:7b:49:31:88:90:65:0e:fc:b7:
38:a8:95:3b:db:83:c4:4f:38:40:ea:df:ce:f9:c4:4a:48:cd:
d0:59:ae:b9:3f:46:6b:1e:8e:33:86:c7:af:f7:cc:75:c0:de:
13:d7:2a:13:ba:7d:2c:47:ff:97:d4:e8:61:2a:d5:d5:40:40:
95:dc:7d:29:2d:55:f1:85:cd:f9:35:8e:43:57:d6:9e:af:dd:
95:1e:5f:04:83:00:54:81:ee:1d:e5:6c:55:b5:c2:86:ad:54:
51:ca:c8:32:a7:43:f8:94:2b:aa:1b:78:45:c5:aa:fb:1d:7b:
09:6e:7a:d1:0e:63:ba:57:fe:24:f2:84:0e:20:91:0f:c4:34:
ad:31:8f:f8:a7:04:d9:c9:d0:ab:32:85:d7:e5:8b:18:61:1b:
17:e9:66:75:c4:01:ee:02:d4:50:3c:e1:e8:1b:e3:e4:f2:c8:
31:de:9b:b2:53:dc:cb:27:ac:30:5b:31:b6:76:e0:8b:bb:7c:
e7:80:9f:4f:7e:13:a3:87:91:25:98:55:38:fa:08:86:1d:83:
58:7c:6b:3c:0c:8e:00:f6:3c:14:65:38:5d:73:44:2f:dd:db:
c6:97:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:25:04 2025 by rpki-client