Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/_k23pz74vfSf-8VCKu25Uk5WYOI.mft
File: _k23pz74vfSf-8VCKu25Uk5WYOI.mft (raw, json)
Hash identifier: +QCTMmNNU9C6buSjPyOwCVICivIiWZlqQn+sFeGVVWw=
Subject key identifier: 4F:16:91:00:A3:AF:3F:B2:A8:79:DD:1E:34:47:7C:79:AF:AB:18:21
Authority key identifier: FE:4D:B7:A7:3E:F8:BD:F4:9F:FB:C5:42:2A:ED:B9:52:4E:56:60:E2
Certificate issuer: /CN=fe4db7a73ef8bdf49ffbc5422aedb9524e5660e2
Certificate serial: 0189673DA1FBC2865C57D4A8B7AEEBCEB08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_k23pz74vfSf-8VCKu25Uk5WYOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/_k23pz74vfSf-8VCKu25Uk5WYOI.mft
Manifest number: 086D
Signing time: Tue 18 Jul 2023 04:23:59 +0000
Manifest this update: Tue 18 Jul 2023 04:23:59 +0000
Manifest next update: Wed 19 Jul 2023 04:23:59 +0000
Files and hashes: 1: 4dGvv1Fmv3tssbsU8SRG7NmMvlY.roa (hash: iQWnDXmB5UiAkbFKjif1J+Fvc/xjpnVf+2347iz3aNo=)
2: _k23pz74vfSf-8VCKu25Uk5WYOI.crl (hash: PXgPELhUJqjS00XOHlNbAP0EPUZlcIsEw/m6JGqSAKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:3d:a1:fb:c2:86:5c:57:d4:a8:b7:ae:eb:ce:b0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe4db7a73ef8bdf49ffbc5422aedb9524e5660e2
Validity
Not Before: Jul 18 04:23:59 2023 GMT
Not After : Jul 19 04:23:59 2023 GMT
Subject: CN=4f169100a3af3fb2a879dd1e34477c79afab1821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:bd:cd:02:81:21:4a:67:a7:dd:08:94:a0:
e2:52:c4:1a:34:b4:71:d5:61:f5:1c:cb:98:b9:71:
9f:31:21:66:ce:a2:64:5c:82:58:fb:04:ec:c5:ee:
5a:52:38:a2:be:a8:cb:24:e1:18:4d:df:ad:2f:8b:
87:e1:27:8b:ec:82:95:77:be:a1:da:be:3b:0a:51:
a5:4b:cb:7e:d9:07:ba:a8:e2:87:3a:4a:5a:75:45:
19:f5:ba:bf:d3:13:60:97:91:d4:c4:0d:90:bf:01:
a6:0f:7c:36:45:f4:3a:34:4b:64:5d:fe:b9:f7:8e:
79:75:c5:9b:2e:4f:05:97:02:b6:dc:e0:57:2e:04:
0e:21:4e:42:d4:c5:fa:52:ce:18:ea:5b:31:9e:b2:
61:54:cb:39:8b:a5:82:80:e6:07:d1:4a:f9:95:97:
69:54:6a:9f:11:c3:06:a4:fc:9f:3d:32:66:78:da:
6b:44:69:f5:5b:10:cf:cc:bb:33:eb:69:84:b1:7b:
22:1c:75:64:06:71:b1:f7:75:3e:9a:bd:f4:00:c1:
12:97:77:7c:3e:33:66:de:b8:63:e7:39:77:1b:2f:
81:47:35:f6:4c:4a:a3:57:43:3d:e0:e6:22:d9:a1:
bd:3c:fe:b2:c2:13:24:95:52:04:06:3a:08:14:d8:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:16:91:00:A3:AF:3F:B2:A8:79:DD:1E:34:47:7C:79:AF:AB:18:21
X509v3 Authority Key Identifier:
keyid:FE:4D:B7:A7:3E:F8:BD:F4:9F:FB:C5:42:2A:ED:B9:52:4E:56:60:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_k23pz74vfSf-8VCKu25Uk5WYOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/_k23pz74vfSf-8VCKu25Uk5WYOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d87d60-5c58-4289-95f4-aadb79a60395/1/_k23pz74vfSf-8VCKu25Uk5WYOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:56:db:4c:2f:3f:8a:aa:dd:b2:0c:8b:f1:2a:aa:67:b9:56:
06:dd:c8:7f:a4:89:46:f7:1a:d0:89:8c:d0:35:8c:58:d9:d7:
94:50:91:45:5c:37:08:b3:30:cd:31:59:7d:06:8e:30:e7:6d:
5a:74:76:47:94:ad:de:8e:51:ec:06:ca:1a:01:29:41:39:82:
0a:93:01:a1:ec:79:45:33:7e:73:8a:15:a9:d5:56:d0:95:ab:
4c:0a:a7:04:46:14:a1:60:2b:f8:1f:50:56:6c:ec:b0:bb:72:
e5:2a:e9:83:b1:87:50:cc:52:1c:72:a4:ff:21:62:d3:8f:94:
0e:91:55:91:fc:fa:7a:dc:2c:cd:20:be:d2:eb:7e:bd:3d:de:
e1:4c:4d:77:16:4f:e0:0f:d1:37:17:a6:b0:c6:4a:b1:29:0e:
5b:4b:25:83:61:60:0f:67:7d:70:1d:f2:8e:0c:97:9a:b6:cc:
5f:8b:71:cb:cf:0d:b9:82:7b:e0:83:2b:7c:b6:f9:5f:78:cc:
cb:d6:31:e4:89:7b:b6:63:1e:bc:9a:00:34:1e:98:6b:7e:1d:
5b:87:ae:64:b7:df:66:8c:20:7d:b4:9a:4f:ba:45:54:26:db:
e4:59:7a:fa:cf:03:22:63:ac:47:ea:07:6b:53:81:e6:cb:07:
0c:5c:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:21 2025 by rpki-client