Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9e53a7-8bfc-4c1d-8148-9dcf33f0b2f0/1/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.mft
File: MaS0dAK7iEEdwVCf1cJ1_KCbHAk.mft (raw, json)
Hash identifier: r1mWeTQr/8fR7i3GGwkyaZfhiRbVcPjCp5Fc0fIIZXg=
Subject key identifier: CE:F9:83:AF:D4:BF:DA:41:9A:1F:53:E2:75:45:9E:63:C2:9E:73:53
Authority key identifier: 31:A4:B4:74:02:BB:88:41:1D:C1:50:9F:D5:C2:75:FC:A0:9B:1C:09
Certificate issuer: /CN=31a4b47402bb88411dc1509fd5c275fca09b1c09
Certificate serial: 018ABB0CBAAC3E2477D8313F4A6A43D29FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9e53a7-8bfc-4c1d-8148-9dcf33f0b2f0/1/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.mft
Manifest number: 04AA
Signing time: Fri 22 Sep 2023 04:01:28 +0000
Manifest this update: Fri 22 Sep 2023 04:01:28 +0000
Manifest next update: Sat 23 Sep 2023 04:01:28 +0000
Files and hashes: 1: MaS0dAK7iEEdwVCf1cJ1_KCbHAk.crl (hash: QRaz2QtTfZexOCvABaZYgd6y58vV+zS2dqeUTrC8tbE=)
2: qWOcqEQ1MX6JyLvwouypKhZJ5pU.roa (hash: h9fS7/6v3CVcQ4h/piBlVX1IHxOATlK/eo9i8pQe5SI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bb:0c:ba:ac:3e:24:77:d8:31:3f:4a:6a:43:d2:9f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a4b47402bb88411dc1509fd5c275fca09b1c09
Validity
Not Before: Sep 22 04:01:28 2023 GMT
Not After : Sep 23 04:01:28 2023 GMT
Subject: CN=cef983afd4bfda419a1f53e275459e63c29e7353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:ca:c8:1d:3d:2e:f9:f7:f5:96:e8:af:5a:
91:c2:35:93:68:57:c2:c1:b1:60:45:f0:b3:67:c7:
3f:c4:4b:7f:a5:f8:34:00:51:87:01:50:be:2c:56:
10:26:0c:e6:b3:46:42:38:cd:b9:84:a8:c6:27:6b:
e0:21:64:18:44:74:94:26:33:a2:9e:1d:9a:fc:6e:
97:23:5d:c2:ea:fa:82:fa:00:dd:29:0a:b6:be:82:
14:82:3c:57:5f:b8:5f:88:13:5c:fd:20:e2:c0:8a:
ba:59:ca:17:c3:f3:20:84:3c:96:f1:e5:e5:a2:07:
70:e3:c8:9b:7f:c8:7e:40:0c:9c:b0:70:72:72:ea:
fd:27:fb:7c:11:a3:3d:f0:d8:3b:6a:96:96:1d:eb:
ea:f4:89:09:a5:96:94:38:d8:56:79:e7:d9:9c:d5:
9a:3a:9c:e4:5f:75:a7:c7:fd:c1:fc:28:ec:47:5e:
89:7f:fd:97:75:b9:c6:a8:82:2d:01:20:30:d9:a8:
bf:cb:0a:24:cf:a3:70:e4:c6:5d:dd:7c:71:3e:00:
cf:93:89:e9:49:60:af:ac:75:b3:88:06:e2:b6:19:
31:bc:9c:7b:b5:12:e3:fa:42:29:a2:0e:03:d9:30:
45:31:35:c1:cb:24:28:f0:c3:b2:af:cf:82:65:e9:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F9:83:AF:D4:BF:DA:41:9A:1F:53:E2:75:45:9E:63:C2:9E:73:53
X509v3 Authority Key Identifier:
keyid:31:A4:B4:74:02:BB:88:41:1D:C1:50:9F:D5:C2:75:FC:A0:9B:1C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9e53a7-8bfc-4c1d-8148-9dcf33f0b2f0/1/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9e53a7-8bfc-4c1d-8148-9dcf33f0b2f0/1/MaS0dAK7iEEdwVCf1cJ1_KCbHAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:70:12:3d:07:e8:9d:9f:ca:af:31:ee:0f:a1:24:be:da:ca:
a2:94:1c:3e:9d:c6:ea:50:71:b6:e0:5e:bc:cd:fc:2b:30:4f:
e1:65:b5:63:8e:72:3e:c1:a0:cc:cd:61:4e:c6:1c:a3:ee:6a:
9d:b3:45:7a:fe:c6:d8:58:99:ba:cf:28:25:66:b9:18:9f:0d:
4b:28:d9:92:a2:14:7b:e7:36:f5:df:e2:8d:87:6a:6c:3a:0b:
71:f4:79:83:92:e9:d8:03:15:74:a7:bd:17:65:14:5c:aa:b1:
ad:6a:cc:a8:7a:b2:3a:9b:ad:c7:fa:2e:f9:7e:ad:7d:92:ad:
c4:c3:8a:d8:9e:96:8f:9d:99:5d:33:61:cb:9f:07:e3:d5:b9:
2d:bb:9d:67:e9:4c:8a:7e:e1:47:02:8f:f2:42:d6:74:77:c9:
60:bf:76:14:91:f6:db:c3:20:ae:a2:54:bf:19:1f:c7:f5:9f:
51:a7:f4:99:5d:25:e6:7f:de:8c:55:da:ca:35:33:69:ea:fe:
66:22:00:ff:26:53:3c:21:4e:33:cc:ba:c0:5e:10:e9:7c:b8:
17:d0:08:87:0b:60:3b:20:cc:18:95:a8:0f:c5:3c:1e:bf:11:
ee:ca:1e:4f:27:6c:24:48:58:0c:15:eb:d7:ce:05:84:9d:73:
92:5b:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:04:26 2025 by rpki-client