Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/30ee61-fa50-4bf1-8efa-4b1f5962e68c/1/M1Fmj1Y2kAwouaSrf624vxmWYQ0.mft
File: M1Fmj1Y2kAwouaSrf624vxmWYQ0.mft (raw, json)
Hash identifier: bg6lNaVz7CfzF6N+aNmplji1u0qiQ6mpbYGdgWIbhCg=
Subject key identifier: D8:38:98:11:BC:AE:07:8E:02:41:12:E2:F0:9F:29:09:95:88:4B:C1
Authority key identifier: 33:51:66:8F:56:36:90:0C:28:B9:A4:AB:7F:AD:B8:BF:19:96:61:0D
Certificate issuer: /CN=3351668f5636900c28b9a4ab7fadb8bf1996610d
Certificate serial: 018D8D18F1FBEA8213B6487E0F6BAC2D035E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1Fmj1Y2kAwouaSrf624vxmWYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/30ee61-fa50-4bf1-8efa-4b1f5962e68c/1/M1Fmj1Y2kAwouaSrf624vxmWYQ0.mft
Manifest number: 0861
Signing time: Fri 09 Feb 2024 09:00:38 +0000
Manifest this update: Fri 09 Feb 2024 09:00:38 +0000
Manifest next update: Sat 10 Feb 2024 09:00:38 +0000
Files and hashes: 1: M1Fmj1Y2kAwouaSrf624vxmWYQ0.crl (hash: IRdRQZekZgyajMFfkyfxF0VCNBOEjFoCZsM+eDrTnXk=)
2: jTduaR72_kcTa0wGjQLy7qYcgYw.roa (hash: euJtmVtutcd3pb8t7koj8gqoHLP5Ttd3d6ktvxs9gwU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:18:f1:fb:ea:82:13:b6:48:7e:0f:6b:ac:2d:03:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3351668f5636900c28b9a4ab7fadb8bf1996610d
Validity
Not Before: Feb 9 09:00:38 2024 GMT
Not After : Feb 10 09:00:38 2024 GMT
Subject: CN=d8389811bcae078e024112e2f09f290995884bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:f1:22:47:25:eb:be:bb:39:69:90:ff:cd:
30:f1:60:ef:f0:d9:c7:d8:a7:cc:c9:27:df:72:eb:
a6:0e:12:e0:b3:cc:c4:61:86:9a:6c:a7:bb:eb:8c:
50:82:90:09:d5:fd:fc:db:a3:ab:0c:a2:6f:46:b8:
2a:05:cb:85:01:d3:e5:4e:c7:7d:c8:92:2f:47:d8:
f5:b2:a4:cc:6d:0d:15:c8:7e:19:16:42:69:a9:7a:
17:d2:13:c3:6b:87:09:64:39:ac:7e:ef:ab:11:99:
73:70:3b:12:6d:dc:57:78:66:11:6b:38:66:2e:d8:
a9:09:59:6f:ec:03:ff:9b:e2:17:56:6a:1a:09:40:
32:37:c0:d2:5b:9a:7a:0a:79:05:73:0a:d7:38:98:
97:66:62:7c:12:1f:5f:99:db:50:b1:81:68:b5:08:
7a:10:d5:af:93:5b:60:de:3d:1d:73:9b:48:03:b9:
17:93:4b:17:d2:02:aa:79:48:b9:6c:d3:01:14:79:
c2:24:8f:39:dd:41:24:54:2f:d7:f2:7e:c7:08:a7:
25:77:26:bd:9c:80:f5:66:5b:92:10:30:4f:68:cb:
e0:77:f8:f8:af:73:0c:fc:38:cf:5e:81:c5:62:dc:
9f:3d:9d:2b:8d:c9:1d:3d:4d:09:8a:ad:9d:a3:fa:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:38:98:11:BC:AE:07:8E:02:41:12:E2:F0:9F:29:09:95:88:4B:C1
X509v3 Authority Key Identifier:
keyid:33:51:66:8F:56:36:90:0C:28:B9:A4:AB:7F:AD:B8:BF:19:96:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1Fmj1Y2kAwouaSrf624vxmWYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/30ee61-fa50-4bf1-8efa-4b1f5962e68c/1/M1Fmj1Y2kAwouaSrf624vxmWYQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/30ee61-fa50-4bf1-8efa-4b1f5962e68c/1/M1Fmj1Y2kAwouaSrf624vxmWYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8d:dd:43:c4:86:05:9b:64:48:f8:80:85:2c:45:08:11:dc:
26:15:30:68:f7:80:7f:6d:7e:d4:8b:a7:e7:f5:b2:80:17:af:
47:8c:8a:e8:f7:7d:a8:a8:c6:b3:cc:2e:c7:66:2f:61:b8:41:
7e:b7:f5:35:2c:f2:81:96:d7:df:95:51:22:b8:2e:13:ba:7f:
85:ef:e7:03:4f:1e:1b:48:26:f5:d4:48:04:15:c7:fe:9b:76:
4c:47:40:2e:5d:eb:5a:47:fa:74:27:43:da:e1:a3:38:13:2e:
35:62:d2:d1:2f:10:c4:b0:42:11:50:df:13:5a:69:ed:c9:2d:
8a:51:c0:c1:23:54:db:48:45:f0:5d:90:1b:76:33:55:27:d7:
a0:7f:1f:97:87:75:dd:cc:95:36:0f:77:c7:10:61:f9:67:78:
18:c1:e3:58:49:6e:ca:c8:2d:18:b6:d4:1a:93:1d:60:40:9e:
4e:82:f2:29:ce:f4:68:c2:f4:a8:47:c0:bc:2d:22:13:de:ac:
eb:23:c0:04:fe:fe:2c:b5:d3:47:88:39:50:bf:ef:12:ec:cb:
1d:d0:e4:2f:19:8c:3d:30:41:4c:dc:16:7c:3d:21:8d:a3:3e:
e3:0e:30:b7:cd:01:b7:2d:97:a6:1a:a2:21:6a:35:f4:7d:c3:
50:e1:1b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:24:45 2025 by rpki-client