Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/M5nZY6y6TodwXRFKCDXbTk9ZAHw.mft
File: M5nZY6y6TodwXRFKCDXbTk9ZAHw.mft (raw, json)
Hash identifier: r0x5GHXFcpSjmW8NIW12RjPmBuENpHvnh/ah9IxsHT8=
Subject key identifier: BD:9D:FC:CB:DD:6A:3D:B0:72:3D:5D:E2:D0:1E:DA:2D:B5:AA:FC:77
Authority key identifier: 33:99:D9:63:AC:BA:4E:87:70:5D:11:4A:08:35:DB:4E:4F:59:00:7C
Certificate issuer: /CN=3399d963acba4e87705d114a0835db4e4f59007c
Certificate serial: 0183B1E177CCEBA26DA4A69ECC4204BC4899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5nZY6y6TodwXRFKCDXbTk9ZAHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/M5nZY6y6TodwXRFKCDXbTk9ZAHw.mft
Manifest number: 0E
Signing time: Fri 07 Oct 2022 09:58:06 +0000
Manifest this update: Fri 07 Oct 2022 09:58:06 +0000
Manifest next update: Sat 08 Oct 2022 09:58:06 +0000
Files and hashes: 1: 5DGAwKhEBwjczlUmcxjZb5yGlzY.roa (hash: PwjuI1X9vbdXHsHkoAjzti9lkwsinOvQp+ytXzIu4j4=)
2: M5nZY6y6TodwXRFKCDXbTk9ZAHw.crl (hash: ys1GrxRy4gNlV54lM+XsQCkEsxMzRki8pE7gYKi6kaE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:e1:77:cc:eb:a2:6d:a4:a6:9e:cc:42:04:bc:48:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3399d963acba4e87705d114a0835db4e4f59007c
Validity
Not Before: Oct 7 09:58:06 2022 GMT
Not After : Oct 8 09:58:06 2022 GMT
Subject: CN=bd9dfccbdd6a3db0723d5de2d01eda2db5aafc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:af:b1:8a:a6:59:70:b6:01:ad:48:d5:0c:cb:
8f:74:3b:9a:f9:b8:69:9e:d4:5f:cd:58:a5:2f:5b:
8d:04:bd:d8:86:50:3a:5a:83:ef:91:0e:d1:9a:81:
88:0c:6a:c7:28:c9:11:3f:f7:8e:7d:0f:ac:31:74:
21:87:da:77:62:4e:26:84:c2:01:7c:a3:97:00:2f:
e2:bf:03:f6:a5:1d:8b:49:90:8b:8f:99:e1:97:51:
ed:dc:50:26:66:eb:30:11:1a:1b:fe:a3:f3:83:65:
77:06:62:6c:dd:e0:47:0a:af:97:1b:5e:c2:a9:33:
4b:5a:f5:f6:5d:b0:5e:c5:a0:87:db:90:7c:a0:ce:
d5:0c:a7:cf:ae:8f:dc:8b:71:34:5d:74:31:d5:d7:
20:0e:bd:48:5a:65:6a:36:33:df:35:be:b5:b9:8d:
71:51:8d:2f:79:f6:2d:a0:90:8d:dc:cf:33:49:d4:
84:f2:93:33:96:67:49:ca:f6:03:4c:79:20:80:5d:
4e:62:29:70:22:d6:58:b7:b0:7d:2f:d0:56:05:ef:
b4:e3:51:92:49:bc:0c:f1:8c:fa:cc:09:31:cd:1a:
61:98:bf:67:66:0d:4f:cc:ff:24:4b:d9:b5:72:67:
0d:e9:ac:41:94:54:10:81:d9:41:da:02:86:13:93:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9D:FC:CB:DD:6A:3D:B0:72:3D:5D:E2:D0:1E:DA:2D:B5:AA:FC:77
X509v3 Authority Key Identifier:
keyid:33:99:D9:63:AC:BA:4E:87:70:5D:11:4A:08:35:DB:4E:4F:59:00:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5nZY6y6TodwXRFKCDXbTk9ZAHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/M5nZY6y6TodwXRFKCDXbTk9ZAHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/212b85-f9a9-4319-ae99-e5298dd21dd8/1/M5nZY6y6TodwXRFKCDXbTk9ZAHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:f2:0b:c8:3e:37:3b:cc:fe:cd:78:37:fd:fd:02:32:7a:
9d:f4:17:4b:ec:30:84:59:76:66:a4:33:94:46:ac:80:12:e6:
b6:b3:90:15:28:c2:cf:b3:de:68:33:ea:08:47:e7:cb:42:a7:
25:dd:61:d1:9b:1f:45:89:33:ac:c9:04:c7:1d:0f:d2:62:f6:
f2:86:11:11:70:6c:f1:bc:06:5a:21:bc:88:1a:48:60:39:65:
26:7f:03:4a:16:23:1a:b3:32:b2:23:20:94:3b:b9:97:17:0d:
cf:68:bd:74:6a:51:82:a4:e2:98:9e:bc:28:d5:d3:fd:9f:4f:
f5:dd:ad:cc:cf:a9:94:98:da:1f:9d:73:70:3d:8e:73:b6:07:
23:c2:17:25:22:0e:8f:5d:fc:fa:94:fb:d5:95:e6:2c:e4:5c:
98:88:ef:65:c4:6f:bc:20:6a:b9:fa:a0:d8:50:eb:24:df:77:
4d:ee:d8:a7:32:b5:07:df:c3:0d:f3:87:e6:0c:70:f8:7c:89:
87:f1:a4:cb:b7:71:a5:f5:e1:fd:ab:9f:2e:a2:e6:ae:64:65:
e8:c7:19:5f:f9:ac:5b:01:90:85:f0:01:d2:c4:85:7e:5c:be:
01:93:ae:6f:5e:61:58:23:ed:3c:a2:88:05:94:55:4c:01:12:
27:fa:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:00 2025 by rpki-client