Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.mft
File: RkJmNgCVZ02VtwcwsxMmQjLAK6A.mft (raw, json)
Hash identifier: 3PKBhjm9z6jbNe/X8mZqABzkMrW7M06O7TinguA4oHw=
Subject key identifier: 3B:54:ED:40:09:B7:F6:92:18:AE:67:79:0B:5F:7C:6F:74:DE:D4:CB
Authority key identifier: 46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0
Certificate issuer: /CN=464266360095674d95b70730b313264232c02ba0
Certificate serial: 018A62A3E17AC0E0D5B38BCDCE8283459BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.mft
Manifest number: 088A
Signing time: Tue 05 Sep 2023 00:00:21 +0000
Manifest this update: Tue 05 Sep 2023 00:00:21 +0000
Manifest next update: Wed 06 Sep 2023 00:00:21 +0000
Files and hashes: 1: RkJmNgCVZ02VtwcwsxMmQjLAK6A.crl (hash: gUHDCbkAzDmcRUTzclifluOJ2iMEi5uzA5aNbJgIsfU=)
2: jH3rT7dSiZYu7vh-PYFuC3E4ZTo.roa (hash: I4FjMEfB3yTLRfyyesu6Umi69nZHpp+e4vqHL8M5PVI=)
3: nR9Tf5dh2VPyMOMhrS8B45ySYE8.roa (hash: AEGjgdL219jJ6Csj573wQpxC45SQdIYUjLDGovdmXIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:62:a3:e1:7a:c0:e0:d5:b3:8b:cd:ce:82:83:45:9b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464266360095674d95b70730b313264232c02ba0
Validity
Not Before: Sep 5 00:00:21 2023 GMT
Not After : Sep 6 00:00:21 2023 GMT
Subject: CN=3b54ed4009b7f69218ae67790b5f7c6f74ded4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:3c:67:da:f0:f2:14:f0:68:09:f4:cb:16:
37:80:70:46:c1:61:1b:96:08:ed:b5:77:2e:27:44:
40:44:6e:dc:2b:2b:80:cd:69:e0:f3:9f:c4:9c:17:
e8:e0:4f:25:30:39:51:b8:2a:c2:19:b3:25:36:d1:
de:03:d1:f4:d6:0e:cd:7f:46:b8:0d:4e:32:ab:f6:
15:ba:96:b4:be:a7:6c:47:0f:ca:13:fa:9d:d2:45:
3e:67:8a:ab:79:57:f3:6f:14:8f:a6:16:21:28:40:
01:72:72:20:eb:5d:60:8b:0b:af:a6:cd:5f:1c:ab:
40:67:23:07:92:e4:9c:5e:fe:13:01:66:73:fa:b0:
91:38:67:37:d2:b0:ae:e3:d1:60:38:f6:38:e7:f2:
0a:44:02:3a:d6:b9:27:89:e0:6b:f7:ad:51:2f:8e:
db:34:d7:1c:26:fe:5c:15:11:8e:8e:53:3b:dd:9d:
d7:d8:93:c7:1a:4b:6b:0e:b8:99:ad:f2:e7:69:39:
2d:95:37:eb:72:e8:da:b3:10:2c:0e:4c:5f:53:94:
36:c5:e7:ff:d3:fd:80:81:b5:75:ca:6c:4f:ec:04:
fb:66:3b:d5:de:e1:c7:be:f5:f9:37:83:98:19:6d:
34:69:88:30:b0:1e:af:f1:9f:21:48:ba:1d:f5:f9:
a2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:54:ED:40:09:B7:F6:92:18:AE:67:79:0B:5F:7C:6F:74:DE:D4:CB
X509v3 Authority Key Identifier:
keyid:46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:12:85:fd:b2:04:2b:8b:d6:67:9d:fc:e4:a3:04:23:9d:d9:
f9:76:22:df:f5:24:90:bb:31:9e:41:1f:92:98:48:f2:e9:bf:
a0:a0:a7:22:f6:1e:d4:33:c0:84:77:b1:97:d6:e7:e9:6c:5d:
34:58:9d:e6:62:37:8b:3a:ab:ba:3f:e9:cd:89:25:98:1f:b0:
f3:68:0a:bb:bd:37:8d:58:e9:88:76:74:a1:e0:e6:5d:15:bd:
0d:69:b6:0d:7d:d2:63:81:8c:e1:be:ff:2b:90:cf:08:81:56:
dd:e6:24:16:d1:82:c7:43:5a:a9:d1:7e:47:37:5b:ee:b6:dd:
68:36:a3:e4:f1:dc:f2:9b:44:34:80:19:8e:f7:cf:f9:19:24:
54:15:47:19:9a:ed:c6:a0:60:49:76:0b:77:df:9b:99:5a:ca:
3b:8b:98:e5:00:79:0a:5d:7b:76:a0:1c:d3:3b:03:c2:3e:1b:
2a:35:11:ae:4c:ba:78:cc:74:b9:68:3c:ee:7f:91:f4:f9:ed:
63:ed:9b:e4:9f:5e:fa:1e:f2:09:2b:f6:13:5f:2f:fa:da:5d:
fa:d2:df:20:10:85:ee:fc:21:84:60:24:e5:7a:7b:46:e7:fe:
8c:54:c8:e5:90:27:f3:34:b1:85:32:d8:bc:29:2e:10:5f:c5:
f1:8a:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:24 2025 by rpki-client