Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft
File: b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft (raw, json)
Hash identifier: 8Mhvg5i9ge7++9SDGaOYqaeX1Ezi6bLMx3h8tc4uAao=
Subject key identifier: 30:A6:B5:11:E7:2E:B6:E6:3E:BF:D4:77:0F:8C:EF:DE:E8:60:A2:A2
Authority key identifier: 6F:B6:CB:C7:D1:FE:5E:68:12:50:1F:0C:25:96:DF:63:EF:5F:C8:E6
Certificate issuer: /CN=6fb6cbc7d1fe5e6812501f0c2596df63ef5fc8e6
Certificate serial: 018E2F895CD6D76887C50A12CF4DB04A9303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7bLx9H-XmgSUB8MJZbfY-9fyOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft
Manifest number: 0288
Signing time: Mon 11 Mar 2024 22:01:55 +0000
Manifest this update: Mon 11 Mar 2024 22:01:55 +0000
Manifest next update: Tue 12 Mar 2024 22:01:55 +0000
Files and hashes: 1: FGR8E0ReHVS6x6_a_Y_PoJxl_H4.roa (hash: 2VPc3+k14YDj+VEpbWgXk3gPVop/bti9KbQmxBYKhTk=)
2: b7bLx9H-XmgSUB8MJZbfY-9fyOY.crl (hash: vSyNU8vnWB/vIwLVdOgnYrqKgciQXmk+oo6X1cUnLBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2f:89:5c:d6:d7:68:87:c5:0a:12:cf:4d:b0:4a:93:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fb6cbc7d1fe5e6812501f0c2596df63ef5fc8e6
Validity
Not Before: Mar 11 22:01:55 2024 GMT
Not After : Mar 12 22:01:55 2024 GMT
Subject: CN=30a6b511e72eb6e63ebfd4770f8cefdee860a2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:75:e0:3d:cb:f6:75:26:4c:87:c8:ea:0a:
d3:a1:40:e6:24:64:89:1e:a6:f7:7e:bf:2f:d6:c8:
91:83:51:03:53:5c:78:73:ab:88:ba:c5:c1:0a:0e:
d3:1f:a9:32:e2:e8:9d:7e:43:f0:0f:b0:b8:33:4b:
95:a2:e7:48:cc:f9:5e:63:e5:5e:0c:dc:16:bd:e2:
47:ed:f0:ec:d3:b9:3e:e3:e4:b3:da:25:4b:2d:1e:
a6:89:9b:cb:f5:0b:88:fd:9f:30:39:0b:e0:1d:94:
5c:58:91:3e:2b:a3:5a:0b:1f:a1:b7:de:95:37:16:
a1:16:17:75:70:0e:39:e3:4c:61:3b:52:14:58:08:
02:c5:05:26:21:17:3b:5d:9e:a5:f5:9b:86:e4:00:
9b:3f:76:05:b4:e1:84:e5:62:95:1d:cb:a2:02:e7:
62:5e:b4:58:2f:9e:b3:ad:6f:7a:70:68:26:bc:e6:
32:0e:62:c7:5e:9f:f9:ae:7a:8d:1a:a3:f2:64:82:
bc:bb:2d:a8:7e:75:c8:b6:7a:fa:42:5f:38:0a:19:
c0:eb:30:25:d9:22:81:ad:e5:e5:a7:cd:91:68:e1:
78:03:81:de:09:68:aa:48:66:e4:a9:e4:c7:d1:76:
ff:2d:50:c7:f4:9d:55:c5:ca:91:ee:55:47:53:95:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A6:B5:11:E7:2E:B6:E6:3E:BF:D4:77:0F:8C:EF:DE:E8:60:A2:A2
X509v3 Authority Key Identifier:
keyid:6F:B6:CB:C7:D1:FE:5E:68:12:50:1F:0C:25:96:DF:63:EF:5F:C8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7bLx9H-XmgSUB8MJZbfY-9fyOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/573151-70b4-46a4-bcac-28aa5cc44e51/1/b7bLx9H-XmgSUB8MJZbfY-9fyOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:78:f2:73:3d:84:40:86:2c:e5:9f:5f:75:e7:8d:25:74:
97:19:ca:51:ae:da:e6:90:26:af:7f:15:2b:a5:c8:a9:75:6f:
0f:b6:ae:23:4c:18:9e:b3:ff:a6:3c:58:b1:89:49:20:c6:fb:
ed:2b:73:a5:ee:95:7d:1a:55:02:53:78:06:32:29:1c:0f:91:
c0:84:06:82:ca:3e:eb:39:e7:50:e2:e6:a2:4e:f2:c6:b8:31:
a8:37:a9:80:ef:dc:9f:68:c6:08:2b:45:8e:9d:41:30:08:11:
48:51:e9:f5:da:46:f8:46:fc:47:ed:6f:69:ec:e3:d8:b4:e1:
46:a3:c8:59:33:15:49:97:90:15:89:9c:ac:62:10:0f:88:10:
31:ce:91:36:4f:b9:74:db:57:21:1b:92:c5:6f:39:0e:60:1a:
42:34:b9:e0:27:9f:fc:83:f4:67:be:47:a2:5e:38:8f:88:ae:
b5:8d:24:de:b3:b9:b6:ce:c8:4a:12:e2:62:85:ed:fa:52:eb:
39:c6:6e:6a:3b:8b:b2:f7:6f:7f:ee:68:55:12:31:d8:10:0d:
2f:fa:b3:03:aa:ba:7f:b5:e1:4a:a4:39:10:7d:d4:91:5a:09:
f8:ae:bb:95:44:27:84:e1:d9:51:d4:7e:bf:bb:68:e5:e3:3b:
e6:af:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:31 2025 by rpki-client