Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/sRhj4XBazMEo8S0WR2-k_h6w19M.mft
File: sRhj4XBazMEo8S0WR2-k_h6w19M.mft (raw, json)
Hash identifier: /SO3AX45ptAIoGlETjBJNmVhzt4TzAmLyI9G0PscgQM=
Subject key identifier: E7:F7:30:40:24:E1:26:C1:B7:36:26:CC:A0:65:9D:41:D6:5E:DA:23
Authority key identifier: B1:18:63:E1:70:5A:CC:C1:28:F1:2D:16:47:6F:A4:FE:1E:B0:D7:D3
Certificate issuer: /CN=b11863e1705accc128f12d16476fa4fe1eb0d7d3
Certificate serial: 018A6311A637374FF60943C7F049603B990C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRhj4XBazMEo8S0WR2-k_h6w19M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/sRhj4XBazMEo8S0WR2-k_h6w19M.mft
Manifest number: 085A
Signing time: Tue 05 Sep 2023 02:00:15 +0000
Manifest this update: Tue 05 Sep 2023 02:00:15 +0000
Manifest next update: Wed 06 Sep 2023 02:00:15 +0000
Files and hashes: 1: YujGDuMaT3wV3-fbkaIp5s8_44w.roa (hash: tPCAjBnqzoCJL01R6LFoTp+whEK9Rdgrf/7rln2jsO0=)
2: sRhj4XBazMEo8S0WR2-k_h6w19M.crl (hash: Z+P4ha3TDCcIN4kjDwB8xmgSWuVUyAvjvH55E0jmsso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:11:a6:37:37:4f:f6:09:43:c7:f0:49:60:3b:99:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11863e1705accc128f12d16476fa4fe1eb0d7d3
Validity
Not Before: Sep 5 02:00:15 2023 GMT
Not After : Sep 6 02:00:15 2023 GMT
Subject: CN=e7f7304024e126c1b73626cca0659d41d65eda23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:72:dd:34:ef:f9:6e:fd:dc:26:0b:3c:81:
fb:b6:ea:8e:5f:f5:60:1b:dd:d0:8b:78:98:74:cd:
64:73:95:7c:f1:c6:fe:62:d0:29:d8:62:2d:ad:b5:
73:55:d3:37:ed:51:b4:af:f2:bd:31:5c:28:e7:2a:
71:e7:f9:03:d7:10:e5:3b:f8:01:3e:dc:8e:14:09:
c1:97:55:6b:3c:5a:c1:9a:6c:4e:50:95:7e:ec:bb:
b0:53:db:06:54:78:4d:e2:9a:5c:52:d1:ba:10:4a:
18:ca:32:24:a2:50:1f:12:63:cc:52:82:5e:86:32:
56:b8:17:50:e2:47:cf:69:5e:9d:99:c9:49:7b:ab:
fe:8f:5a:49:de:bb:a2:fc:64:3a:dd:ad:ef:02:ef:
11:34:d0:fe:be:99:92:17:5c:02:dd:2e:f9:b3:af:
55:97:dc:70:4b:cb:0e:b8:bd:41:97:11:27:67:ad:
9a:c7:90:84:d6:cd:6d:fe:b7:e8:72:c7:68:8d:c6:
5d:23:50:ad:ee:36:ff:34:7f:63:2e:85:dc:b9:78:
73:2a:39:9f:8b:a7:5b:3a:54:0a:70:c4:9e:4e:67:
54:4f:e6:27:2e:32:a7:17:98:60:d2:7f:e3:07:64:
6a:b1:41:e6:ab:f3:33:4f:2e:8a:8d:09:9c:38:c4:
f5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:30:40:24:E1:26:C1:B7:36:26:CC:A0:65:9D:41:D6:5E:DA:23
X509v3 Authority Key Identifier:
keyid:B1:18:63:E1:70:5A:CC:C1:28:F1:2D:16:47:6F:A4:FE:1E:B0:D7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRhj4XBazMEo8S0WR2-k_h6w19M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/sRhj4XBazMEo8S0WR2-k_h6w19M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/88e353-3013-4b7d-a8d6-6c6ed71e25da/1/sRhj4XBazMEo8S0WR2-k_h6w19M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bc:fe:52:00:05:39:3f:62:2e:96:e8:18:ca:11:36:18:70:
44:21:58:5c:54:eb:9c:b9:c1:79:fa:e0:94:df:a3:bb:01:29:
b8:24:27:c8:4f:e1:66:a5:0a:18:cb:38:7f:39:ff:63:c6:76:
26:bb:34:bf:92:cc:66:3a:25:f5:30:c1:e3:57:04:a0:56:dd:
e3:c3:ec:64:e8:db:44:99:ec:f4:a4:61:0e:16:4b:39:55:1c:
bf:59:c0:fb:e6:b0:bf:d3:ad:d5:95:8e:9c:7d:22:c2:17:3a:
7c:88:ea:6a:7c:1e:24:f8:73:9e:f6:ba:fb:99:40:64:e2:32:
23:a5:d4:a8:63:92:ef:2d:ff:c2:24:f7:fe:bd:11:bc:ce:b7:
f0:d5:d9:57:a5:90:38:1b:5c:1a:aa:36:31:6f:3e:9b:af:28:
73:88:c4:d0:0b:ea:bf:da:b6:fc:45:69:41:64:de:0b:a7:05:
03:38:df:2a:62:8b:f3:27:46:7b:2a:c3:66:72:dd:13:80:6c:
96:41:2f:6f:f8:03:74:97:ba:e9:79:a5:7c:48:f9:b3:f3:8d:
2c:89:3f:56:df:41:58:ef:5e:86:42:0e:d3:64:1b:18:33:ea:
5c:54:85:3e:cf:9d:38:26:ce:93:f0:52:75:d4:2c:ee:ce:31:
0d:6b:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:34:27 2025 by rpki-client