Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.mft
File: pE99h8-pJ96E0QSzJshqu8Yt0vw.mft (raw, json)
Hash identifier: ncrK0N5RZ9E5RKm6Izedn0is1OZe5h2akgERUlFvylQ=
Subject key identifier: 86:77:53:4F:E7:36:47:CF:E7:D7:41:CB:9E:40:F6:E2:EA:B4:9C:A2
Authority key identifier: A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
Certificate issuer: /CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Certificate serial: 018C80E01321582FC203A660EDA785BC3F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.mft
Manifest number: 0A10
Signing time: Tue 19 Dec 2023 07:00:17 +0000
Manifest this update: Tue 19 Dec 2023 07:00:17 +0000
Manifest next update: Wed 20 Dec 2023 07:00:17 +0000
Files and hashes: 1: 50rRL9X8tFzrH9Pao7-gkFnU8c8.roa (hash: jO7lN5WZlnXcEhBFXOcAQklZV4ejAicZmZD3QpiSxwQ=)
2: pE99h8-pJ96E0QSzJshqu8Yt0vw.crl (hash: 2ktlaaMk6PZV8dWL0Md9e4wx3E+qZoE6VpEOjLJdc/g=)
3: uhOsJcaa9z1ZP3iq-lBjS40-vcw.roa (hash: dMXBsPomj7w1tPqSRN9cB5AQ2cx9smpsAtx8l9opfsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:e0:13:21:58:2f:c2:03:a6:60:ed:a7:85:bc:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Validity
Not Before: Dec 19 07:00:17 2023 GMT
Not After : Dec 20 07:00:17 2023 GMT
Subject: CN=8677534fe73647cfe7d741cb9e40f6e2eab49ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:d3:ab:76:a3:be:24:14:5f:a7:e1:11:da:
50:4f:ae:ba:17:0d:4b:da:33:a3:73:73:59:2c:8b:
58:32:54:4a:40:6a:ee:63:84:6d:54:ed:17:52:48:
32:9e:d3:ca:6c:8c:f5:bb:5d:02:55:03:db:ff:c0:
25:45:c4:ee:76:58:c2:63:a6:41:5b:b3:76:fc:d1:
b2:b8:56:3e:e8:8a:d5:50:a0:5a:4b:3e:c2:da:ac:
4e:33:b8:02:69:9e:7b:38:44:25:b5:c9:de:a7:a2:
8e:90:22:00:36:c4:4d:9f:d5:6c:0d:85:47:ad:a6:
ad:98:e8:a5:4b:9f:16:d6:71:ce:a4:39:b4:46:1a:
c3:f9:c3:55:5a:43:20:4a:b0:8b:68:50:2a:ac:22:
61:bf:2c:19:e6:13:04:52:42:66:84:86:18:b3:e7:
af:d1:59:f3:ba:c5:25:da:9a:0b:18:23:e2:3b:d9:
df:bc:96:f4:fb:38:69:45:b0:32:5f:e8:a2:ad:79:
b6:e8:73:ab:72:92:8c:14:0d:00:e1:c8:18:48:d6:
20:ca:b3:57:0d:21:49:ec:71:88:87:ec:81:bb:be:
0c:49:70:2f:3f:aa:d0:fc:95:d0:3c:cf:e3:13:55:
6d:59:47:dc:e4:b1:00:4c:bb:21:9f:7d:6a:d5:8a:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:77:53:4F:E7:36:47:CF:E7:D7:41:CB:9E:40:F6:E2:EA:B4:9C:A2
X509v3 Authority Key Identifier:
keyid:A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:b8:ab:53:e4:c9:ec:35:f4:09:d0:60:60:b7:6d:f4:65:
7f:a4:0f:10:09:12:c9:60:aa:12:2f:c7:36:83:5f:80:1a:2f:
e6:eb:5e:e7:68:87:9a:91:f1:32:c5:24:01:ed:f7:d9:49:4c:
25:45:d0:b2:1c:48:2f:14:74:8a:cf:61:b4:eb:d6:b6:f4:96:
d5:d0:f0:69:03:8d:0e:13:e2:ac:25:8d:2b:38:bf:3b:b8:67:
5d:92:c9:7c:61:24:ec:49:5c:03:60:cc:4b:14:1f:80:52:e6:
3e:f5:43:d2:38:b7:ce:6e:93:ce:1e:a3:82:54:6c:6e:d4:e0:
eb:fc:7e:95:66:68:ae:82:16:8b:cc:8d:9e:7e:ef:e5:f6:78:
5e:d8:06:47:ea:b3:11:c4:8c:60:76:ee:77:b4:69:c2:04:31:
b9:c9:e6:80:97:6d:6b:e1:2b:30:27:fa:29:36:f4:2e:1f:a2:
cc:7f:2f:dc:ad:d2:db:65:6b:c4:7f:3b:01:a6:69:0e:d6:67:
ff:ef:08:2a:30:c1:cd:95:e3:61:cb:7c:fd:e1:e8:05:6d:b7:
ed:e2:0e:7c:58:aa:0f:a8:e0:ee:d0:7b:2a:1e:84:98:4c:c1:
c6:f0:9d:eb:f7:3b:cc:2d:ef:a7:88:d0:1d:ce:57:cc:e0:44:
4e:d7:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:13:53 2025 by rpki-client