Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.mft
File: lIsJ1ncqFBfxf2BGirM7O7ES8ik.mft (raw, json)
Hash identifier: CKwE2mrjFz5zHJC1iOPK6unXK3mmqWKU7yO08CHAqDk=
Subject key identifier: F5:30:3E:0E:68:30:10:F2:37:9C:20:B5:C4:FA:59:A8:32:BF:6A:F5
Authority key identifier: 94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
Certificate issuer: /CN=948b09d6772a1417f17f60468ab33b3bb112f229
Certificate serial: 018AED0B64024211F5F40E958485D9E5BD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.mft
Manifest number: 085A
Signing time: Sun 01 Oct 2023 21:01:00 +0000
Manifest this update: Sun 01 Oct 2023 21:01:00 +0000
Manifest next update: Mon 02 Oct 2023 21:01:00 +0000
Files and hashes: 1: 6g3JUKfkMSgrRJnC62Pl5Af7WLg.roa (hash: FZ7TBY1QArmg+amcqEvUU1JLY6Gx/9wyPnYmWpt/cP8=)
2: lIsJ1ncqFBfxf2BGirM7O7ES8ik.crl (hash: ySwig9qp/YCKkuvdL816QBW9fK0DXUfYktU0H0gQiDM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:0b:64:02:42:11:f5:f4:0e:95:84:85:d9:e5:bd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948b09d6772a1417f17f60468ab33b3bb112f229
Validity
Not Before: Oct 1 21:01:00 2023 GMT
Not After : Oct 2 21:01:00 2023 GMT
Subject: CN=f5303e0e683010f2379c20b5c4fa59a832bf6af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:00:2a:5a:cf:51:46:d2:de:8e:eb:d2:22:
c4:8f:76:28:37:d2:a5:e2:64:62:33:22:81:15:f5:
63:b2:61:30:d8:b4:e1:1c:9f:02:f7:b1:f5:5a:81:
b4:f4:54:1f:08:f2:3c:30:be:ed:cf:ed:f2:57:36:
88:e0:2b:d4:d8:b3:2f:9d:46:ba:96:00:a4:32:fb:
33:1e:17:5d:8c:a1:1c:c0:76:84:86:c6:99:31:b6:
da:e5:69:32:8f:a6:5e:a4:2c:4b:fa:82:51:25:76:
60:a7:86:8e:47:44:ec:bd:52:f4:9f:79:53:f7:57:
81:22:06:6c:6e:a8:c0:e8:9d:91:93:c1:ee:4a:b2:
54:64:43:5a:09:05:ca:80:8b:0d:08:a4:85:70:96:
f5:e2:f9:62:71:88:53:9a:fb:cb:60:55:47:06:3e:
bd:01:8d:ac:3f:dc:f2:b3:bc:c8:e4:36:48:58:be:
4e:93:cc:e9:89:3d:68:14:e8:d3:75:b7:30:17:e2:
a0:5b:98:58:2c:2d:3f:ed:f8:a1:9e:32:67:2f:c1:
a6:62:86:21:36:83:db:0a:b6:eb:50:47:ac:a9:34:
1a:bf:82:4c:70:21:a5:34:80:a6:fd:6d:c4:e0:d6:
13:60:74:88:1e:ce:80:fc:30:93:ac:e1:37:e4:6c:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:30:3E:0E:68:30:10:F2:37:9C:20:B5:C4:FA:59:A8:32:BF:6A:F5
X509v3 Authority Key Identifier:
keyid:94:8B:09:D6:77:2A:14:17:F1:7F:60:46:8A:B3:3B:3B:B1:12:F2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIsJ1ncqFBfxf2BGirM7O7ES8ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f34a5b-e478-4d23-9c82-029f678d148d/1/lIsJ1ncqFBfxf2BGirM7O7ES8ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:30:30:7f:5e:e8:c2:3a:ac:e2:71:9d:d5:22:d5:c6:87:83:
67:99:74:98:41:fd:f9:16:e7:eb:30:4f:be:82:ea:65:74:79:
ea:38:34:4e:b2:a0:61:9b:2b:9f:8f:00:c6:36:b7:ad:76:26:
81:54:91:4a:34:13:79:08:91:03:99:8c:40:bd:9d:4a:e9:6b:
a3:b8:63:d0:05:8e:97:a3:8c:89:b3:a1:4b:e1:d5:37:71:2d:
47:c1:d9:b7:fa:2c:c4:1d:5b:59:0a:a6:34:9e:c5:8d:23:4b:
3b:f7:e4:5e:b2:71:24:73:e2:17:5b:8f:79:db:f6:66:e5:5d:
ed:1a:0d:17:59:a3:08:ee:15:46:12:67:3a:08:f9:60:4d:72:
6a:ee:fa:5d:c6:fe:79:e6:4b:ff:de:66:97:a8:44:45:96:48:
ca:3e:3f:15:c6:77:49:be:20:ef:6a:22:56:9c:11:34:a4:a1:
37:68:4d:14:d0:92:be:9e:a6:45:79:03:19:f9:51:a0:92:94:
3a:0c:9d:5c:49:5c:16:24:b5:76:e0:66:d1:bd:92:86:5a:18:
42:16:b4:77:25:85:ba:a9:41:50:07:42:78:0d:7a:21:98:77:
dd:12:ea:6a:ab:8d:48:0a:08:da:31:16:ba:51:a8:58:d2:5e:
ce:a3:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:18:05 2025 by rpki-client