Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/1JmUbGzo9K_xkfY-6r6V-kSsyJo.mft
File: 1JmUbGzo9K_xkfY-6r6V-kSsyJo.mft (raw, json)
Hash identifier: tD1/sIEcF2ks8Kvy/b8gwAam+TiiiDhT6Scq8YSQwXw=
Subject key identifier: DD:03:5D:4F:53:A0:77:DB:48:A8:C1:5D:FD:53:13:75:E4:18:98:E2
Authority key identifier: D4:99:94:6C:6C:E8:F4:AF:F1:91:F6:3E:EA:BE:95:FA:44:AC:C8:9A
Certificate issuer: /CN=d499946c6ce8f4aff191f63eeabe95fa44acc89a
Certificate serial: 018506D02DEC7B273C4BCA9BF0F74DE52B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1JmUbGzo9K_xkfY-6r6V-kSsyJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/1JmUbGzo9K_xkfY-6r6V-kSsyJo.mft
Manifest number: 0AAC
Signing time: Mon 12 Dec 2022 14:49:44 +0000
Manifest this update: Mon 12 Dec 2022 14:49:44 +0000
Manifest next update: Tue 13 Dec 2022 14:49:44 +0000
Files and hashes: 1: 0gN62ecQvGrxLjhr0C0G9UZpMrc.roa (hash: nuLu0Rmh4x7OnDpzWaIO4lzx2ChzLCNTvctlYEUf1ws=)
2: 1JmUbGzo9K_xkfY-6r6V-kSsyJo.crl (hash: hst0t2n4tWtGMAoRRdJMFdNZjmlhc6htRtgI3WiFQjk=)
3: aZhIhH5DWApqVq_0Z-kFQVU8SQc.roa (hash: NKOxxCxEVQIfodfy9cJ2E2aKSKIUBbjqJh/+RZqOpSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:d0:2d:ec:7b:27:3c:4b:ca:9b:f0:f7:4d:e5:2b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d499946c6ce8f4aff191f63eeabe95fa44acc89a
Validity
Not Before: Dec 12 14:49:44 2022 GMT
Not After : Dec 13 14:49:44 2022 GMT
Subject: CN=dd035d4f53a077db48a8c15dfd531375e41898e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:93:1a:63:74:07:de:0d:a5:ed:95:33:96:
22:65:94:80:d2:e0:c9:a0:62:62:16:60:1d:73:9b:
61:15:4d:54:93:fe:0c:6e:1f:5c:04:14:43:7c:bd:
96:01:b2:82:2d:26:a9:e3:6c:57:44:7b:90:30:4f:
82:26:04:b5:06:ea:7b:76:4b:2c:33:87:38:14:44:
c1:34:e9:ce:f7:fd:78:ce:7b:66:ab:b2:52:f4:79:
77:be:f6:d4:96:1a:f2:73:aa:87:3b:65:f3:ea:01:
a2:1a:b6:ae:f2:44:27:7f:b6:b8:79:c4:1b:35:6b:
63:38:17:3a:d7:72:ae:dc:8c:88:80:41:cc:81:35:
d7:9b:7c:59:d5:8b:54:68:37:f3:20:8d:9d:95:55:
1d:da:c6:21:3c:49:3d:ce:28:34:87:7a:b3:e1:ff:
30:aa:cf:44:d1:38:3c:ec:c8:2a:aa:7b:92:e2:74:
e4:13:f4:f5:bb:de:2c:9f:47:40:73:b5:5d:fa:6f:
a5:0b:39:b0:e3:36:94:26:91:a9:d1:c7:89:56:44:
27:8e:cf:5a:81:5f:89:cf:09:90:b3:d9:f7:2c:1e:
10:97:21:52:df:28:a9:ed:aa:0c:40:c6:a1:c8:04:
3e:26:4c:21:b5:48:1c:ae:98:1b:18:3c:7d:e3:19:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:03:5D:4F:53:A0:77:DB:48:A8:C1:5D:FD:53:13:75:E4:18:98:E2
X509v3 Authority Key Identifier:
keyid:D4:99:94:6C:6C:E8:F4:AF:F1:91:F6:3E:EA:BE:95:FA:44:AC:C8:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1JmUbGzo9K_xkfY-6r6V-kSsyJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/1JmUbGzo9K_xkfY-6r6V-kSsyJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9e494d-91ae-4ae0-b698-d190dfd9b43c/1/1JmUbGzo9K_xkfY-6r6V-kSsyJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:63:70:02:73:44:b5:27:66:74:62:1c:eb:df:84:b9:7c:d9:
14:ab:8a:1f:9d:97:7a:fb:8d:bc:3f:ff:d6:2e:b4:8c:36:3b:
38:3c:0b:f0:a6:11:6e:8a:e6:dd:1e:ad:80:90:61:6c:40:89:
d2:f5:3f:9b:49:39:dd:f9:e1:ef:22:34:e5:ba:0b:fb:06:cb:
63:8f:f0:20:29:b8:5b:20:17:00:a5:32:2f:bd:7d:48:e4:10:
76:9a:a6:54:5c:f2:de:2a:e6:49:ac:9d:b9:6a:e5:64:c1:44:
9f:34:98:49:84:2e:fa:81:31:e4:ca:48:94:a9:6b:4c:8d:26:
35:d7:cc:f5:d6:25:b7:41:f0:0a:4c:1f:72:51:6e:ff:87:7c:
d8:0c:fc:1c:fb:74:cc:29:27:c1:78:c0:21:d3:b5:4f:8f:36:
ec:21:31:22:aa:81:70:c7:35:aa:27:31:1a:74:5e:41:68:2e:
9c:69:c6:c7:14:f1:7d:d9:0e:5d:f0:7c:3f:06:e1:cc:a0:68:
b3:d2:bd:d7:5c:58:f6:8d:c3:d9:0c:62:c3:99:eb:e0:2b:ef:
f6:60:ab:bf:93:ce:28:e6:c9:8e:d6:eb:86:3e:8c:af:5d:ce:
f2:65:77:aa:2e:32:1c:b2:33:8e:59:bb:6e:31:c2:85:a3:ce:
68:5b:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:26:34 2025 by rpki-client