Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.mft
File: 1CW1lbM28nYClQ6cwTseMncohAg.mft (raw, json)
Hash identifier: 65RqoJH0ZDYjUgKLz+mOmOysGPLTk2Oez7Nma4pB6LU=
Subject key identifier: 28:06:47:C6:F3:51:EE:E0:45:65:33:10:31:C2:08:73:CA:6E:30:D6
Authority key identifier: D4:25:B5:95:B3:36:F2:76:02:95:0E:9C:C1:3B:1E:32:77:28:84:08
Certificate issuer: /CN=d425b595b336f27602950e9cc13b1e3277288408
Certificate serial: 018AFEA4AEBF4C7E17A30BA739673B95BEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CW1lbM28nYClQ6cwTseMncohAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.mft
Manifest number: 0564
Signing time: Thu 05 Oct 2023 07:02:00 +0000
Manifest this update: Thu 05 Oct 2023 07:02:00 +0000
Manifest next update: Fri 06 Oct 2023 07:02:00 +0000
Files and hashes: 1: 1CW1lbM28nYClQ6cwTseMncohAg.crl (hash: QQJZSLS7wDmJEgx4Vdc6xQBjJohX2tmYlQfku5MHfYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:a4:ae:bf:4c:7e:17:a3:0b:a7:39:67:3b:95:be:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425b595b336f27602950e9cc13b1e3277288408
Validity
Not Before: Oct 5 07:02:00 2023 GMT
Not After : Oct 6 07:02:00 2023 GMT
Subject: CN=280647c6f351eee04565331031c20873ca6e30d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:a4:75:ea:55:78:16:e5:24:18:9f:a6:aa:
ca:75:d4:14:aa:21:23:1f:40:b2:e9:bd:9f:7b:75:
f4:65:81:88:09:be:a8:c7:86:2f:1a:47:72:d0:35:
bd:80:b6:5c:a8:7e:d2:3d:19:c1:c4:d7:68:ec:be:
21:c0:c9:87:be:8a:18:c1:65:80:4f:55:de:27:c1:
bb:79:45:fa:22:78:22:ce:68:54:ca:c5:52:2a:87:
e3:ed:88:4f:76:ec:ee:86:52:b3:a0:a9:0c:ff:87:
4b:28:8f:74:0e:c4:2e:2e:05:6b:23:c6:32:b8:f3:
08:83:37:f6:60:cf:0d:94:da:77:a2:e6:0e:03:1f:
62:20:3c:fa:9d:7e:f5:41:2d:28:13:04:65:9d:a3:
59:a7:57:79:09:5b:46:6f:7e:fd:1d:64:09:fc:c1:
09:87:42:50:d0:74:63:2a:66:75:0b:5d:5a:e8:37:
e7:9c:04:c3:50:7a:85:83:e2:61:89:55:82:84:3e:
cc:a2:c9:72:93:c1:3b:44:41:16:3f:bd:8f:20:91:
10:bd:cd:4a:6e:b8:f5:2c:7e:c0:11:78:9d:14:fd:
ec:6f:b6:09:18:49:34:53:aa:d2:89:6f:75:1a:ac:
a9:d6:c2:36:fa:eb:f1:20:dd:ea:52:b6:ab:ec:ef:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:06:47:C6:F3:51:EE:E0:45:65:33:10:31:C2:08:73:CA:6E:30:D6
X509v3 Authority Key Identifier:
keyid:D4:25:B5:95:B3:36:F2:76:02:95:0E:9C:C1:3B:1E:32:77:28:84:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CW1lbM28nYClQ6cwTseMncohAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f3e745-7fa2-4bfd-a365-8f895f2eae59/1/1CW1lbM28nYClQ6cwTseMncohAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:60:fb:98:6d:ed:f3:c5:6a:5b:91:f0:68:ed:42:fc:5f:5c:
e2:53:3d:78:4f:91:fd:5c:46:6c:e0:04:39:df:9d:e0:76:a4:
21:56:38:7e:f9:a1:24:79:96:fb:99:71:39:da:d2:6e:0c:e7:
8e:4a:86:17:fb:1d:56:01:ef:6c:77:8d:d2:27:c6:2c:8c:1f:
dc:f9:64:a1:18:05:b9:81:9c:a1:ed:eb:59:bd:0e:23:9f:13:
c7:90:3b:33:92:44:0c:ec:bb:42:2e:e2:46:62:3a:63:c1:74:
05:9a:ac:1f:8c:1e:68:c4:e4:2e:99:c7:45:38:d2:14:7b:9f:
94:89:48:5f:bc:1c:9a:ae:be:14:6f:c4:4e:cc:55:60:90:34:
22:a2:21:ec:84:c4:ca:3a:64:6c:f8:bd:df:ae:46:d0:a8:60:
0a:51:21:cf:9f:70:07:c8:ac:5c:91:84:d0:75:a1:c8:ec:bb:
63:03:e5:ec:dc:ea:dc:fc:de:5f:6c:f3:ca:0e:fe:78:46:5e:
3e:37:99:1d:0a:b7:fd:45:f2:3d:c9:01:e1:b2:89:1d:26:fc:
34:be:fd:a5:fa:32:d0:54:b9:a5:97:35:bb:16:94:3d:bf:58:
61:28:b0:94:9b:1f:4f:fa:ef:16:53:47:b0:ea:9b:1c:25:55:
bb:64:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:50:45 2025 by rpki-client