Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.mft
File: n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.mft (raw, json)
Hash identifier: GM+uPu/hcFuPkfKsXX12AkQkTQL6l798gImxsdw+pOk=
Subject key identifier: 72:BB:52:5D:59:20:2B:6F:51:64:50:C0:28:95:84:60:35:59:E6:1C
Authority key identifier: 9F:50:27:0F:D3:10:E1:14:22:E5:86:F2:63:17:15:5D:5C:F6:64:58
Certificate issuer: /CN=9f50270fd310e11422e586f26317155d5cf66458
Certificate serial: 018BF00A4086173C24D95565FD518056DFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.mft
Manifest number: 0857
Signing time: Tue 21 Nov 2023 04:01:25 +0000
Manifest this update: Tue 21 Nov 2023 04:01:25 +0000
Manifest next update: Wed 22 Nov 2023 04:01:25 +0000
Files and hashes: 1: aBhKnKpguJkpK7eQH0OE9eN0ccM.roa (hash: ybziVvuGrc2UclgiulBHBkVJS7F+1mYjso1v3nCRxoE=)
2: ffzoAyROLZvgmIjisrRkx8IyGqQ.roa (hash: RcWWMWq3J7/Dc/ttxt9pqVx/onTw6cVXq21fTDYe+7w=)
3: n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.crl (hash: iN7lvliYTy/TejBC5lIl0CJOi3NGTqoYehX9zSjOuYY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:0a:40:86:17:3c:24:d9:55:65:fd:51:80:56:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f50270fd310e11422e586f26317155d5cf66458
Validity
Not Before: Nov 21 04:01:25 2023 GMT
Not After : Nov 22 04:01:25 2023 GMT
Subject: CN=72bb525d59202b6f516450c0289584603559e61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8c:05:54:f8:e2:de:db:7c:4b:e5:87:53:c5:
cd:a5:90:f4:34:bb:3f:71:14:22:c9:cc:40:ca:93:
32:cf:2d:6b:81:08:2c:96:31:bd:35:7f:74:31:9e:
a1:8d:00:11:45:7c:a5:3e:fd:d1:c8:d6:30:85:7a:
3d:dd:ce:c7:f6:19:7d:f9:11:19:df:9a:d7:ee:13:
fd:bf:16:76:6e:ca:0c:e6:39:5a:6e:28:58:90:af:
52:58:51:39:5b:20:3c:3f:8a:5b:19:d3:72:8d:14:
af:6c:82:46:c2:a4:18:f9:37:4f:8a:37:e5:5a:2b:
04:20:1d:ca:c5:de:16:60:27:45:72:96:47:0c:7d:
08:62:8d:72:68:60:8c:2a:cb:e4:2d:98:17:11:28:
95:f4:77:80:54:f7:5e:c4:ac:5e:d5:09:99:c2:3a:
cf:a8:1f:50:e7:d9:8e:20:7a:c6:e5:0f:d0:b5:aa:
a0:02:a6:1b:14:39:71:0b:65:2e:cd:40:a4:dc:fe:
94:fb:b8:f9:15:10:58:32:ee:9e:aa:f1:ca:91:c2:
61:d0:63:18:fe:f7:18:a5:2e:d2:a2:56:de:cf:a9:
39:a0:03:4f:85:a1:e3:15:0f:10:74:0c:6e:69:66:
cb:5f:5d:83:2f:45:48:13:f1:c7:12:99:98:f6:4c:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BB:52:5D:59:20:2B:6F:51:64:50:C0:28:95:84:60:35:59:E6:1C
X509v3 Authority Key Identifier:
keyid:9F:50:27:0F:D3:10:E1:14:22:E5:86:F2:63:17:15:5D:5C:F6:64:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f573d3-de14-4434-ab94-94fbf34de159/1/n1AnD9MQ4RQi5YbyYxcVXVz2ZFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e8:2f:70:4c:eb:b6:c7:ec:4f:0b:a2:e5:79:2a:34:98:88:
29:6a:43:59:32:97:b2:6d:ae:d8:af:58:9f:36:e2:40:80:f0:
c6:c7:4a:e7:da:2e:46:d0:12:e3:64:af:aa:f3:62:ed:ca:8f:
35:1b:80:b6:25:ce:a1:e5:39:44:57:09:8f:de:f1:59:92:13:
a5:52:db:bb:aa:9d:a0:8f:61:42:f9:9e:7f:55:4e:f1:15:22:
a2:67:71:cc:7e:3d:47:ac:3a:9a:8f:cd:47:0c:7d:93:b7:e3:
02:78:76:34:6b:33:1a:b0:33:d0:3b:01:89:2e:82:6d:af:4d:
81:7a:52:7c:bb:93:f8:16:18:1c:d2:52:45:bd:ab:04:f5:b6:
74:8e:ae:e1:73:53:8b:eb:42:a2:35:5b:09:fb:85:b4:e7:b6:
62:1c:2a:95:a6:ca:77:bf:66:32:97:f0:b7:0b:0a:bd:67:15:
33:f1:bf:24:05:05:3d:d2:23:f3:29:d9:bb:59:e2:10:b3:18:
32:2f:6c:f0:d5:96:7a:3c:4e:7e:67:07:f4:28:fb:f7:a2:e0:
63:98:af:be:e0:1c:d6:6a:94:a6:64:26:f7:c5:86:67:f6:1d:
6d:c2:34:b4:3c:9e:3d:9c:f8:4b:ef:d3:11:ad:d1:0e:f6:ad:
d0:a5:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:28:25 2025 by rpki-client