Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3c157f-0e12-414e-a1ff-7e216877862b/1/rstb7TwkRXPnnRFsena7Cr7Pvi0.mft
File: rstb7TwkRXPnnRFsena7Cr7Pvi0.mft (raw, json)
Hash identifier: V9bm3jGJz5sLrvkklApsUhbVkxeDpz0Y40qltT7BLjo=
Subject key identifier: 1A:21:2E:BA:5E:96:0E:E6:AE:2D:D3:36:D0:40:EF:6E:66:4B:2D:8D
Authority key identifier: AE:CB:5B:ED:3C:24:45:73:E7:9D:11:6C:7A:76:BB:0A:BE:CF:BE:2D
Certificate issuer: /CN=aecb5bed3c244573e79d116c7a76bb0abecfbe2d
Certificate serial: 0184C11AAC294EB0938BA0225603BD0D3BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rstb7TwkRXPnnRFsena7Cr7Pvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3c157f-0e12-414e-a1ff-7e216877862b/1/rstb7TwkRXPnnRFsena7Cr7Pvi0.mft
Manifest number: 08EB
Signing time: Tue 29 Nov 2022 01:57:41 +0000
Manifest this update: Tue 29 Nov 2022 01:57:41 +0000
Manifest next update: Wed 30 Nov 2022 01:57:41 +0000
Files and hashes: 1: HKkTX2cTlhzUP4X8a4STiD4UBlA.roa (hash: 2s7wSkgodUMBc7fpxIUTDpoIMk3tKh8y1JJzTScOm/E=)
2: rstb7TwkRXPnnRFsena7Cr7Pvi0.crl (hash: Z+GS5xyA5l3nhNACwmdi2a0zVYiY2FqAYdV8sVO+IRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c1:1a:ac:29:4e:b0:93:8b:a0:22:56:03:bd:0d:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecb5bed3c244573e79d116c7a76bb0abecfbe2d
Validity
Not Before: Nov 29 01:57:41 2022 GMT
Not After : Nov 30 01:57:41 2022 GMT
Subject: CN=1a212eba5e960ee6ae2dd336d040ef6e664b2d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:8e:b3:f8:3e:65:0e:45:0f:fd:45:2a:4d:
0e:04:a2:d7:68:3d:02:68:40:1a:06:08:9e:b8:e6:
d4:b2:83:9e:ab:3d:ae:9c:44:41:11:b0:1a:7b:f5:
cc:44:fe:7c:40:b7:6e:f9:ec:6d:3c:ef:b9:be:1e:
05:c6:8d:13:ca:d9:57:45:86:18:b2:88:6e:dc:ef:
63:64:88:da:68:af:4a:7e:8c:50:d6:a6:b3:c3:d7:
10:ad:6c:a2:f1:ea:9f:fe:35:fd:f1:62:a6:72:49:
c0:93:80:7d:38:82:d5:00:cd:20:1c:6c:dd:d6:8e:
8c:50:bb:c3:45:0f:a7:33:c9:08:9b:4e:94:dc:17:
21:8e:9f:ac:9b:78:31:78:67:3c:6c:63:24:57:47:
44:39:56:05:83:a3:1d:e1:5a:d8:50:1d:c5:68:95:
55:e7:1d:fe:ee:56:c9:78:13:ca:e0:9e:c4:6e:42:
d4:7c:2c:76:8f:0b:07:c0:9c:5d:a8:60:1d:75:f4:
96:81:d8:7b:91:23:e0:14:a6:dc:40:6b:23:23:2c:
cc:96:a5:9e:04:2e:41:23:6e:3e:68:99:61:86:52:
35:f6:11:9d:e9:17:54:ad:6a:9d:84:e7:e9:2e:cf:
b8:99:ac:b1:eb:97:fc:0a:78:92:a3:af:0a:0f:b9:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:2E:BA:5E:96:0E:E6:AE:2D:D3:36:D0:40:EF:6E:66:4B:2D:8D
X509v3 Authority Key Identifier:
keyid:AE:CB:5B:ED:3C:24:45:73:E7:9D:11:6C:7A:76:BB:0A:BE:CF:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rstb7TwkRXPnnRFsena7Cr7Pvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3c157f-0e12-414e-a1ff-7e216877862b/1/rstb7TwkRXPnnRFsena7Cr7Pvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3c157f-0e12-414e-a1ff-7e216877862b/1/rstb7TwkRXPnnRFsena7Cr7Pvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:44:32:8b:07:41:eb:84:b2:b7:d6:75:2f:a1:05:27:4e:7e:
86:83:0f:b0:42:3c:f6:ab:8b:f2:2e:3e:7a:26:53:ba:df:cc:
51:4c:60:97:8d:ff:5b:68:15:2e:20:4a:aa:db:05:d4:8f:6c:
67:76:e7:df:18:3b:0f:b0:32:d7:1d:c6:cc:92:2d:ff:88:50:
33:8a:45:10:a4:7a:0b:e1:c7:5c:d3:28:2d:80:0c:a6:29:e2:
b9:f5:2a:96:bf:51:9e:df:53:13:bf:8a:fa:10:85:f3:0f:be:
e3:bf:98:5f:df:5c:09:a4:61:2b:e7:c9:41:f4:51:e4:a6:cd:
e9:71:97:64:08:8b:b8:2b:24:08:0d:1b:89:99:06:0c:e0:20:
50:f4:6e:f3:41:e4:df:af:fc:d0:88:19:e4:d5:09:c0:6f:f5:
46:08:32:9a:bc:55:ce:a4:4c:04:67:2d:38:36:fb:80:17:6d:
5a:f4:e3:03:ea:0f:ff:8d:2d:f5:fe:43:24:3f:bd:9f:8e:9c:
a9:f2:51:b9:f8:2c:ba:50:ba:a6:72:af:1d:ef:a0:00:60:57:
b4:77:b7:e2:2f:02:df:a9:68:4f:2b:f8:de:2b:02:6c:ba:b8:
c8:59:74:19:14:e6:76:d0:b5:b4:47:b6:8c:a3:b0:26:cb:57:
9b:85:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:26:50 2025 by rpki-client