Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/KeEjwYUtNHy9J54wRTd8nNUQKEo.mft
File: KeEjwYUtNHy9J54wRTd8nNUQKEo.mft (raw, json)
Hash identifier: nzaHE92TMCbUfO7KD5DIhG+VVq3pj6S1+2q/qZKxD9I=
Subject key identifier: 85:13:E6:1C:B5:CB:53:43:8E:73:B6:6B:2E:AC:96:21:DD:89:4F:BB
Authority key identifier: 29:E1:23:C1:85:2D:34:7C:BD:27:9E:30:45:37:7C:9C:D5:10:28:4A
Certificate issuer: /CN=29e123c1852d347cbd279e3045377c9cd510284a
Certificate serial: 018B7FD05EE63A93BA795CDC7A42A5045F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeEjwYUtNHy9J54wRTd8nNUQKEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/KeEjwYUtNHy9J54wRTd8nNUQKEo.mft
Manifest number: 085C
Signing time: Mon 30 Oct 2023 09:00:43 +0000
Manifest this update: Mon 30 Oct 2023 09:00:43 +0000
Manifest next update: Tue 31 Oct 2023 09:00:43 +0000
Files and hashes: 1: 1-NS0h_6wzcKhmsCw5HoNqcBbkTM.roa (hash: pbP5Mf189QYMxKr5gm6N9dpwdpsmIKGPsXB5pKCo2wQ=)
2: KeEjwYUtNHy9J54wRTd8nNUQKEo.crl (hash: 7MLqQ50bf9+g+HXUGvq5NR/TJsKKE29gqIkPY+PI7xk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:d0:5e:e6:3a:93:ba:79:5c:dc:7a:42:a5:04:5f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e123c1852d347cbd279e3045377c9cd510284a
Validity
Not Before: Oct 30 09:00:43 2023 GMT
Not After : Oct 31 09:00:43 2023 GMT
Subject: CN=8513e61cb5cb53438e73b66b2eac9621dd894fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:80:5c:1b:f2:48:1b:26:30:52:16:bf:70:
8f:bf:4c:52:a6:f7:43:49:a5:b6:bb:78:a9:0f:af:
a9:18:5a:51:95:04:9a:e1:71:65:c1:00:b0:9f:44:
58:01:bf:f8:35:0b:65:35:40:9d:20:01:c5:a3:4d:
f0:6a:3d:84:68:55:66:cf:17:b2:91:d2:27:a7:df:
b8:19:bf:7c:e1:91:6e:a4:00:a7:d4:d8:6f:e8:cf:
56:9c:1f:41:b7:b7:b3:6b:0f:63:08:17:3b:c1:2b:
aa:40:e5:78:3d:7a:6f:2e:3f:24:c1:b7:10:e3:b9:
2b:cc:ed:5f:95:a8:5c:33:a1:c5:f5:73:7c:9b:6b:
03:97:c3:ec:e2:43:0c:fe:c6:e1:bd:ed:2d:da:c9:
28:9d:ab:c4:23:77:f0:0f:3c:f8:8d:18:11:1a:5b:
73:e0:b0:d6:28:e7:12:d5:17:28:09:7d:12:3c:a5:
38:27:54:5a:04:ae:a2:37:5a:9c:71:25:c7:dc:8c:
c3:7d:63:42:6b:d0:21:5e:66:49:35:37:ae:ea:8a:
52:51:2b:e5:b5:db:65:34:69:1c:c3:6c:44:9d:29:
55:2f:6c:53:28:cd:5f:df:bb:0b:81:0d:09:2b:76:
11:da:96:e4:96:4d:a8:cd:be:0c:67:ef:74:f2:d8:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:13:E6:1C:B5:CB:53:43:8E:73:B6:6B:2E:AC:96:21:DD:89:4F:BB
X509v3 Authority Key Identifier:
keyid:29:E1:23:C1:85:2D:34:7C:BD:27:9E:30:45:37:7C:9C:D5:10:28:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeEjwYUtNHy9J54wRTd8nNUQKEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/KeEjwYUtNHy9J54wRTd8nNUQKEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6c353e-817d-4be9-b43f-c9fb9bb611b0/1/KeEjwYUtNHy9J54wRTd8nNUQKEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:75:ee:a1:a1:90:cd:b9:0b:d4:c2:36:45:72:73:de:38:06:
79:5a:c2:5e:bd:92:a5:13:16:0c:33:c4:81:07:38:fb:e4:9e:
eb:dc:f6:43:ad:70:e6:53:dd:7d:42:b0:06:32:b8:47:8a:b2:
b4:51:f8:e4:a1:02:f6:ec:75:81:02:af:68:f5:8c:84:07:dd:
94:19:49:61:ff:88:f9:89:24:da:7c:f3:17:d6:32:1c:17:e8:
2e:7f:0d:d1:0c:ef:70:a7:bf:81:f5:ac:7d:27:89:78:09:c5:
d8:43:fc:cc:4b:9c:54:d8:38:27:19:d6:a2:e3:9a:ef:c7:19:
e5:d4:f4:36:ff:bc:3f:c0:c9:93:f8:5d:12:97:f3:87:15:a7:
78:16:66:6b:c7:81:14:b7:0f:6e:51:6b:f8:2e:93:29:c2:df:
cd:25:80:fb:e5:bf:1e:64:dc:ce:11:db:b8:1a:a0:e4:4d:18:
fa:dc:1a:d1:1b:0d:bc:41:86:93:44:7a:28:64:b8:90:69:a7:
47:a7:3a:8f:2c:0e:ca:4a:78:1c:ef:d5:92:4e:f2:19:c6:51:
cc:6c:a1:51:4b:17:29:72:aa:b0:61:e9:b7:c4:3d:6b:cb:2b:
83:5b:31:32:56:ef:ea:43:51:9d:0f:18:82:00:41:96:9d:43:
64:de:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:44:40 2025 by rpki-client