Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.mft
File: 7m4K75qFToiA4fDkbQe5S-X2ueo.mft (raw, json)
Hash identifier: 8BksaVoqOftLJyoxCj1/KJQ+iyP3VqVn8Pg0G3tizJE=
Subject key identifier: F9:09:EF:80:30:49:64:70:CF:D9:86:56:4B:A8:96:4A:73:53:77:E2
Authority key identifier: EE:6E:0A:EF:9A:85:4E:88:80:E1:F0:E4:6D:07:B9:4B:E5:F6:B9:EA
Certificate issuer: /CN=ee6e0aef9a854e8880e1f0e46d07b94be5f6b9ea
Certificate serial: 018C90C290D6E7A85BFD2CE340F7EC7D6911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m4K75qFToiA4fDkbQe5S-X2ueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.mft
Manifest number: 0BE5
Signing time: Fri 22 Dec 2023 09:01:59 +0000
Manifest this update: Fri 22 Dec 2023 09:01:59 +0000
Manifest next update: Sat 23 Dec 2023 09:01:59 +0000
Files and hashes: 1: 7m4K75qFToiA4fDkbQe5S-X2ueo.crl (hash: /w6a7HsVvy4fEwBOjloLm737j37Ki7rRQVWd7vsyMBM=)
2: LAoEKhh3QdV5Y9vAd-SHxRz9QbM.roa (hash: 9n/67vL5oEzQr0e0QpRPNiUeFthS39iPOINayeok1Qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:c2:90:d6:e7:a8:5b:fd:2c:e3:40:f7:ec:7d:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6e0aef9a854e8880e1f0e46d07b94be5f6b9ea
Validity
Not Before: Dec 22 09:01:59 2023 GMT
Not After : Dec 23 09:01:59 2023 GMT
Subject: CN=f909ef8030496470cfd986564ba8964a735377e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:9c:66:10:92:5b:ea:17:85:4d:60:14:c5:
41:74:b5:8d:ca:b6:3d:b6:0b:98:ba:a8:12:8f:92:
8d:a3:2f:9d:ea:9a:24:e3:33:3f:b6:3f:7c:83:b4:
30:13:9e:eb:c8:89:b4:cc:13:d9:1a:21:d3:d3:68:
e1:d0:ba:5e:3f:27:3b:c5:dd:c0:f1:30:a6:0a:3f:
e0:ba:75:8f:0d:7a:62:72:9f:50:ec:77:f7:20:3c:
90:51:13:55:5d:4e:ba:1d:da:6f:24:d2:68:55:b7:
9e:6a:83:5d:31:e4:ef:00:f7:5a:8d:19:e5:7d:b5:
d1:c7:00:86:22:45:34:6a:6f:6c:f0:a2:71:c6:f6:
0d:49:d9:70:f9:d8:20:9a:a3:e0:58:40:2d:06:da:
2e:c7:89:b5:ed:8a:e6:2a:a8:95:54:db:e3:c6:f6:
2f:fe:58:d9:c0:96:5e:9f:b8:8b:cf:a3:51:a4:15:
ba:52:07:6b:8c:1b:e9:c0:c5:f0:72:50:8a:bb:87:
20:e9:d8:60:32:0a:66:fd:4c:03:f6:37:03:e3:ed:
9f:a5:11:85:7b:74:4a:3d:2c:7b:31:69:76:b6:da:
01:81:7f:af:21:dc:17:d0:b4:8f:54:25:be:76:d7:
ec:c1:83:48:3c:2b:97:4a:0a:0b:a1:36:dd:ce:47:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:EF:80:30:49:64:70:CF:D9:86:56:4B:A8:96:4A:73:53:77:E2
X509v3 Authority Key Identifier:
keyid:EE:6E:0A:EF:9A:85:4E:88:80:E1:F0:E4:6D:07:B9:4B:E5:F6:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m4K75qFToiA4fDkbQe5S-X2ueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:25:11:ae:80:9a:2e:cb:f7:9f:68:06:43:df:c6:de:d4:22:
7b:a3:8a:c9:e7:32:3a:3c:8e:50:38:45:c3:c1:13:2f:bd:d7:
4e:89:a1:42:e1:1b:c5:24:2b:c0:74:9c:c7:23:09:0b:03:27:
f5:ae:a1:18:7b:1f:8d:f7:67:1b:95:bb:74:50:da:77:76:e9:
78:a7:61:44:84:c9:41:cd:b4:e0:7b:3d:a5:f1:be:9c:27:6b:
f6:30:14:6e:20:05:df:19:39:3b:b7:28:cb:4a:e1:ae:f7:7b:
6f:67:96:45:76:42:65:a2:6e:75:6f:e1:72:ae:f4:7e:d5:4b:
79:ff:d2:6f:99:3d:33:e9:29:ce:d9:2e:b4:5e:7b:b8:78:5d:
12:7e:ba:d8:9b:5e:f8:ad:94:88:d7:53:d8:95:0b:9f:dd:c7:
fa:eb:3c:f9:b2:cc:5b:a5:a8:dc:0e:cd:80:d2:ff:e7:eb:67:
01:eb:6d:ec:9c:87:0d:a0:64:ce:24:5a:f2:b8:b9:81:e4:33:
92:20:9b:7c:28:41:e8:b5:88:d9:ca:16:fe:ac:c3:27:62:e3:
02:31:a8:12:42:e9:86:c4:d8:24:3f:0d:07:96:a0:84:39:ea:
aa:81:c4:1c:98:5f:39:9b:6c:18:49:85:bd:10:3c:48:26:c1:
7a:9b:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:59:03 2025 by rpki-client