Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/aSkzpMxOHXO4Q-6zE79oQL63JZw.mft
File: aSkzpMxOHXO4Q-6zE79oQL63JZw.mft (raw, json)
Hash identifier: ckizqt2upd94BrQQXXjefmLH/MmX7t4ZjgcSjSTlB4A=
Subject key identifier: 28:34:DC:85:C3:4B:9C:6B:09:74:8C:79:3A:81:F9:8B:71:B9:67:42
Authority key identifier: 69:29:33:A4:CC:4E:1D:73:B8:43:EE:B3:13:BF:68:40:BE:B7:25:9C
Certificate issuer: /CN=692933a4cc4e1d73b843eeb313bf6840beb7259c
Certificate serial: 028849F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSkzpMxOHXO4Q-6zE79oQL63JZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/aSkzpMxOHXO4Q-6zE79oQL63JZw.mft
Manifest number: 0355
Signing time: Tue 26 Apr 2022 05:20:58 +0000
Manifest this update: Tue 26 Apr 2022 05:20:58 +0000
Manifest next update: Wed 27 Apr 2022 05:20:58 +0000
Files and hashes: 1: 03pc4JgiGO4nmtln18b5rkAZRYo.roa (hash: si0O8YwkIX1xCjNyOVQ7eKu9N0IcGvWxUpYvgYuoqzk=)
2: aSkzpMxOHXO4Q-6zE79oQL63JZw.crl (hash: cUggNd4NO8ki5G0bhZ8vI325ltq5QDC6LvDahbVsjog=)
3: uOhwShmDeJ2G19i1IJhpD4edfyo.roa (hash: ivaTWJT7xMaZQZ5BwLvBcdHbQ8kLqNAS8vi022+zA2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42486264 (0x28849f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692933a4cc4e1d73b843eeb313bf6840beb7259c
Validity
Not Before: Apr 26 05:20:58 2022 GMT
Not After : Apr 27 05:20:58 2022 GMT
Subject: CN=2834dc85c34b9c6b09748c793a81f98b71b96742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7e:52:5a:5b:70:a7:e3:83:32:1e:b1:8e:c0:
30:b1:3d:8e:79:68:7c:78:57:13:1d:23:4c:5c:64:
94:84:ae:58:65:85:44:f0:58:62:eb:21:24:66:4c:
a1:94:af:de:5d:08:cc:e2:76:34:7e:95:7f:72:f6:
99:1a:20:c4:c7:46:6e:72:90:99:03:f5:2c:21:28:
7b:96:db:fe:6b:d6:3a:c5:e4:62:b2:ab:89:a6:58:
cb:a4:fd:ea:71:3f:56:98:dc:fb:1c:cc:96:81:b6:
94:c5:da:1d:d0:21:cf:81:84:3f:c9:68:2b:0f:a0:
4c:7c:9a:9b:5e:55:25:97:6b:f5:77:2c:45:31:16:
fc:7d:76:89:06:7f:b5:e3:c2:21:50:0b:45:06:e6:
da:49:44:83:a4:f4:5b:62:60:3f:1e:81:96:bd:91:
41:1f:b5:2b:98:42:32:f7:61:84:14:25:6f:f9:74:
20:6e:61:f2:22:81:b5:9a:39:b8:49:05:06:69:c3:
7a:15:c0:fc:3b:34:0d:37:8e:05:c9:55:cb:7e:e3:
25:86:b0:36:5a:96:6a:6a:05:bd:d6:66:a6:18:0d:
62:66:75:28:a2:ce:9b:2c:b9:1b:66:0a:3a:9d:1e:
97:d0:ec:07:8a:e7:a0:66:ed:de:98:b1:3b:6a:4f:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:DC:85:C3:4B:9C:6B:09:74:8C:79:3A:81:F9:8B:71:B9:67:42
X509v3 Authority Key Identifier:
keyid:69:29:33:A4:CC:4E:1D:73:B8:43:EE:B3:13:BF:68:40:BE:B7:25:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSkzpMxOHXO4Q-6zE79oQL63JZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/aSkzpMxOHXO4Q-6zE79oQL63JZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c4de01-f0ab-43a3-b230-45688a4edea4/1/aSkzpMxOHXO4Q-6zE79oQL63JZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cd:7b:0a:81:e9:80:bd:18:c1:e7:93:e4:1c:5f:fc:62:2f:
9f:73:52:41:7e:0e:f3:8c:5f:f8:d0:b4:a7:67:33:1f:9e:7e:
ec:94:52:2e:88:b8:c3:0b:a2:1a:da:9a:9c:fe:78:8d:b3:57:
5b:5e:8c:7f:fe:8e:ab:2b:0e:0f:b9:b7:18:5c:80:2f:76:b6:
b9:a2:05:cb:88:17:af:8d:f1:1f:50:2b:1f:7b:42:1a:0b:e2:
54:ca:f6:f3:03:64:6e:62:d5:f8:f5:9a:f9:be:77:09:6a:3c:
cc:2e:54:83:88:b1:46:5e:b3:92:bb:70:6f:97:ab:f6:45:6b:
a8:1b:80:93:11:21:03:a4:39:0c:e3:58:12:4a:fe:dc:38:93:
29:1c:c0:c3:ff:a4:49:96:dd:e2:e3:cf:30:c2:87:38:e5:13:
00:d5:a3:38:ae:90:e9:ba:ff:2e:45:9c:28:18:dd:8e:4b:8d:
00:fa:dd:e4:2d:62:45:7e:47:ee:6a:d3:e2:dd:89:d9:82:0d:
25:0b:7a:2b:39:24:e5:6f:31:ec:5c:83:52:13:6a:51:d3:db:
64:a3:ef:64:cd:6c:33:1a:bf:11:a2:08:1e:0d:6d:e1:f0:07:
59:99:df:e3:e7:78:9f:96:5c:e6:f6:c7:51:e2:a0:b6:81:77:
c8:ad:a2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:46:04 2025 by rpki-client