Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.mft
File: mapHxZ1qVFUYCFrAznnDAtswUuI.mft (raw, json)
Hash identifier: +3BkRJzFcwLoaCMwSgsbfnlArYFPB1pvKOQS80EkTEg=
Subject key identifier: 0D:CC:5E:31:0F:C6:A3:3D:E7:6F:02:26:F3:BA:C0:74:2A:DD:23:08
Authority key identifier: 99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
Certificate issuer: /CN=99aa47c59d6a545518085ac0ce79c302db3052e2
Certificate serial: 018708C1ECFEFF7BD491CEA86F0EBE41B47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.mft
Manifest number: 0CE4
Signing time: Wed 22 Mar 2023 09:58:59 +0000
Manifest this update: Wed 22 Mar 2023 09:58:59 +0000
Manifest next update: Thu 23 Mar 2023 09:58:59 +0000
Files and hashes: 1: XKkrrZozSEGFAR9nNPdXFLsvMVw.roa (hash: zK3aU9kHfCvoW+APmT3Bk7e7JLtyNHvHZZbFh3nWr68=)
2: Z_wVdpZ3FeFGX7Z-umZZmfymNgU.roa (hash: BIhka0NEFcKHbxYTttdXDXrum3AoCoHt712ike5LwdM=)
3: mapHxZ1qVFUYCFrAznnDAtswUuI.crl (hash: +xygW9CzOHGr8HWIkpQd9y3mahRtm3dTPZUnMtstb3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:c1:ec:fe:ff:7b:d4:91:ce:a8:6f:0e:be:41:b4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99aa47c59d6a545518085ac0ce79c302db3052e2
Validity
Not Before: Mar 22 09:58:59 2023 GMT
Not After : Mar 23 09:58:59 2023 GMT
Subject: CN=0dcc5e310fc6a33de76f0226f3bac0742add2308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:89:46:e4:70:75:ab:e6:b6:fd:7a:5b:7b:73:
b8:b2:c3:43:a0:96:4c:a5:f3:6e:a2:66:b2:f2:9b:
65:c7:7c:72:8b:d4:60:7e:96:4e:6d:2f:eb:70:bf:
53:fe:cb:23:1b:86:53:f4:c8:69:98:aa:d4:4b:43:
59:30:15:9c:a9:44:6f:3a:24:d0:c9:ec:4a:01:49:
3b:3c:74:60:a2:51:d4:65:c0:9c:a1:35:94:fa:2d:
f6:57:19:39:c3:80:db:75:3f:f8:4b:90:df:95:14:
8b:6d:0e:01:ff:24:7b:92:a8:18:02:0e:ca:c4:78:
37:11:5c:56:ab:c4:f3:aa:2d:b1:1d:76:0a:f8:43:
23:d6:87:40:9d:59:75:ff:d9:f0:9f:3b:15:f0:c5:
6f:59:3e:fb:87:6e:cb:a8:cc:50:f0:b2:65:0e:33:
21:0b:bf:ed:0e:04:51:5e:3f:c9:89:6a:cd:0b:59:
72:f6:42:8f:c7:61:a7:ce:a3:98:e5:2f:3f:bb:18:
af:2d:4a:d7:75:4c:69:7a:fc:dd:fd:15:ef:91:98:
e1:f5:05:df:b7:29:6e:eb:5c:11:61:65:61:89:b7:
c2:d3:d8:df:b2:32:52:9d:1e:5f:39:4f:c4:3d:93:
34:19:43:5d:77:ca:c3:10:5d:d7:f1:80:cf:5c:71:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CC:5E:31:0F:C6:A3:3D:E7:6F:02:26:F3:BA:C0:74:2A:DD:23:08
X509v3 Authority Key Identifier:
keyid:99:AA:47:C5:9D:6A:54:55:18:08:5A:C0:CE:79:C3:02:DB:30:52:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mapHxZ1qVFUYCFrAznnDAtswUuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/206804-7464-445d-9c76-fa62c07a412e/1/mapHxZ1qVFUYCFrAznnDAtswUuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:41:b0:95:10:2b:c8:03:45:b2:84:df:b7:9d:74:28:63:c7:
6e:18:35:dc:41:34:38:d7:0b:c5:1f:8e:9d:07:f2:da:24:8b:
d7:c8:99:cf:8a:db:0b:7b:33:03:9b:83:04:ed:20:d2:8e:43:
0a:07:0f:f2:aa:79:75:92:d8:cc:9e:e8:ac:a2:38:23:d3:45:
ae:31:1a:b1:60:1c:60:a1:14:8f:2a:58:32:f4:13:04:e9:f2:
7c:21:4c:a2:bb:b4:7c:04:28:27:ad:c9:1d:d2:da:f5:57:74:
b6:4c:11:ed:62:58:34:7b:e2:4e:c4:bb:55:21:83:8a:64:60:
a6:4d:12:82:70:f6:60:ba:f7:e1:81:ca:be:b4:92:a2:3f:d2:
3b:7e:b2:17:fc:93:7b:c4:c3:36:b9:01:3a:35:dd:5f:88:14:
6c:af:67:7b:82:59:33:02:f8:ea:61:90:ec:82:d8:38:18:7b:
f5:ca:17:3c:30:3f:a6:2e:80:59:a3:bd:59:73:b8:2a:d3:e6:
81:21:94:4a:a4:dc:fa:22:46:38:8c:1b:fd:56:45:1c:41:28:
a2:fe:62:b9:c2:9a:5f:3d:f3:0d:be:79:49:86:b7:60:d8:bd:
96:3d:91:d6:28:fc:b9:f8:7a:96:ed:db:a0:f7:64:50:5a:ab:
38:b7:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:41:00 2025 by rpki-client