Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.mft
File: l1FRIi3FYwdvkxpBSX64fGrP380.mft (raw, json)
Hash identifier: 1GIq0Lq2JB49VN3miS7WEPQTmcIt92m6yDAQq0ejuOk=
Subject key identifier: C6:94:19:C3:C4:25:EE:30:9B:A3:8D:55:B1:63:DA:A7:68:37:80:FD
Authority key identifier: 97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD
Certificate issuer: /CN=975151222dc563076f931a41497eb87c6acfdfcd
Certificate serial: 0188E43FA76BB9F699AC03F09C0A1812FD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.mft
Manifest number: 0A16
Signing time: Thu 22 Jun 2023 17:55:56 +0000
Manifest this update: Thu 22 Jun 2023 17:55:56 +0000
Manifest next update: Fri 23 Jun 2023 17:55:56 +0000
Files and hashes: 1: f98kTT7YDkAckt8KtMa70JHPd2Q.roa (hash: mawmrXsSr5LydWBFnLOlXkhYA2lB8XnRYvOSz3RkmTs=)
2: kU3pQ5fymt_VjrIhP3O1Q5Q92C4.roa (hash: ayvWFeprvjrZHYLmvLHzz97fOWf1Gs5WPr1kVUFWWOE=)
3: l1FRIi3FYwdvkxpBSX64fGrP380.crl (hash: Jx8xel9+pnsOMd2VHZqT/kQRdjhRup0J7SjqILwxnYA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:3f:a7:6b:b9:f6:99:ac:03:f0:9c:0a:18:12:fd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975151222dc563076f931a41497eb87c6acfdfcd
Validity
Not Before: Jun 22 17:55:56 2023 GMT
Not After : Jun 23 17:55:56 2023 GMT
Subject: CN=c69419c3c425ee309ba38d55b163daa7683780fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:2d:ff:97:11:a3:fe:13:da:92:92:f9:4c:
b0:12:71:36:2e:ad:b0:28:d1:9e:08:d8:14:5d:e5:
7c:a2:9d:e3:1e:77:8f:ca:95:1c:a6:2d:5e:d3:93:
d2:04:98:52:ca:31:a4:48:1c:9b:e9:bb:9d:0e:73:
fb:3d:b7:25:62:69:6d:35:8a:2d:ba:6f:70:ea:01:
ff:09:60:db:f6:05:88:d9:5b:1c:de:11:db:79:84:
e7:de:16:54:27:db:e8:52:d6:6f:75:42:51:21:b8:
02:43:82:c0:0d:45:6b:5b:c3:b6:dd:e8:22:9e:d2:
49:fe:77:22:83:d0:e1:3f:51:33:02:8d:d9:b4:35:
d0:06:44:ed:e2:bd:7b:4a:a6:78:6c:fe:5a:3c:fd:
bb:82:71:06:0b:c5:72:14:24:3b:4b:0e:df:00:7d:
1f:50:39:66:11:2e:5c:4f:54:46:67:74:e6:7a:3a:
74:a8:4d:91:7d:81:26:9a:c7:1d:a4:6b:73:8c:5d:
9b:91:4c:fa:66:04:ec:72:5e:81:4b:5a:ec:43:d7:
b3:2e:41:66:1a:f8:33:56:1f:c4:41:9a:9e:2f:b6:
9a:d4:8d:52:8c:fb:62:6d:5d:58:30:79:2c:89:61:
42:48:18:5e:22:6a:1d:8c:33:99:f5:71:10:0c:e0:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:19:C3:C4:25:EE:30:9B:A3:8D:55:B1:63:DA:A7:68:37:80:FD
X509v3 Authority Key Identifier:
keyid:97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c5:d7:c1:b3:4b:54:f7:a6:a1:63:b1:dc:73:b4:7f:77:8e:
f1:b0:59:23:72:c5:2f:c0:f4:93:14:23:ab:2e:aa:c8:86:3b:
5d:79:36:76:25:6f:6b:d1:02:d2:b7:99:e8:c1:31:96:59:0d:
1e:1b:a4:19:2b:37:57:89:ca:3f:1a:82:2d:d7:ad:89:9e:e7:
1b:b6:da:51:f2:bf:0e:f3:6f:93:3a:e4:31:1a:56:15:37:38:
46:d4:7b:8a:5a:2d:e2:86:5b:a2:75:b7:49:90:49:b5:65:cc:
b2:4d:22:8d:ae:1a:70:9a:01:34:53:d9:48:65:54:ab:8d:7e:
0e:9a:16:dc:43:0e:27:37:5c:a0:1c:58:78:44:23:76:c6:47:
f6:a1:94:21:f4:27:81:9c:ba:c5:87:e3:c1:6c:86:f4:59:c7:
a4:b3:b1:c1:b3:fe:24:51:cd:fd:de:3f:e9:e1:50:9b:d7:1f:
e3:fd:e0:65:2c:ee:5a:08:e3:d8:a1:ca:6a:a7:85:41:be:b1:
51:ea:e9:c1:dd:dc:72:4d:7b:4c:45:3d:57:74:6b:dd:13:91:
dc:80:fb:d0:a3:dc:32:87:c7:cf:8c:47:d3:53:e5:7b:ec:cb:
07:30:90:a7:4f:c1:88:e1:15:c1:93:75:55:8e:dc:bd:4d:26:
e6:49:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:42:36 2025 by rpki-client