Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/Ce0rygFMLETpC4RN6JQmIjw5DPY.mft
File: Ce0rygFMLETpC4RN6JQmIjw5DPY.mft (raw, json)
Hash identifier: q3VlmsL+QjaD3Q2kRbb2bpb5mzlCy+lQLH/Kjpb2isE=
Subject key identifier: A4:02:1A:A5:E5:F7:22:7F:B6:67:0E:C1:9B:FF:EE:B7:E2:B7:DF:4B
Authority key identifier: 09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
Certificate issuer: /CN=09ed2bca014c2c44e90b844de89426223c390cf6
Certificate serial: 018CB50601C9EA0AE84B1DD23897BB654D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/Ce0rygFMLETpC4RN6JQmIjw5DPY.mft
Manifest number: 0847
Signing time: Fri 29 Dec 2023 10:01:58 +0000
Manifest this update: Fri 29 Dec 2023 10:01:58 +0000
Manifest next update: Sat 30 Dec 2023 10:01:58 +0000
Files and hashes: 1: Ce0rygFMLETpC4RN6JQmIjw5DPY.crl (hash: UyslpZkSu522TIxdGyKsQa0uSYQbp0PbIM5vR6J1vQo=)
2: MAs6M9WXQ2jwFVtRgfvahcdFchM.roa (hash: 3nIuTn8G+xlSIVUl5W7Q4Dah/YXRu37V5NcqWT5zDZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:06:01:c9:ea:0a:e8:4b:1d:d2:38:97:bb:65:4d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ed2bca014c2c44e90b844de89426223c390cf6
Validity
Not Before: Dec 29 10:01:58 2023 GMT
Not After : Dec 30 10:01:58 2023 GMT
Subject: CN=a4021aa5e5f7227fb6670ec19bffeeb7e2b7df4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b7:17:ae:f6:1f:aa:96:63:71:ce:5c:10:35:
c8:5a:4c:8c:42:28:82:f8:5b:77:3e:db:2f:da:23:
9e:28:73:69:df:e7:13:6d:d0:66:dc:23:8e:ac:2a:
8c:42:5d:da:fc:54:06:b7:e9:f1:b8:4f:b4:b1:be:
de:27:88:a8:54:b2:27:fc:a1:32:0a:92:05:09:43:
80:58:8a:53:fa:91:18:84:bd:17:e6:97:04:d2:04:
38:3c:58:36:16:e9:62:af:9c:b0:78:90:1d:8c:d2:
a8:87:42:04:4b:3d:83:62:2e:64:0c:51:b7:a1:33:
91:fd:95:00:03:5e:15:ad:29:77:a4:b8:e3:88:af:
a9:22:72:97:d7:ae:d0:97:af:8c:b9:24:c4:57:f1:
a3:76:66:29:94:da:3d:e9:2b:d9:f0:15:7b:c2:d0:
44:43:8d:95:57:5c:40:56:1f:99:44:89:9d:63:ed:
99:93:37:73:45:2a:47:ab:90:1b:ac:9a:28:89:18:
34:57:e7:1f:5c:4d:ef:11:04:67:ba:96:7a:d6:b4:
6a:52:37:d2:26:c7:5c:20:93:e7:2a:d9:15:76:76:
21:ad:14:96:84:74:74:02:6f:59:d8:64:11:b4:14:
66:bd:b8:46:47:31:57:03:57:89:fe:15:dc:02:33:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:02:1A:A5:E5:F7:22:7F:B6:67:0E:C1:9B:FF:EE:B7:E2:B7:DF:4B
X509v3 Authority Key Identifier:
keyid:09:ED:2B:CA:01:4C:2C:44:E9:0B:84:4D:E8:94:26:22:3C:39:0C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce0rygFMLETpC4RN6JQmIjw5DPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/Ce0rygFMLETpC4RN6JQmIjw5DPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/cfe94b-9448-4f82-b440-8bb2f26914a5/1/Ce0rygFMLETpC4RN6JQmIjw5DPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a9:56:16:10:0e:a1:b9:44:05:b8:f1:cf:14:d4:25:3c:ee:
c1:bb:2e:60:19:61:c2:ec:f2:1e:05:6b:0c:f2:6d:04:d1:a2:
b2:f6:b2:2c:ef:7d:76:01:f9:d8:89:38:21:91:ef:6c:5e:d8:
1a:03:a1:2f:50:91:3c:68:00:cd:c3:20:e9:68:50:72:8e:85:
4d:79:d3:c2:3e:2d:38:c8:fa:d5:75:1e:e5:4b:30:56:80:45:
a9:55:6c:22:a1:02:bb:72:9d:47:ca:90:12:e1:18:51:1b:88:
56:b1:ce:b4:4c:19:e5:0a:8f:dc:47:b8:f6:dd:8c:d4:35:5a:
2d:6a:94:48:be:82:00:d6:59:ef:4d:0b:24:fc:e0:83:7d:3d:
88:96:5a:24:1b:ce:e0:7f:c2:7a:4f:28:ee:c2:f9:22:49:e0:
8a:62:0e:57:20:21:52:d4:64:49:02:51:1e:07:a0:65:5d:84:
0e:61:56:f9:af:80:d2:56:ab:c3:57:5b:54:d6:65:03:ef:3a:
04:b1:7e:fe:02:ae:98:d9:27:2f:bc:f1:8a:d5:99:84:5d:d5:
ab:39:0e:71:3f:2f:4a:b3:9e:74:fb:03:94:3b:cc:8d:5c:c2:
b4:f5:6a:cf:77:cd:83:5e:e1:72:24:ec:93:0c:c1:b1:b0:97:
b9:1a:e2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 00:14:41 2025 by rpki-client