This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.mft
File:                     aQ2FgcRkyZa8-Ca8JWVKVQSVf40.mft (raw, json)
Hash identifier:          MNIl9xpOJ5Gw9zl6iVEEIyK6HhBGj9MwNP+Pryh5DEQ=
Subject key identifier:   44:0F:16:6D:ED:D1:61:44:31:42:FF:35:F1:A6:C3:C9:C4:69:4B:82
Authority key identifier: 69:0D:85:81:C4:64:C9:96:BC:F8:26:BC:25:65:4A:55:04:95:7F:8D
Certificate issuer:       /CN=690d8581c464c996bcf826bc25654a5504957f8d
Certificate serial:       0188E36D371DD367493B8FA889BFD9FE2748
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.mft
Manifest number:          0864
Signing time:             Thu 22 Jun 2023 14:06:05 +0000
Manifest this update:     Thu 22 Jun 2023 14:06:05 +0000
Manifest next update:     Fri 23 Jun 2023 14:06:05 +0000
Files and hashes:         1: ABJeBSRerc6ln8Nq1O24UKU-kIQ.roa (hash: wbHLDg1zgSa2lEkw/I9y9oawv8nZRjML/tbJECp7ZGQ=)
                          2: aQ2FgcRkyZa8-Ca8JWVKVQSVf40.crl (hash: pcaQRSFspx6fv2zAAigrY6OdIY+c5OknaShqFCLvXEs=)
                          3: tw47GNmTZrjPWL35egmoBkYJhEw.roa (hash: S1CiwroLJFppp4FVAx+GNzmZIvQlkfEHvcwoaTgLluw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:6d:37:1d:d3:67:49:3b:8f:a8:89:bf:d9:fe:27:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690d8581c464c996bcf826bc25654a5504957f8d
        Validity
            Not Before: Jun 22 14:06:05 2023 GMT
            Not After : Jun 23 14:06:05 2023 GMT
        Subject: CN=440f166dedd161443142ff35f1a6c3c9c4694b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:fa:1f:b4:56:45:34:6f:0c:2b:eb:df:d9:
                    9e:74:17:a2:50:03:41:b1:2f:a8:18:d1:f4:97:e6:
                    8b:9a:28:a0:2e:59:35:d2:99:20:19:c6:4e:1a:f6:
                    3d:64:f1:e5:23:e5:ba:14:60:88:8c:3a:06:61:5a:
                    6a:3a:40:3a:29:f6:e7:71:3a:9f:f8:c1:7a:83:ab:
                    54:19:d9:94:64:9a:0d:68:77:f5:2e:10:d7:34:17:
                    fe:c8:5b:e0:1c:e1:ab:c2:aa:df:0d:62:be:ad:74:
                    7c:eb:04:eb:8e:ed:50:8b:a3:54:e8:5c:f3:67:06:
                    bb:f5:82:08:3a:7f:d1:6f:ad:3c:c4:cb:26:14:a1:
                    2d:46:3b:b0:4e:c2:41:ea:81:57:71:85:45:20:e2:
                    c4:31:79:ed:a0:8f:02:81:3a:c2:93:7e:4b:c5:a9:
                    e1:cc:45:b6:4f:25:bd:ba:47:bf:de:9d:0c:08:52:
                    c1:d7:43:c9:84:fc:2c:55:9f:6a:e6:60:34:a0:a8:
                    30:e3:72:82:90:39:4e:f2:50:76:6b:e3:9f:88:7a:
                    ea:00:01:5a:8e:ab:9d:0f:21:91:c5:38:d2:39:b4:
                    54:66:f8:f1:1f:8f:9b:36:1b:df:94:8b:22:9d:9b:
                    be:ef:b6:ad:95:e9:b3:b9:c4:b6:50:bc:f8:f5:d0:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0F:16:6D:ED:D1:61:44:31:42:FF:35:F1:A6:C3:C9:C4:69:4B:82
            X509v3 Authority Key Identifier:
                keyid:69:0D:85:81:C4:64:C9:96:BC:F8:26:BC:25:65:4A:55:04:95:7F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/a792c2-f60b-4434-a1d1-d143d33d78d2/1/aQ2FgcRkyZa8-Ca8JWVKVQSVf40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:38:86:44:bc:f1:07:1e:d7:c2:12:30:75:b1:72:bb:0a:b3:
         9c:0b:8d:48:15:7b:81:a0:a4:bd:0c:4c:cf:2d:dd:70:b0:64:
         fc:e2:d2:a8:8d:96:f9:36:a1:02:35:15:00:2f:f0:5f:18:02:
         90:b9:d0:ec:15:f7:dd:3c:49:1c:1a:44:92:9d:db:d1:2e:73:
         c9:b6:fc:9a:27:02:61:82:03:ff:2e:3d:8c:2c:fc:29:c2:44:
         26:a6:a6:1a:5d:69:b5:ca:9f:93:12:fc:3c:d2:09:7b:09:8c:
         d5:6e:3c:6f:5a:36:1b:f8:e1:62:09:0f:ca:76:da:22:7b:a2:
         5d:53:13:96:32:ed:b9:fb:f3:b1:5c:7a:0f:89:d9:e5:a9:5b:
         a6:3a:17:4b:d0:22:06:87:cc:2a:64:3b:45:75:61:8a:72:28:
         a8:56:13:11:25:ca:a6:2c:dc:45:3d:ee:0f:94:61:d6:0f:af:
         1a:0e:c0:60:c7:b9:51:0d:0f:19:78:13:21:34:de:1e:a8:5b:
         88:cd:a7:da:7f:34:2c:22:7b:c0:a9:01:29:aa:fa:97:ee:9f:
         c5:64:9e:b4:ca:8f:fb:2d:99:61:63:5c:3a:e8:eb:db:80:21:
         46:a1:d1:54:22:21:62:98:fd:99:e9:b9:fe:00:d7:8c:a0:bb:
         0c:b6:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----