Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.mft
File: u0ApDQ5rDY9Va94QUZ4TX_wJhiE.mft (raw, json)
Hash identifier: LwmZSzbl6+PScpATieTQk+AykIRMxzENUt0sOcnGHy4=
Subject key identifier: 59:D8:3D:C0:6A:EA:B5:C3:AF:0F:84:24:4E:C3:EF:C9:03:1C:65:6E
Authority key identifier: BB:40:29:0D:0E:6B:0D:8F:55:6B:DE:10:51:9E:13:5F:FC:09:86:21
Certificate issuer: /CN=bb40290d0e6b0d8f556bde10519e135ffc098621
Certificate serial: 018B137485C31DF67B0F82DA9DA1A2C1CA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.mft
Manifest number: 0E77
Signing time: Mon 09 Oct 2023 08:01:25 +0000
Manifest this update: Mon 09 Oct 2023 08:01:25 +0000
Manifest next update: Tue 10 Oct 2023 08:01:25 +0000
Files and hashes: 1: ZhuqyVHWQ4DNSfpLcvphzb9IkL4.roa (hash: 3qlKoSsmVJedXkjmHg4aAkQrc9rbt5OqqNgdLSm3es8=)
2: hzscSU6Ouk0MS0hl4yNNB-OFhaI.roa (hash: /JlgaJcrWt7sZQUVWhJkdsyaYuSf2J/Na53+hnp1Cd4=)
3: u0ApDQ5rDY9Va94QUZ4TX_wJhiE.crl (hash: b+DuyWl+KPkPXhOBKmKLjjszhSwNXY6IKyWcbXS0Fng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:74:85:c3:1d:f6:7b:0f:82:da:9d:a1:a2:c1:ca:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb40290d0e6b0d8f556bde10519e135ffc098621
Validity
Not Before: Oct 9 08:01:25 2023 GMT
Not After : Oct 10 08:01:25 2023 GMT
Subject: CN=59d83dc06aeab5c3af0f84244ec3efc9031c656e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:49:f6:ab:f3:38:44:ff:28:90:09:01:ee:
ae:73:6a:45:16:94:78:ac:ac:e6:a4:a0:3c:81:64:
19:11:12:45:78:98:e4:24:ee:bc:35:15:1b:0f:92:
75:48:cd:0e:f9:ff:ef:5b:9f:4e:09:6a:35:d9:04:
bd:52:c9:da:36:9d:a7:81:5b:d0:18:d3:d8:ca:5c:
15:85:6b:17:90:b5:b6:4f:82:ae:f8:88:18:13:d1:
33:9f:6f:21:85:6e:9c:21:29:0e:9a:0a:9f:9c:16:
46:46:2e:9f:52:d5:de:67:6e:e3:46:78:1d:02:fd:
8b:3f:cb:25:73:f8:33:59:d2:e7:8a:e7:5f:e2:97:
26:6e:31:19:4d:71:11:ae:d1:ff:ea:0f:3a:2f:cc:
b6:9a:30:6c:ef:d7:29:e8:15:b3:6f:6f:93:c0:76:
f1:c9:69:21:26:3a:3f:04:6f:45:70:1c:1f:7e:34:
5e:e0:45:39:91:3c:73:1c:7e:f4:d8:db:8f:a1:8d:
61:2a:34:2f:16:10:48:08:7e:42:4d:cc:f1:08:28:
8b:7c:4a:94:87:37:8a:9f:b0:6c:e3:6e:bf:09:62:
0e:47:58:80:c4:91:1b:0f:72:88:f5:b6:6b:b2:14:
3c:09:62:c7:33:4d:c9:e1:6a:f1:8c:0b:9b:bd:cc:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D8:3D:C0:6A:EA:B5:C3:AF:0F:84:24:4E:C3:EF:C9:03:1C:65:6E
X509v3 Authority Key Identifier:
keyid:BB:40:29:0D:0E:6B:0D:8F:55:6B:DE:10:51:9E:13:5F:FC:09:86:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6f3dc-2efc-4ac8-ac92-adaaa3e5106b/1/u0ApDQ5rDY9Va94QUZ4TX_wJhiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:2c:1f:ac:0d:96:00:5d:2d:1d:a3:73:dc:93:67:86:61:
e4:1b:ba:2e:7d:a0:9c:a3:46:03:af:76:77:f6:79:6e:83:0e:
f1:e0:0c:78:94:0f:3f:36:29:14:ed:7e:d7:d0:5b:85:24:f1:
22:ea:3e:2c:9e:96:57:96:b6:6c:e1:b1:5e:22:d3:de:9f:09:
ee:4d:21:19:0b:d6:3b:1c:dc:8b:ee:2f:30:3e:45:67:d9:64:
d1:62:20:13:b5:be:c7:d5:95:6c:a0:34:45:38:65:10:19:df:
26:4a:f5:2c:44:03:59:56:8c:0e:95:af:c2:18:12:33:89:4a:
b9:64:9a:97:af:99:f9:4b:98:df:a7:3d:d9:dc:a5:0d:67:d2:
f4:d9:0c:09:41:bf:22:19:65:81:da:bd:65:6b:a5:34:b3:fc:
7c:68:62:5b:14:4e:11:d6:c5:77:ec:47:0a:f7:93:a5:b8:32:
e7:b1:d9:db:85:70:65:bf:7a:10:e7:2e:bc:94:cd:39:e5:2d:
4b:5c:77:f4:e3:7b:33:a1:b8:db:50:ab:2e:64:18:ea:9b:d1:
9b:0f:d6:c1:40:3c:aa:ec:16:94:d2:49:31:96:b0:a3:9a:3e:
b3:cd:a7:a8:6a:ed:9b:c1:ad:2a:d1:86:ff:79:bc:0f:70:88:
12:03:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:10:53 2025 by rpki-client