Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.mft
File: ERh9wYv6iyooqknRDabVTAgxRkQ.mft (raw, json)
Hash identifier: TK8P5xnvu8/Atckk2ua97TbNpGlSwD05h1fSWoR9ytg=
Subject key identifier: A7:02:6A:3B:A9:35:66:CF:9F:C1:FA:47:6F:86:5B:E5:AF:70:BE:A0
Authority key identifier: 11:18:7D:C1:8B:FA:8B:2A:28:AA:49:D1:0D:A6:D5:4C:08:31:46:44
Certificate issuer: /CN=11187dc18bfa8b2a28aa49d10da6d54c08314644
Certificate serial: 018BEB8837244D84549A8D94EB058F61647F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERh9wYv6iyooqknRDabVTAgxRkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.mft
Manifest number: 0857
Signing time: Mon 20 Nov 2023 07:00:54 +0000
Manifest this update: Mon 20 Nov 2023 07:00:54 +0000
Manifest next update: Tue 21 Nov 2023 07:00:54 +0000
Files and hashes: 1: 1rT_JZzAVmui_8ccUvruW8tvzOM.roa (hash: z1vVTFkBjyR5WPymW3wH2TLtR8t+0o2vdvkxDrm9FZM=)
2: ERh9wYv6iyooqknRDabVTAgxRkQ.crl (hash: yd7nDWcU93nXRl1ClaVE5OvHoFB+WKcOO5BvdCjIX1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:eb:88:37:24:4d:84:54:9a:8d:94:eb:05:8f:61:64:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11187dc18bfa8b2a28aa49d10da6d54c08314644
Validity
Not Before: Nov 20 07:00:54 2023 GMT
Not After : Nov 21 07:00:54 2023 GMT
Subject: CN=a7026a3ba93566cf9fc1fa476f865be5af70bea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:6a:d8:a5:a7:d5:4a:25:aa:b8:b7:32:39:
0b:b1:fc:f8:fe:da:1b:1a:c8:5c:d2:1b:0a:be:d0:
e2:0b:1c:cd:e7:d6:67:90:bf:a5:48:be:90:f7:44:
8e:be:82:5f:d8:60:e4:43:5e:89:a8:44:4f:0e:f6:
47:7b:48:df:ef:5c:1b:12:10:97:ef:99:c7:06:85:
41:8e:0b:4e:f3:53:2b:eb:f7:54:2b:c4:a7:a9:38:
9e:db:00:80:98:d8:8a:1e:c7:ca:b4:0e:fe:54:01:
45:bb:fb:26:80:84:ff:49:10:c0:7b:1c:72:48:b1:
e5:fd:3f:18:65:cf:86:07:7a:e9:e4:bd:a2:88:fa:
ab:24:c6:01:29:19:dc:b9:c9:ed:aa:02:bc:c1:f7:
73:4e:0c:16:6e:42:cc:b7:16:9f:ea:dc:a4:0c:86:
c1:6a:a7:5b:30:fc:ad:05:ca:99:07:a3:e4:6c:b9:
a6:6d:a0:d5:17:3c:64:66:b3:90:db:6d:02:c2:0f:
6c:3e:00:55:0b:7b:5e:ea:5b:56:48:e2:44:a9:2d:
3e:f0:34:e1:97:86:bc:cb:07:9f:b7:40:80:1d:99:
75:00:2d:1e:13:61:90:57:b7:43:39:2e:e5:c1:21:
84:5d:84:93:5e:77:fa:91:b7:17:21:9e:ec:88:95:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:02:6A:3B:A9:35:66:CF:9F:C1:FA:47:6F:86:5B:E5:AF:70:BE:A0
X509v3 Authority Key Identifier:
keyid:11:18:7D:C1:8B:FA:8B:2A:28:AA:49:D1:0D:A6:D5:4C:08:31:46:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERh9wYv6iyooqknRDabVTAgxRkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3bf367-0033-4b8a-af23-2064effff6ca/1/ERh9wYv6iyooqknRDabVTAgxRkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:95:a8:39:86:e1:9a:05:1e:8a:38:94:ef:2a:1d:c6:3f:
58:db:21:09:80:ef:af:4b:6e:34:56:5f:34:f6:bb:12:6e:60:
4a:5e:a3:c4:5e:bc:19:23:14:5f:40:3d:aa:a4:c4:64:07:ae:
57:08:2f:9d:0f:55:e2:44:91:58:b6:a7:a2:82:04:7d:bf:89:
0c:b1:2f:92:b2:77:ce:46:c6:04:6d:56:68:79:32:7c:d6:07:
2c:30:f1:b9:85:17:65:7a:e3:6e:83:62:ab:17:fc:0f:fc:83:
9b:d9:a6:06:8f:e6:7d:12:a9:d5:e1:b6:da:4e:51:43:6a:24:
92:56:19:21:52:b4:7a:a9:85:07:94:14:04:1a:70:0f:56:89:
de:af:c7:67:37:5f:ce:de:1b:79:a6:64:cd:7e:f9:f9:f8:cc:
b4:8f:f1:86:78:22:33:5e:27:de:c1:74:83:af:46:14:ea:c8:
69:f4:e8:c7:82:9a:b7:98:81:2b:10:25:ba:33:4a:28:32:65:
51:db:6e:03:3e:95:04:8e:53:48:64:d6:63:68:3b:53:23:71:
04:2a:23:ca:d2:09:69:21:28:15:b1:8c:d2:41:d6:49:43:5c:
fe:8b:d1:6f:29:7b:f9:f7:ac:b8:bc:68:4a:90:5e:a5:2f:15:
cb:27:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:15:28 2025 by rpki-client