Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/s9JZXuhhEmqHpyA3gsX1ngImHoE.mft
File: s9JZXuhhEmqHpyA3gsX1ngImHoE.mft (raw, json)
Hash identifier: 0YcQOxnRk2vEWB/8hfi+jrkw1amrKhXQ/1UNzuS1+sc=
Subject key identifier: 80:66:BA:47:29:7D:92:B5:A1:4E:E6:6A:0E:AA:24:6D:20:DE:64:48
Authority key identifier: B3:D2:59:5E:E8:61:12:6A:87:A7:20:37:82:C5:F5:9E:02:26:1E:81
Certificate issuer: /CN=b3d2595ee861126a87a7203782c5f59e02261e81
Certificate serial: 018D8D5168E7C399BE48BD304A1A21D4836F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9JZXuhhEmqHpyA3gsX1ngImHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/s9JZXuhhEmqHpyA3gsX1ngImHoE.mft
Manifest number: 0864
Signing time: Fri 09 Feb 2024 10:02:19 +0000
Manifest this update: Fri 09 Feb 2024 10:02:19 +0000
Manifest next update: Sat 10 Feb 2024 10:02:19 +0000
Files and hashes: 1: _bJAKFt7trR_sF0NBTnHkKbEGbc.roa (hash: s3uXp/Aa+61nG1lpsBkj9ICAA/ib1f4CeUC0hAWFwvQ=)
2: s9JZXuhhEmqHpyA3gsX1ngImHoE.crl (hash: 4PnMoIoCgJx2da8CvsXbfXJ3Xb4QmDkHJGaR8UQqddk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:51:68:e7:c3:99:be:48:bd:30:4a:1a:21:d4:83:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d2595ee861126a87a7203782c5f59e02261e81
Validity
Not Before: Feb 9 10:02:19 2024 GMT
Not After : Feb 10 10:02:19 2024 GMT
Subject: CN=8066ba47297d92b5a14ee66a0eaa246d20de6448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:7a:3e:84:e5:b8:37:88:66:db:dd:4e:2d:
bb:8d:af:42:4b:b6:a3:09:03:1e:76:c6:0f:67:2c:
70:76:58:4a:96:3f:72:7d:04:b5:41:dc:db:f0:ce:
84:81:16:5e:e4:cd:ea:f2:d6:9b:46:9f:5f:2e:bf:
b2:45:bc:74:2c:46:12:af:7a:21:53:67:02:20:df:
fc:5a:03:c8:b7:9a:49:c3:99:3d:ef:f2:08:31:3a:
14:9c:44:c2:d7:e5:b4:79:e9:4c:af:af:d2:5b:9a:
20:3c:ce:c3:fa:48:92:75:c8:9f:d1:fd:bc:94:cb:
80:b5:be:bf:0e:80:7d:26:00:98:af:fc:00:5a:76:
98:d4:74:5a:95:52:17:58:fc:5a:e6:1d:c9:49:36:
bd:3c:82:c0:55:bc:21:4d:bb:2a:86:29:ff:0b:fb:
3c:4b:38:d9:06:57:96:f9:f8:f5:ce:26:ec:32:8e:
d3:0a:d5:91:0d:af:1d:bf:fe:4d:4f:45:c6:2e:d5:
68:96:f9:26:00:30:32:3e:8f:89:3e:da:9c:47:a1:
d4:2b:d2:85:26:cf:49:9e:c8:36:62:ab:2d:d0:61:
be:80:80:8b:7d:b1:4f:fe:89:d2:97:76:a1:d7:2f:
fb:e7:4c:4b:39:f9:c1:d3:9f:28:23:71:7c:a7:9c:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:66:BA:47:29:7D:92:B5:A1:4E:E6:6A:0E:AA:24:6D:20:DE:64:48
X509v3 Authority Key Identifier:
keyid:B3:D2:59:5E:E8:61:12:6A:87:A7:20:37:82:C5:F5:9E:02:26:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9JZXuhhEmqHpyA3gsX1ngImHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/s9JZXuhhEmqHpyA3gsX1ngImHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/s9JZXuhhEmqHpyA3gsX1ngImHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b6:9b:75:04:0c:26:ec:4b:e1:7a:6c:30:a5:84:51:2c:6b:
57:45:7a:56:7f:42:03:b0:0e:f7:bd:cb:79:e8:e5:c5:10:33:
ac:e6:99:ff:14:c4:f4:17:eb:c1:6f:58:c2:f3:10:50:6e:4f:
fa:10:32:a0:8e:1c:fa:83:69:a9:e8:da:7f:59:e7:0e:59:14:
0e:a0:0b:94:f9:45:5f:ce:64:e4:43:1d:7d:41:64:b9:e1:03:
f4:9f:76:e5:1b:79:95:f1:89:ed:78:5f:01:77:47:32:06:c2:
e5:bb:1c:8e:43:52:67:b7:84:4c:42:e0:30:04:f9:05:c8:2a:
9b:a2:f4:cd:cf:b2:09:d5:24:94:54:ca:e0:8e:bf:9d:eb:33:
29:a3:4d:15:41:c4:50:32:81:36:dc:40:fa:ae:b6:df:9e:3c:
88:35:f6:95:65:25:2d:d5:aa:80:a5:63:6e:35:2b:b0:1a:49:
51:1b:4c:e1:0d:dc:cd:b6:41:34:1a:95:88:03:1a:d7:cb:9d:
5f:27:44:ba:4e:86:11:ff:fd:fc:6d:12:be:a7:92:28:39:6f:
1b:45:cd:5f:36:12:8d:ef:b9:c2:b4:0f:70:a1:8d:b6:79:a5:
70:15:6b:0f:e3:a9:17:7d:fc:82:6c:36:6e:19:34:66:a4:54:
28:31:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:24:45 2025 by rpki-client