Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.mft
File: isKQYMVdB0oL8iDbSUoexJJHFdI.mft (raw, json)
Hash identifier: FX0E9edhUBgP5Tra9NnaypwpflypfG8ZlqmNgAalftE=
Subject key identifier: 83:94:7D:8D:F6:38:29:21:3C:16:C9:5E:75:8A:15:87:D1:4B:F0:B2
Authority key identifier: 8A:C2:90:60:C5:5D:07:4A:0B:F2:20:DB:49:4A:1E:C4:92:47:15:D2
Certificate issuer: /CN=8ac29060c55d074a0bf220db494a1ec4924715d2
Certificate serial: 018B13AB9882392FCEA9D32FA447AB51851A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isKQYMVdB0oL8iDbSUoexJJHFdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.mft
Manifest number: 088A
Signing time: Mon 09 Oct 2023 09:01:33 +0000
Manifest this update: Mon 09 Oct 2023 09:01:33 +0000
Manifest next update: Tue 10 Oct 2023 09:01:33 +0000
Files and hashes: 1: 93gLrAxkNJ7FcwnAxp5py-9l6nM.roa (hash: 94eR+/7aQDSjO4TQX0lxVJNoiVqmrbMoQxSmlynyU0Y=)
2: isKQYMVdB0oL8iDbSUoexJJHFdI.crl (hash: ZSInNEB+lTAyUuokrlMwhG/nz4vM2CfH/x11CUPQzgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:ab:98:82:39:2f:ce:a9:d3:2f:a4:47:ab:51:85:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac29060c55d074a0bf220db494a1ec4924715d2
Validity
Not Before: Oct 9 09:01:33 2023 GMT
Not After : Oct 10 09:01:33 2023 GMT
Subject: CN=83947d8df63829213c16c95e758a1587d14bf0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:e0:e0:1a:75:6d:23:02:d5:e8:45:10:97:
0b:a1:e7:07:05:ee:e0:07:06:e5:12:a0:e6:13:e7:
fb:d0:86:4c:81:75:cc:e8:11:c5:53:ce:53:36:24:
e4:64:7a:72:8a:ed:dc:37:27:61:87:93:79:82:9c:
3f:76:68:3f:3d:a3:d4:70:8b:68:72:e4:8f:2d:9d:
8f:38:17:83:55:5d:bb:e5:23:92:33:41:2e:df:ba:
e2:18:ec:85:fa:a5:4d:fc:f5:94:5c:a7:d6:55:76:
26:64:11:b0:84:1c:34:c2:5a:31:67:38:d7:17:58:
fb:34:72:b2:75:fc:a1:d6:26:ba:4d:b0:e5:52:ef:
28:15:2c:bc:6d:cc:1a:8b:cb:6f:ab:de:2d:2e:fd:
11:ef:8b:bf:e0:55:fa:62:15:dd:81:7b:7b:e8:01:
a8:2b:93:1d:dc:e7:dd:ba:1b:92:db:6a:05:26:e4:
d9:da:85:18:fb:e1:c0:a6:14:c8:f7:fc:ce:a7:0c:
6b:9f:21:ba:28:1a:67:e8:4e:69:c4:2e:5e:2e:0d:
87:2e:8f:4b:12:e3:21:6d:9d:6a:fe:a0:e4:2b:3b:
44:64:f4:65:c6:0f:00:cd:16:c5:2a:ef:e8:18:2a:
50:fe:bc:ae:6d:cb:53:94:4e:4c:0d:91:1d:36:30:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:94:7D:8D:F6:38:29:21:3C:16:C9:5E:75:8A:15:87:D1:4B:F0:B2
X509v3 Authority Key Identifier:
keyid:8A:C2:90:60:C5:5D:07:4A:0B:F2:20:DB:49:4A:1E:C4:92:47:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isKQYMVdB0oL8iDbSUoexJJHFdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ea:f3:34:46:ab:e6:62:51:fa:0c:b1:28:de:a6:dc:57:04:
d4:16:52:6e:13:6c:57:04:87:de:f1:7d:4c:13:7f:84:cd:9e:
9b:6d:10:8a:a3:d0:c8:98:67:cc:8c:26:67:91:23:c9:9e:58:
f6:30:50:68:79:9b:5f:02:8b:cf:23:94:cd:46:26:be:b8:c8:
1e:1f:91:42:f9:da:0b:5b:79:60:65:98:2f:bc:da:ed:ec:ec:
42:18:ee:68:88:08:e2:59:a8:dc:8e:2f:de:9f:d6:8b:12:9d:
d6:87:e8:08:65:8d:08:79:cc:9d:4b:ea:56:88:9d:90:e9:5d:
2d:42:95:e9:96:66:ec:bb:de:62:69:bf:4a:1b:20:25:7d:21:
b2:9a:43:7b:17:de:2e:4e:6d:cb:b0:b5:19:70:d4:5e:ad:b1:
a5:cc:1c:1f:17:51:e8:b1:c7:31:da:bc:5a:c9:40:f5:05:3c:
80:af:1c:c0:87:c1:ac:18:02:29:54:6a:5f:89:76:03:12:c5:
07:d8:9e:e1:47:75:dd:96:9c:69:8e:cb:eb:1b:40:e2:1b:b0:
23:2b:17:0b:6c:a4:8e:bc:33:45:e6:1a:a1:2e:e2:1b:51:f2:
7b:7b:74:17:d7:f4:8f:6f:79:72:99:38:f8:58:91:b5:f7:e0:
18:96:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:06:46 2025 by rpki-client