Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1f38-07c3-4154-af89-75d4ec96871a/1/Op3YmTGwIUoRZnsb1qqDG65ba4A.mft
File: Op3YmTGwIUoRZnsb1qqDG65ba4A.mft (raw, json)
Hash identifier: 14Hl4gu1YNP8f6GedO+P8Q65xZpGNkwYD1BZDGOIulo=
Subject key identifier: 6C:DB:8A:06:55:92:34:18:52:93:76:CE:10:20:B4:79:58:C7:92:FD
Authority key identifier: 3A:9D:D8:99:31:B0:21:4A:11:66:7B:1B:D6:AA:83:1B:AE:5B:6B:80
Certificate issuer: /CN=3a9dd89931b0214a11667b1bd6aa831bae5b6b80
Certificate serial: 01938BF6F6A0061D7A01A77C2BB00EDAB8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Op3YmTGwIUoRZnsb1qqDG65ba4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1f38-07c3-4154-af89-75d4ec96871a/1/Op3YmTGwIUoRZnsb1qqDG65ba4A.mft
Manifest number: 112F
Signing time: Tue 03 Dec 2024 10:00:38 +0000
Manifest this update: Tue 03 Dec 2024 10:00:38 +0000
Manifest next update: Wed 04 Dec 2024 10:00:38 +0000
Files and hashes: 1: Op3YmTGwIUoRZnsb1qqDG65ba4A.crl (hash: TJ0faj59NPumUSp6vyq+C2vckKbhgwE4Ojb8tuydhbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:f6:f6:a0:06:1d:7a:01:a7:7c:2b:b0:0e:da:b8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a9dd89931b0214a11667b1bd6aa831bae5b6b80
Validity
Not Before: Dec 3 10:00:38 2024 GMT
Not After : Dec 4 10:00:38 2024 GMT
Subject: CN=6cdb8a0655923418529376ce1020b47958c792fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:4e:8c:cc:32:31:a7:e9:48:c0:ad:e8:b8:
fe:17:fb:8c:15:2a:a5:b8:a6:8d:b0:1f:f5:b5:06:
1e:db:59:75:4b:39:a6:34:f1:bc:61:26:d7:dc:ba:
52:4d:35:50:ea:16:6d:64:8a:37:34:6e:04:9f:8f:
b0:0f:56:8e:98:9e:61:f5:16:06:58:b2:6a:af:19:
e2:34:3f:fd:97:34:d4:7d:52:29:e3:0d:4b:00:d4:
a3:81:2a:49:e6:b0:ec:1f:6e:cf:53:1a:b3:8a:83:
80:a9:90:53:62:26:d7:9f:0b:ab:4f:02:5c:88:d7:
d6:b6:3c:f1:7d:90:67:9a:f3:f3:cd:87:3a:63:02:
87:ca:fe:9a:1c:c6:74:d0:00:d2:64:0f:16:e7:e9:
99:61:ce:4e:9e:d5:df:e3:de:3d:f4:2a:dd:c7:ce:
30:5e:ed:d5:65:fa:3d:88:33:7f:cd:b3:d2:d2:5e:
d1:d7:e4:33:4d:bb:3d:0c:ee:11:f7:04:49:0f:8a:
e7:2c:4f:4e:3b:b8:5e:6c:d9:9d:22:ef:53:4e:0b:
00:6c:5d:98:5a:fb:8c:32:ff:c4:ec:51:c3:d1:48:
32:30:90:cf:1f:c2:c0:be:f8:8c:fa:e1:83:8a:64:
81:91:df:72:95:01:ad:49:23:e3:36:a0:dd:3f:6b:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DB:8A:06:55:92:34:18:52:93:76:CE:10:20:B4:79:58:C7:92:FD
X509v3 Authority Key Identifier:
keyid:3A:9D:D8:99:31:B0:21:4A:11:66:7B:1B:D6:AA:83:1B:AE:5B:6B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Op3YmTGwIUoRZnsb1qqDG65ba4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1f38-07c3-4154-af89-75d4ec96871a/1/Op3YmTGwIUoRZnsb1qqDG65ba4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1f38-07c3-4154-af89-75d4ec96871a/1/Op3YmTGwIUoRZnsb1qqDG65ba4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e1:77:0a:99:2d:ad:56:02:5e:5e:77:ee:fb:7a:0d:22:b4:
e9:ff:10:e9:a6:45:a9:b1:74:e7:5d:e0:af:92:df:31:0f:1e:
e3:18:65:e5:9b:8c:a2:b3:69:a3:c1:49:28:bf:9c:43:a7:6e:
ae:10:1e:a2:07:c4:bf:37:ce:34:7b:4d:43:11:2c:ee:7a:4b:
3e:9a:c8:7c:5a:9c:7b:b1:0e:59:b3:41:33:db:64:21:a6:6b:
84:8a:5a:7f:4e:8c:a2:e1:94:83:35:c9:a1:be:5f:0e:6b:8a:
de:04:fe:e8:da:0d:2a:a0:dd:79:c8:5c:11:cd:9c:d4:ce:8d:
cd:ed:11:d7:15:31:10:d3:20:76:27:dd:57:2e:ce:90:c7:42:
41:12:35:fb:48:16:d0:35:23:c9:34:3b:c3:24:15:aa:a9:be:
b3:e0:a0:fc:ab:e5:dd:84:a7:16:c9:4e:bc:74:f8:bb:0b:42:
58:e9:6d:fc:83:fc:38:5c:cf:f6:d1:f1:98:b5:94:16:ab:ec:
c8:a0:33:b0:07:dd:9a:42:02:37:11:5c:4f:57:db:e4:a0:97:
13:73:4c:07:dd:47:cf:40:59:c9:d3:77:51:d3:ec:00:34:4f:
48:ba:0e:aa:44:f5:23:3e:8a:2f:9f:01:24:c2:86:76:0d:f9:
3d:0d:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:32:20 2025 by rpki-client