Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/494af5-1bda-487e-aa6c-d8ea0ca3ce8b/1/3zcH5pR7iJ1CcUsGm5gyD1XY13s.mft
File: 3zcH5pR7iJ1CcUsGm5gyD1XY13s.mft (raw, json)
Hash identifier: A8Hd6cDPH0iB8oPo7AVT0NV5fyxCrPc4gvkKVyYKwz4=
Subject key identifier: AD:C0:A6:23:04:2A:E5:76:E8:C3:E3:60:D4:AC:07:41:37:A4:A6:AB
Authority key identifier: DF:37:07:E6:94:7B:88:9D:42:71:4B:06:9B:98:32:0F:55:D8:D7:7B
Certificate issuer: /CN=df3707e6947b889d42714b069b98320f55d8d77b
Certificate serial: 0189DD87AFF4E4E8EB818222CB44BFB87C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zcH5pR7iJ1CcUsGm5gyD1XY13s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/494af5-1bda-487e-aa6c-d8ea0ca3ce8b/1/3zcH5pR7iJ1CcUsGm5gyD1XY13s.mft
Manifest number: 0604
Signing time: Thu 10 Aug 2023 03:40:04 +0000
Manifest this update: Thu 10 Aug 2023 03:40:04 +0000
Manifest next update: Fri 11 Aug 2023 03:40:04 +0000
Files and hashes: 1: 3zcH5pR7iJ1CcUsGm5gyD1XY13s.crl (hash: ws6xXUfH5qIAzFKQAa7avGQu4iaUYUDnxtxZYOuT3uw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dd:87:af:f4:e4:e8:eb:81:82:22:cb:44:bf:b8:7c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3707e6947b889d42714b069b98320f55d8d77b
Validity
Not Before: Aug 10 03:40:04 2023 GMT
Not After : Aug 11 03:40:04 2023 GMT
Subject: CN=adc0a623042ae576e8c3e360d4ac074137a4a6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:7d:3f:bf:fd:e9:63:e6:3a:58:42:4f:89:
05:54:0f:3f:44:3e:b5:fb:25:08:1f:44:d1:12:5e:
6d:b9:ad:64:6d:8a:f5:e7:da:11:4e:8c:24:e8:64:
17:a1:31:52:66:11:4d:71:a6:f5:34:f6:d1:60:d8:
62:84:c5:7e:fc:e7:1b:50:5b:9f:a9:7c:41:4e:b2:
97:03:69:c1:f3:fa:cc:41:b5:95:75:22:5e:f0:3d:
65:7b:01:fd:42:78:2a:59:ec:80:c8:f9:6a:2b:d4:
d9:06:99:76:f8:ef:ab:fc:67:b4:cc:8f:38:be:7b:
75:8c:48:a4:41:2e:99:20:87:08:ee:36:78:76:86:
81:d1:23:7b:2b:0b:eb:03:b7:80:49:75:02:aa:76:
67:cf:56:ec:a0:a0:7b:59:0b:2f:eb:41:9e:b9:64:
be:c3:96:38:37:70:41:49:bf:f5:3b:a5:53:78:00:
ca:29:2b:22:1c:09:fa:16:d3:2f:14:65:ac:54:b0:
a7:4e:f7:0b:f4:33:15:e4:d8:49:d0:98:f6:5e:a2:
bd:3d:da:0b:eb:0b:95:de:1a:b7:ab:b0:bb:83:60:
76:0a:12:ba:e9:c1:ae:34:ca:bd:f7:0d:50:ef:c7:
31:96:4f:b0:5d:2a:5d:8c:b1:38:2e:86:f2:54:82:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:A6:23:04:2A:E5:76:E8:C3:E3:60:D4:AC:07:41:37:A4:A6:AB
X509v3 Authority Key Identifier:
keyid:DF:37:07:E6:94:7B:88:9D:42:71:4B:06:9B:98:32:0F:55:D8:D7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zcH5pR7iJ1CcUsGm5gyD1XY13s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/494af5-1bda-487e-aa6c-d8ea0ca3ce8b/1/3zcH5pR7iJ1CcUsGm5gyD1XY13s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/494af5-1bda-487e-aa6c-d8ea0ca3ce8b/1/3zcH5pR7iJ1CcUsGm5gyD1XY13s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:08:3c:7b:f8:00:c5:57:40:17:74:e1:ae:02:6a:aa:4a:8e:
d8:48:22:0e:ac:1b:4d:fc:b7:3a:3d:c9:24:5e:c5:67:35:7c:
21:83:cb:12:41:45:43:fd:c7:ba:7a:75:a5:d4:49:b2:8c:ce:
c2:15:b6:b0:87:d9:e6:97:56:46:69:71:3e:1b:7e:10:e1:7a:
45:ed:d3:d8:77:6d:c3:f2:97:51:1d:fe:b0:53:44:24:9c:e2:
44:0e:57:c3:75:db:d9:08:e9:24:0b:58:14:90:e4:69:3e:bc:
e2:ce:41:73:9d:26:db:8a:8d:55:5a:a7:60:c3:b9:8d:ea:86:
7a:86:08:8f:bc:93:50:6f:48:41:65:7a:f4:a9:3c:6a:32:07:
6c:b8:97:74:ed:78:34:b1:46:84:b8:d8:36:c6:ce:ec:15:ab:
ac:32:97:16:3d:5a:b3:69:74:c1:ce:f9:c2:a7:23:18:50:0d:
18:0d:31:c8:23:c7:52:0d:50:37:00:ec:8d:8a:39:04:1e:a7:
34:5b:d2:c0:78:7b:47:1a:f5:95:af:55:6a:67:b5:cc:8e:52:
3b:1c:ac:a4:4c:8c:b4:d6:e1:59:8a:d4:7d:07:87:5b:f8:ac:
66:5b:e6:ad:6b:cb:0e:e7:8e:2a:0f:3d:55:aa:18:48:65:e2:
0f:71:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:23 2025 by rpki-client