Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/571458-ff34-407b-bed1-29976ab2b6a9/1/3rchq9X-JYFnJyE6ilXxnACdulU.mft
File: 3rchq9X-JYFnJyE6ilXxnACdulU.mft (raw, json)
Hash identifier: Cr0ACb9JDCAE4m4ulMqtY6TIqaFlZnQUHO7rS17iK20=
Subject key identifier: 75:02:61:7A:6E:83:44:52:9B:49:F5:1D:4C:1E:CF:B3:A7:E9:90:61
Authority key identifier: DE:B7:21:AB:D5:FE:25:81:67:27:21:3A:8A:55:F1:9C:00:9D:BA:55
Certificate issuer: /CN=deb721abd5fe25816727213a8a55f19c009dba55
Certificate serial: 0183E573468754E94A9DAE77C96F3FA39662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rchq9X-JYFnJyE6ilXxnACdulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/571458-ff34-407b-bed1-29976ab2b6a9/1/3rchq9X-JYFnJyE6ilXxnACdulU.mft
Manifest number: 0307
Signing time: Mon 17 Oct 2022 10:18:00 +0000
Manifest this update: Mon 17 Oct 2022 10:18:00 +0000
Manifest next update: Tue 18 Oct 2022 10:18:00 +0000
Files and hashes: 1: 3rchq9X-JYFnJyE6ilXxnACdulU.crl (hash: J84wSXq8aP/6Ez5pNfClrFY27C66VpK+n0sBx1IKgto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:73:46:87:54:e9:4a:9d:ae:77:c9:6f:3f:a3:96:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb721abd5fe25816727213a8a55f19c009dba55
Validity
Not Before: Oct 17 10:18:00 2022 GMT
Not After : Oct 18 10:18:00 2022 GMT
Subject: CN=7502617a6e8344529b49f51d4c1ecfb3a7e99061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:41:27:7b:c1:0d:8e:22:cd:4b:a1:d0:95:eb:
4c:87:2c:c2:f0:62:c3:06:2f:f7:60:09:fb:56:1f:
ce:77:23:cf:d9:4a:2f:62:69:eb:00:f6:db:46:1f:
b2:c1:aa:3b:95:10:e5:3f:8a:89:c1:73:52:a5:33:
fb:e6:01:3f:af:44:28:be:0a:b6:2e:7f:77:d3:d8:
ea:e4:fc:ec:99:be:14:c3:4d:d5:cf:04:15:1e:3c:
8e:39:14:64:26:23:d6:75:d6:84:47:ff:a5:ab:32:
f6:06:15:a0:1a:e1:d0:c0:ec:fb:01:d9:ab:fd:7a:
21:c9:1b:e9:b1:74:c4:ef:11:f4:a8:5a:58:be:12:
f9:6b:e1:e7:3c:6f:9c:c6:df:8c:33:36:2a:5c:ec:
f4:f0:ba:17:77:c0:e3:49:49:a8:9c:58:46:87:77:
28:0f:11:20:1c:fc:3f:a9:9e:15:d0:c3:5c:fb:af:
50:64:76:c6:5a:02:58:3a:d6:a8:d4:0d:aa:40:48:
e3:4b:45:79:79:73:7b:6b:36:bd:22:4b:2e:ef:7a:
10:ad:65:01:ec:0f:96:6b:79:22:0a:f5:db:0d:9b:
6f:eb:c3:16:2a:c9:42:43:d4:a2:41:48:63:6c:d9:
00:dc:75:33:ca:40:30:13:7b:e6:ea:a1:5a:96:f7:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:02:61:7A:6E:83:44:52:9B:49:F5:1D:4C:1E:CF:B3:A7:E9:90:61
X509v3 Authority Key Identifier:
keyid:DE:B7:21:AB:D5:FE:25:81:67:27:21:3A:8A:55:F1:9C:00:9D:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rchq9X-JYFnJyE6ilXxnACdulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/571458-ff34-407b-bed1-29976ab2b6a9/1/3rchq9X-JYFnJyE6ilXxnACdulU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/571458-ff34-407b-bed1-29976ab2b6a9/1/3rchq9X-JYFnJyE6ilXxnACdulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2d:09:85:ae:dc:bf:60:d8:45:1b:f7:d1:c5:49:3a:9e:58:
e7:00:d9:18:94:b2:f8:e2:05:bb:f1:00:30:ef:fd:36:27:2d:
9a:da:02:da:59:ee:10:83:76:e8:58:b1:11:4b:9b:59:76:45:
fb:26:92:0e:bf:81:a4:bb:29:6e:d2:a2:13:c0:07:02:b9:bf:
25:59:d6:31:ee:ef:b8:4f:7d:e1:3f:b0:86:62:e1:70:6c:2c:
47:7a:88:b7:25:b5:d8:b1:6e:b1:1a:45:70:ba:86:a3:50:5f:
ed:05:f6:61:f0:60:3e:ab:b9:7a:79:32:8a:7b:73:cd:7a:c9:
24:d4:23:4a:67:0a:b4:fb:50:12:27:22:be:68:72:2a:46:57:
00:70:04:0b:fb:f7:33:8e:da:ef:77:ae:d0:10:43:30:4b:ca:
fb:f6:c8:13:7b:d9:6b:cb:53:f9:a9:45:b7:95:f4:f4:18:d3:
ca:77:66:64:cf:72:ad:1d:f6:3c:e9:4f:95:e9:ab:33:23:d9:
7d:d4:14:2f:c1:34:77:a7:01:66:bc:b7:48:83:73:01:9c:2b:
b3:bb:57:8f:f0:5e:73:3f:9f:d9:ec:ab:69:8a:af:dc:09:b0:
e4:4b:cc:69:ca:95:e0:58:b8:b9:d2:a5:99:2e:33:24:0d:d6:
4e:4e:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:27:35 2025 by rpki-client