Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.mft
File: 3Nuge59wvV7OGwI16izIytYS7cI.mft (raw, json)
Hash identifier: xvCUf6TOhE6mtS449vha1wNjuMujeM4MvBbF80xiopI=
Subject key identifier: A3:F6:A1:CC:B8:C5:D6:EF:5F:94:A1:37:39:06:25:39:3F:8D:D2:8D
Authority key identifier: DC:DB:A0:7B:9F:70:BD:5E:CE:1B:02:35:EA:2C:C8:CA:D6:12:ED:C2
Certificate issuer: /CN=dcdba07b9f70bd5ece1b0235ea2cc8cad612edc2
Certificate serial: 018F2D974AE00A776A37800DC2E51E02B050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Nuge59wvV7OGwI16izIytYS7cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.mft
Manifest number: 1088
Signing time: Tue 30 Apr 2024 06:00:40 +0000
Manifest this update: Tue 30 Apr 2024 06:00:40 +0000
Manifest next update: Wed 01 May 2024 06:00:40 +0000
Files and hashes: 1: 1COTyKQo3hdhvLiMU4WcrbCNaAw.roa (hash: GQRxnMIDQNWvybE0RqU/hS3HSz689Ao7kjlT7htki+0=)
2: 3Nuge59wvV7OGwI16izIytYS7cI.crl (hash: GZ1f2yWWDbcOhZp17FhiVf4ayLwd6TDksTVAmk8iSVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:97:4a:e0:0a:77:6a:37:80:0d:c2:e5:1e:02:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcdba07b9f70bd5ece1b0235ea2cc8cad612edc2
Validity
Not Before: Apr 30 06:00:40 2024 GMT
Not After : May 1 06:00:40 2024 GMT
Subject: CN=a3f6a1ccb8c5d6ef5f94a137390625393f8dd28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:fe:13:fb:7a:5b:9a:56:a1:bf:4e:d7:40:
08:c8:0c:54:a1:fd:69:3e:22:0b:dd:36:7c:44:24:
b3:4f:27:1f:0a:47:d0:14:c0:b1:14:9d:48:b4:71:
d0:1c:b9:a8:a4:93:0b:48:37:cb:0e:00:7e:d9:97:
1e:20:ed:e8:3a:8f:b7:81:0a:34:7d:c6:90:e2:80:
04:16:6a:fb:9a:8d:1f:f3:1c:e8:bf:6e:d3:fc:02:
20:c9:0c:e4:f6:fd:c7:2b:d1:25:96:2a:8a:e8:d6:
7d:4b:b6:a0:73:ed:0b:ef:1e:e9:e1:5d:0e:e9:9f:
f0:c4:99:c1:1a:fa:e0:ad:5a:74:90:3a:3d:4f:67:
52:a1:90:98:d0:27:2e:b0:35:ba:ee:ed:4a:78:18:
a8:1d:3a:33:21:e8:18:a0:26:8a:da:2f:6e:ef:4c:
af:7e:62:f7:96:f3:df:b7:86:d9:aa:8b:31:aa:0d:
f8:32:44:91:dd:f8:92:70:a9:96:6c:e4:c6:64:37:
88:b6:51:d1:be:59:d2:36:5b:52:61:e0:79:b6:28:
02:68:ff:4f:1e:e5:f4:16:32:5d:88:fa:f5:ac:a2:
65:e5:ad:29:cf:c2:94:f2:b0:aa:cd:c9:eb:dd:c3:
5f:c5:4d:aa:a5:d6:f5:48:7f:e0:42:3f:8a:c0:68:
d1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:A1:CC:B8:C5:D6:EF:5F:94:A1:37:39:06:25:39:3F:8D:D2:8D
X509v3 Authority Key Identifier:
keyid:DC:DB:A0:7B:9F:70:BD:5E:CE:1B:02:35:EA:2C:C8:CA:D6:12:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Nuge59wvV7OGwI16izIytYS7cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/13abc4-d137-4890-9c3c-a4b7e3483919/1/3Nuge59wvV7OGwI16izIytYS7cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:0f:2a:7e:a1:45:f7:b8:ff:73:58:6f:76:d0:58:11:55:74:
24:87:85:95:65:dd:3f:41:3a:59:3f:57:6d:32:2c:17:f8:17:
84:92:bc:57:12:d7:52:72:a4:e8:fe:4d:05:2f:ae:ad:66:d5:
c9:8a:04:3f:0d:5a:b5:74:b1:ef:84:6e:a1:50:55:9a:f9:eb:
53:0e:bd:81:3b:34:24:07:ba:20:5e:e6:03:89:4f:0a:64:1b:
a5:5c:96:a6:82:27:d2:bc:70:fa:7d:e0:7a:01:c4:91:63:6f:
84:73:65:6a:8e:54:fa:b9:a4:b2:9d:b6:73:6e:25:4e:b7:2e:
d1:1c:16:21:ad:8c:cb:77:fb:fe:46:a1:30:f4:18:3f:8f:1f:
04:64:82:cc:3a:b1:96:f0:a8:0a:67:b9:c5:a7:34:47:34:14:
c1:1d:0f:c6:90:b2:5b:27:48:79:73:72:e0:d2:da:a0:e4:31:
eb:80:20:3d:ce:87:b2:92:49:10:07:5e:b3:d8:6d:ff:e4:bd:
5a:27:2c:03:f3:60:5e:c9:77:bf:65:d6:2b:4e:de:ec:85:91:
13:60:ff:02:ea:cc:a0:f4:87:a5:8f:38:27:f2:2e:36:3c:c2:
ba:db:88:85:c2:ce:0b:12:ba:dd:bc:b1:ab:14:ac:c7:58:3c:
ed:99:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:54:57 2025 by rpki-client