Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
File: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft (raw, json)
Hash identifier: /vWrMjOu+YW97KoqZWgx1EP+LjS9puYHBtdWYV2YCAM=
Subject key identifier: 4A:9E:D3:C3:AF:3C:FF:38:A6:24:8C:17:D5:78:8E:45:FF:14:0B:06
Authority key identifier: 23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
Certificate issuer: /CN=237aff0df48083c7e21d794ab147bb9711141244
Certificate serial: 01972E28B53E65D7BF9FE2C837DAED895F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
Manifest number: 097F
Signing time: Mon 02 Jun 2025 01:01:49 +0000
Manifest this update: Mon 02 Jun 2025 01:01:49 +0000
Manifest next update: Tue 03 Jun 2025 01:01:49 +0000
Files and hashes: 1: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl (hash: aQVh648zlgGonWa+3y+S8y9+e/yA2C4WVjr73SpfxwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2e:28:b5:3e:65:d7:bf:9f:e2:c8:37:da:ed:89:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237aff0df48083c7e21d794ab147bb9711141244
Validity
Not Before: Jun 2 01:01:49 2025 GMT
Not After : Jun 3 01:01:49 2025 GMT
Subject: CN=4a9ed3c3af3cff38a6248c17d5788e45ff140b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:ae:91:b2:85:73:ed:76:54:c4:98:78:ea:
ac:bc:7e:59:86:18:7a:d4:4a:da:45:9d:13:52:6e:
f6:87:94:87:b5:61:a9:6f:b9:5a:6e:ad:68:21:b0:
7f:5a:5f:2e:af:c0:62:a9:18:69:cd:10:a4:5e:7f:
43:23:7a:d2:d6:42:df:0f:a9:53:6e:e7:ec:97:4d:
eb:87:9e:0c:65:22:01:26:41:c7:f0:a0:60:72:f1:
dc:22:96:2d:4b:35:27:0e:10:64:65:32:54:ae:a0:
e1:d5:aa:70:35:12:42:21:6f:55:e5:76:0d:87:d0:
98:1b:6b:6a:40:e9:76:1c:0e:f9:8d:1c:8e:81:2b:
4f:89:df:d7:9f:75:bb:4a:a5:9e:24:0e:35:53:c0:
11:90:ad:4c:18:e8:0b:ee:e4:3c:cd:28:06:2f:0f:
3b:02:74:62:35:f8:4f:3b:12:89:47:d2:f4:28:5e:
ca:07:f7:0b:77:44:0a:b2:aa:d5:61:02:ab:9a:4e:
8c:38:84:e9:50:53:93:c7:15:6b:2f:62:a4:8c:f3:
6d:e6:35:d5:dd:0f:61:84:ea:d4:6b:97:e0:5b:5f:
89:f6:6c:f3:b4:bd:02:4a:f8:fa:b9:09:e4:d8:21:
52:22:45:45:ed:57:f4:71:1d:a2:c5:e9:e7:b1:7f:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:D3:C3:AF:3C:FF:38:A6:24:8C:17:D5:78:8E:45:FF:14:0B:06
X509v3 Authority Key Identifier:
keyid:23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:db:d5:48:36:f8:64:fc:f7:b5:7a:7e:40:e4:e2:30:06:b9:
65:66:df:09:2a:8b:fa:d2:45:b2:7f:de:b6:f1:61:b7:b1:22:
71:fb:21:0b:dd:8a:0a:94:0d:f7:c2:fb:b6:b2:69:b7:94:63:
60:73:72:4d:ac:0b:b9:34:29:72:fe:d1:86:e2:95:bb:03:f8:
9e:5e:3e:27:76:90:32:f4:2b:1a:01:f4:00:4d:bc:34:ec:8a:
df:c2:34:9c:5d:a2:b8:4f:a6:c3:59:36:f3:85:a6:68:bd:82:
b8:3d:a9:89:bc:ad:d0:a0:da:7f:74:c8:65:5c:6d:13:5e:78:
64:a4:c2:c1:8f:69:39:eb:1b:f2:2c:65:45:5a:d8:4e:74:e7:
aa:ef:87:07:78:f8:7e:b4:19:22:b8:f7:4f:f7:ae:f3:d8:74:
56:3d:df:d3:91:3c:b6:86:c6:b3:49:e2:27:19:dc:aa:e3:a2:
ee:d8:df:fb:7b:a3:50:78:51:d5:60:22:b2:61:59:99:d7:b8:
d7:4f:17:ca:60:d9:a7:9d:4a:5b:9b:68:c7:94:01:29:f4:26:
f3:8a:de:52:8a:cf:98:bd:5d:6a:08:fe:68:ff:05:34:a1:46:
b7:43:8b:8a:2b:1e:a2:dd:da:24:0b:93:c4:41:4f:2b:8e:fd:
56:c2:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:15:42 2025 by rpki-client