Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/01e033-d0e1-4179-a524-8c290c53915e/1/3bdTeGq6vZCRzkJWUgruczf638s.mft
File: 3bdTeGq6vZCRzkJWUgruczf638s.mft (raw, json)
Hash identifier: tQjGUy4RzS0Ib0hd38mvAW/jtWvpZHEzuY/jZEereZc=
Subject key identifier: 53:7F:80:C5:EC:93:A1:96:6B:69:91:CB:40:C8:E8:A3:A9:77:EE:E3
Authority key identifier: DD:B7:53:78:6A:BA:BD:90:91:CE:42:56:52:0A:EE:73:37:FA:DF:CB
Certificate issuer: /CN=ddb753786ababd9091ce4256520aee7337fadfcb
Certificate serial: 01863A7E3D6FFDC24EF3E5D570CDE93EDDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bdTeGq6vZCRzkJWUgruczf638s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/01e033-d0e1-4179-a524-8c290c53915e/1/3bdTeGq6vZCRzkJWUgruczf638s.mft
Manifest number: 0115
Signing time: Fri 10 Feb 2023 08:43:17 +0000
Manifest this update: Fri 10 Feb 2023 08:43:17 +0000
Manifest next update: Sat 11 Feb 2023 08:43:17 +0000
Files and hashes: 1: 3bdTeGq6vZCRzkJWUgruczf638s.crl (hash: YEDgrszS/G46LbMd0GfF5fyo/3FpmkxDXOuEifSRNDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:7e:3d:6f:fd:c2:4e:f3:e5:d5:70:cd:e9:3e:dd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb753786ababd9091ce4256520aee7337fadfcb
Validity
Not Before: Feb 10 08:43:17 2023 GMT
Not After : Feb 11 08:43:17 2023 GMT
Subject: CN=537f80c5ec93a1966b6991cb40c8e8a3a977eee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:8a:0a:78:bb:f1:19:03:dd:4a:cd:e5:43:
c4:80:ee:27:d5:e4:0d:e1:53:8c:65:2a:ed:7a:32:
9f:c6:db:04:95:71:9d:48:dc:5a:ac:88:80:9f:f0:
f4:08:6b:00:cf:01:b3:ce:41:e0:2f:a2:29:98:a1:
6d:de:62:e6:87:9b:8f:f9:e1:43:d4:6a:4e:d0:e9:
27:ec:ac:b1:12:a7:08:8d:98:a4:25:92:12:4d:1d:
9d:5d:c4:7a:a6:fe:f6:19:3d:fe:29:2d:e7:51:e0:
21:57:06:69:32:1c:29:5f:55:0f:6c:b1:f0:96:a8:
64:7a:c7:51:eb:c3:0d:7a:8e:93:c9:82:5d:18:ce:
f7:1e:91:13:d5:8f:19:62:d0:4c:9e:31:f7:ec:e5:
d9:86:3b:65:a2:44:a8:76:17:3b:f0:85:1d:63:5e:
1b:c1:ae:cb:d1:77:2d:55:66:7f:a7:10:fa:d7:19:
65:29:8c:94:b2:02:9a:cd:28:d0:83:2a:d4:c5:cd:
3f:3c:ee:41:76:b5:9c:1f:50:9e:17:0f:35:6c:9c:
36:1a:ba:cb:ea:b6:be:e1:80:17:4b:c1:8c:b2:41:
7a:c9:36:d5:18:bc:6d:3f:29:f6:7f:51:29:66:3b:
cf:5d:95:60:d2:64:87:ba:a6:59:67:f2:5e:ac:ba:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7F:80:C5:EC:93:A1:96:6B:69:91:CB:40:C8:E8:A3:A9:77:EE:E3
X509v3 Authority Key Identifier:
keyid:DD:B7:53:78:6A:BA:BD:90:91:CE:42:56:52:0A:EE:73:37:FA:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bdTeGq6vZCRzkJWUgruczf638s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/01e033-d0e1-4179-a524-8c290c53915e/1/3bdTeGq6vZCRzkJWUgruczf638s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/01e033-d0e1-4179-a524-8c290c53915e/1/3bdTeGq6vZCRzkJWUgruczf638s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2d:f0:cf:99:79:6d:14:37:6e:32:ab:cd:ad:c6:2e:57:0a:
e6:f9:33:6b:b6:76:c9:5d:ee:7f:17:8e:bf:75:cc:22:2f:3d:
d7:58:05:74:e3:44:e1:ad:a0:44:a6:9f:b9:e6:f8:66:3a:c5:
52:b8:1e:1c:e8:d3:56:66:81:f0:0b:0d:2f:d2:f9:0e:58:24:
c9:d6:26:48:5f:61:d7:f8:85:aa:a4:d7:61:77:8f:44:9e:4e:
65:90:5b:34:37:55:a8:a8:bf:fc:85:a1:8e:e7:0a:40:95:ba:
cd:7e:54:83:99:33:d8:98:46:8e:64:50:d4:8e:f9:09:4a:5b:
79:a3:28:10:de:94:a6:5b:2e:ff:55:9e:e4:9c:89:a1:b5:5f:
de:87:72:52:5d:51:fd:fd:c4:38:1c:5f:e2:10:54:3d:25:f9:
c0:07:42:bd:9f:82:c4:02:10:cd:bb:ee:9e:e4:e0:53:58:4e:
68:e7:d9:27:50:86:db:83:07:b4:e1:fd:5a:94:50:f7:40:99:
54:b8:22:d2:58:08:66:36:c5:d5:f9:0e:62:02:8b:08:24:6f:
0f:89:43:40:90:f3:12:bb:f9:9b:9b:a7:7a:c9:0a:a8:c7:96:
12:4b:15:5d:e1:df:06:2d:3a:d2:d2:6d:7d:3f:7a:ae:af:bf:
4e:b1:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:47:36 2025 by rpki-client