Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/3DMmhgZVVd_lUFrdUiapz5SCh5o.mft
File: 3DMmhgZVVd_lUFrdUiapz5SCh5o.mft (raw, json)
Hash identifier: pBCBiF27IXDs22BitebG/QvXWuupi+WNiVjPad1rYrg=
Subject key identifier: 9A:7F:A7:8F:E0:E8:30:B5:EB:21:53:A6:1A:25:97:7F:F9:A7:47:93
Authority key identifier: DC:33:26:86:06:55:55:DF:E5:50:5A:DD:52:26:A9:CF:94:82:87:9A
Certificate issuer: /CN=dc332686065555dfe5505add5226a9cf9482879a
Certificate serial: 018C1FACBAA3E77F453440F87F34259E6E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DMmhgZVVd_lUFrdUiapz5SCh5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/3DMmhgZVVd_lUFrdUiapz5SCh5o.mft
Manifest number: 085B
Signing time: Thu 30 Nov 2023 10:01:02 +0000
Manifest this update: Thu 30 Nov 2023 10:01:02 +0000
Manifest next update: Fri 01 Dec 2023 10:01:02 +0000
Files and hashes: 1: 3DMmhgZVVd_lUFrdUiapz5SCh5o.crl (hash: C7klWiAbRRAzav/7HOfjghivS5nSig8pzb/WNjMmTD4=)
2: JcsJunOxd3RwoEV7hDVLrDTAGwE.roa (hash: Com7iBDcZkLBlAj8eJKXdaJxT3e/1eiFGfVA11PU4w0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:ac:ba:a3:e7:7f:45:34:40:f8:7f:34:25:9e:6e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc332686065555dfe5505add5226a9cf9482879a
Validity
Not Before: Nov 30 10:01:02 2023 GMT
Not After : Dec 1 10:01:02 2023 GMT
Subject: CN=9a7fa78fe0e830b5eb2153a61a25977ff9a74793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:88:2f:ca:9f:ac:ab:77:c7:3a:db:23:34:
9d:9d:9e:14:92:3c:05:62:4c:6e:6a:52:03:5a:a8:
8d:df:d3:5c:79:7b:97:20:61:e4:99:b5:a5:92:9a:
7c:10:3d:27:1e:83:5b:c2:5a:06:c9:7e:bc:d3:41:
2f:73:bb:8a:5d:10:ee:6f:17:7c:66:2c:88:8c:9a:
7e:c4:90:e4:91:fc:22:52:ec:b7:84:49:af:63:74:
1a:7a:1b:79:26:16:29:76:a2:c7:e2:09:f1:26:80:
41:f1:40:35:86:79:62:ac:42:95:91:23:fb:01:56:
7c:24:84:a6:95:47:54:72:c7:26:ac:d1:18:c4:49:
86:9a:e1:22:7e:b8:57:48:4b:e6:58:07:63:67:dd:
68:b3:a6:21:9e:42:90:a3:4a:b9:78:1b:8c:6d:ed:
98:a3:20:e5:a9:11:f5:8e:49:9c:d9:85:e3:66:be:
52:85:68:61:f5:22:9a:5b:bb:49:c1:ae:94:a0:f7:
34:34:23:b6:b3:6e:44:ca:b5:32:6e:fd:9b:de:d2:
10:6e:ab:95:87:75:fd:25:7e:d6:3c:5b:6e:e0:cd:
d2:d1:e1:3a:14:73:12:ba:47:20:5e:20:b6:cd:05:
e9:79:d7:49:17:4d:18:9b:89:dc:46:02:56:d6:fc:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:A7:8F:E0:E8:30:B5:EB:21:53:A6:1A:25:97:7F:F9:A7:47:93
X509v3 Authority Key Identifier:
keyid:DC:33:26:86:06:55:55:DF:E5:50:5A:DD:52:26:A9:CF:94:82:87:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DMmhgZVVd_lUFrdUiapz5SCh5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/3DMmhgZVVd_lUFrdUiapz5SCh5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e568c9-d47f-4f2c-a8c1-217dee947312/1/3DMmhgZVVd_lUFrdUiapz5SCh5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:52:26:d7:a9:c6:20:39:56:11:c2:21:76:dd:12:ec:1b:8e:
d7:55:9e:06:10:e0:ae:c0:86:60:af:54:eb:a8:e7:95:09:26:
b7:f0:b2:57:f5:46:84:ac:16:2d:c9:b8:60:9d:a2:5a:7d:61:
58:84:fb:66:44:13:0a:f2:8d:33:d6:2e:ae:06:1a:28:c7:1d:
ff:bf:3f:b1:72:fb:73:bf:50:fd:ba:2c:cc:b9:6a:88:59:dc:
5a:4d:94:0d:45:3d:9b:fe:9a:fc:e6:4c:cc:17:4c:2f:90:e6:
8d:a5:1c:4e:fa:6d:a1:3d:ad:4b:c0:e4:aa:c8:2a:2c:c9:e0:
d8:04:ea:92:43:54:18:ec:e2:eb:7a:16:b1:e7:94:df:da:46:
76:22:0e:9c:ac:c8:3d:ac:a3:71:d4:a6:18:0d:fb:12:22:e7:
b6:b5:e8:2a:96:ad:81:2c:b6:4c:d0:d3:30:bb:64:21:b3:70:
2d:82:75:91:df:71:5c:16:20:8d:32:28:98:9f:a7:40:5e:5b:
b4:d7:fa:6d:82:60:df:37:0c:e3:3f:93:d0:57:00:ad:9d:37:
5c:c0:a1:46:2f:f8:7b:ed:12:4b:82:15:b9:96:72:27:53:b8:
d5:ff:6a:39:78:14:ec:ea:d9:bb:80:f9:e2:83:d3:c2:00:bb:
aa:52:03:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:11 2025 by rpki-client