Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.mft
File: 3zH46yVAPX_-SGsKE4M1BgEhqPY.mft (raw, json)
Hash identifier: yYcEQjn97QFVA+63T0PMGvHQeVQ+iEYYCc6NrB7sxE8=
Subject key identifier: 18:C8:43:53:52:AE:B6:76:01:83:66:CD:7E:E3:6E:84:1C:45:EC:14
Authority key identifier: DF:31:F8:EB:25:40:3D:7F:FE:48:6B:0A:13:83:35:06:01:21:A8:F6
Certificate issuer: /CN=df31f8eb25403d7ffe486b0a138335060121a8f6
Certificate serial: 018B36006EF3C7B66129E5255A180F3FC646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zH46yVAPX_-SGsKE4M1BgEhqPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.mft
Manifest number: 089D
Signing time: Mon 16 Oct 2023 01:01:19 +0000
Manifest this update: Mon 16 Oct 2023 01:01:19 +0000
Manifest next update: Tue 17 Oct 2023 01:01:19 +0000
Files and hashes: 1: 3zH46yVAPX_-SGsKE4M1BgEhqPY.crl (hash: w8sMNUjDsIoeIl3he97sbonFjs/w7mnFyKT51Nze3UA=)
2: hQCP0jtWv29xoUSkEKPjz7f1b1U.roa (hash: 5eGmImxiU3tJehYh/6ZiaH/GlHCCCvPYFqRYJHB7Zuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:00:6e:f3:c7:b6:61:29:e5:25:5a:18:0f:3f:c6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df31f8eb25403d7ffe486b0a138335060121a8f6
Validity
Not Before: Oct 16 01:01:19 2023 GMT
Not After : Oct 17 01:01:19 2023 GMT
Subject: CN=18c8435352aeb676018366cd7ee36e841c45ec14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:60:0d:5a:0e:2b:54:90:bf:f8:14:aa:b9:
25:f6:02:58:f0:2f:fd:17:08:97:de:be:48:c4:1f:
03:f9:98:b5:ef:12:25:6d:18:2f:51:c7:2d:40:f8:
fe:17:30:f0:68:1f:86:8d:3c:c5:e5:f5:6c:3a:a2:
86:a2:97:ed:51:5a:76:bf:95:45:3e:5d:d1:8c:fb:
f1:65:66:df:96:2a:dc:a9:d6:88:36:b3:b0:f7:5a:
65:16:61:6b:27:f1:33:2d:ff:5d:5d:1d:bf:e0:d7:
42:c9:07:ed:50:ea:76:97:9a:13:4e:68:0e:fe:bd:
c9:5a:7c:0c:65:2a:4d:ff:f5:d3:17:01:7d:04:df:
d5:b8:3a:94:22:64:77:08:4b:d2:bc:4f:59:af:e5:
31:87:6f:4f:0a:84:63:f4:3c:4c:fa:73:ba:2e:c3:
bf:a4:35:0b:f1:17:c5:18:f8:dc:81:eb:c2:73:ec:
7d:ed:f4:dd:73:f7:7e:ca:de:9d:26:68:6c:1d:71:
9f:a1:25:66:cf:27:49:e5:12:d6:0c:be:6d:78:6e:
b8:a1:67:68:f5:79:95:01:12:b5:bf:68:b7:0b:31:
b5:73:9b:58:53:70:aa:ec:04:ce:71:8b:f4:cf:29:
90:9f:cf:58:f9:da:f7:71:e2:ed:e4:87:ce:6f:32:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:43:53:52:AE:B6:76:01:83:66:CD:7E:E3:6E:84:1C:45:EC:14
X509v3 Authority Key Identifier:
keyid:DF:31:F8:EB:25:40:3D:7F:FE:48:6B:0A:13:83:35:06:01:21:A8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zH46yVAPX_-SGsKE4M1BgEhqPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:23:2b:d2:07:99:97:ce:96:79:4b:d9:4d:eb:7b:59:b6:80:
2b:73:f7:c6:fa:62:28:f3:96:6d:49:4b:3f:90:e3:88:90:a8:
dc:24:1b:76:94:ec:23:43:fe:ca:63:76:ef:95:0a:28:22:f7:
0a:a0:34:13:22:98:d0:20:fc:16:25:be:97:2d:38:b2:da:82:
0f:a0:af:23:a4:a5:01:d1:42:af:f0:79:ac:c9:e3:1e:d6:ef:
f3:f3:49:a5:e9:55:be:23:87:d2:29:04:eb:bd:9b:ce:3a:1e:
ac:b5:00:7a:7f:d5:71:02:ac:26:dc:b8:4d:6d:f6:ad:45:7f:
e4:35:8a:f5:e6:ce:d2:cf:28:7a:7b:fb:b7:b8:39:4e:06:25:
16:ae:24:74:04:7b:79:9c:29:be:3f:8e:08:7d:20:cb:9f:42:
9d:0f:7d:b0:a2:4a:27:53:2d:1e:7d:d8:85:42:1f:de:4f:07:
5c:c3:b3:b8:61:71:2a:fd:28:0b:ab:81:ea:d5:1a:5a:8a:f3:
fe:eb:44:1d:9d:12:19:74:b9:1c:a3:a0:5a:3a:f1:73:11:16:
0f:d0:0c:1b:f5:69:12:5e:4d:a5:99:e6:08:6d:7f:18:05:3d:
8b:55:c7:f1:0c:01:f1:a8:79:ae:12:e0:0a:cc:4b:ac:0a:22:
f3:13:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:50:06 2025 by rpki-client