Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d94910-9adb-472f-87d6-9703483ae8f9/1/3bLxcEbemhV2QCJInrVmMwmS0Z8.mft
File: 3bLxcEbemhV2QCJInrVmMwmS0Z8.mft (raw, json)
Hash identifier: QrkAzfy9EXGvLhlmHSv0+ev3zeIOzM/xOh6F0NG1SWg=
Subject key identifier: 1C:0C:A5:E0:A0:A3:65:98:0C:CB:8F:BB:2B:1A:42:02:C8:57:68:2F
Authority key identifier: DD:B2:F1:70:46:DE:9A:15:76:40:22:48:9E:B5:66:33:09:92:D1:9F
Certificate issuer: /CN=ddb2f17046de9a15764022489eb566330992d19f
Certificate serial: 0191968009ED0716784A618890FA715A267F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bLxcEbemhV2QCJInrVmMwmS0Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d94910-9adb-472f-87d6-9703483ae8f9/1/3bLxcEbemhV2QCJInrVmMwmS0Z8.mft
Manifest number: 0EC6
Signing time: Wed 28 Aug 2024 01:00:59 +0000
Manifest this update: Wed 28 Aug 2024 01:00:59 +0000
Manifest next update: Thu 29 Aug 2024 01:00:59 +0000
Files and hashes: 1: 3bLxcEbemhV2QCJInrVmMwmS0Z8.crl (hash: llIh06/FapRwizt4iqlyPeRs2GTXklkSOwlnD+vQuQI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:96:80:09:ed:07:16:78:4a:61:88:90:fa:71:5a:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb2f17046de9a15764022489eb566330992d19f
Validity
Not Before: Aug 28 01:00:59 2024 GMT
Not After : Aug 29 01:00:59 2024 GMT
Subject: CN=1c0ca5e0a0a365980ccb8fbb2b1a4202c857682f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:c0:0c:01:6a:d7:d3:aa:c5:1a:f5:f0:a7:
1a:74:c3:53:bb:fc:ff:b4:b7:57:70:1d:97:f8:88:
55:a2:32:53:49:53:37:d8:e5:bb:42:91:33:88:b9:
68:52:32:da:c7:38:b3:d2:3d:17:99:74:6b:cf:c0:
52:01:56:86:6f:de:03:6e:2a:6f:d4:2d:62:ee:2e:
73:33:24:85:09:2b:f3:da:ad:fc:36:96:3a:c2:0e:
d7:f1:8f:e3:7f:f0:3b:6e:3d:db:67:63:f5:95:7e:
b8:d5:d1:c0:6b:0e:cc:ad:80:67:b4:e4:03:89:a0:
d2:7f:b6:4c:40:14:69:09:18:81:a2:45:83:45:64:
21:6c:1c:5c:94:3c:8c:a9:95:08:9f:e7:4a:ba:f6:
13:40:b0:b9:48:38:bb:ae:06:bf:bb:0a:77:fa:f0:
32:80:80:72:c1:d8:d5:71:cc:b5:7d:3f:af:fa:50:
4d:41:31:9b:49:67:58:38:a4:a1:ef:9e:72:5b:c9:
e2:09:f5:34:aa:6b:7a:b9:c3:de:ff:fa:0e:fb:58:
fb:cb:29:62:a7:34:83:6c:5a:7e:07:9f:fb:ca:fd:
0f:d2:81:ca:0d:2c:68:7b:88:a2:a9:ad:b5:2d:37:
06:d0:1c:24:db:74:67:ec:43:aa:89:06:26:1b:9a:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0C:A5:E0:A0:A3:65:98:0C:CB:8F:BB:2B:1A:42:02:C8:57:68:2F
X509v3 Authority Key Identifier:
keyid:DD:B2:F1:70:46:DE:9A:15:76:40:22:48:9E:B5:66:33:09:92:D1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bLxcEbemhV2QCJInrVmMwmS0Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d94910-9adb-472f-87d6-9703483ae8f9/1/3bLxcEbemhV2QCJInrVmMwmS0Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d94910-9adb-472f-87d6-9703483ae8f9/1/3bLxcEbemhV2QCJInrVmMwmS0Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9c:63:76:b6:a8:58:df:0c:2a:ab:10:4e:81:0e:13:6b:54:
f5:c5:6d:78:ad:60:3a:c7:ad:3b:6f:97:00:d2:b3:15:9b:e1:
7b:a0:f2:04:da:90:98:58:e2:12:b4:60:b8:fa:ab:cb:d9:88:
1a:79:16:5d:8a:0c:c5:54:44:07:1a:4a:47:90:e9:95:f6:ae:
43:96:1c:d1:0c:c2:3c:fb:be:fa:5a:27:f7:76:51:57:57:03:
b1:aa:e3:90:ab:23:f5:55:2f:84:ec:fb:d7:7d:73:5a:e7:24:
85:74:c6:42:b4:a7:b8:84:f3:ba:93:d1:27:e6:5e:0d:4b:99:
d7:9a:a9:56:ce:1e:8f:88:f0:bb:30:dd:da:27:66:90:3a:34:
15:10:eb:f0:7a:99:3f:92:d0:bf:89:89:7b:83:23:28:26:f6:
7d:07:bd:34:74:30:3e:c6:5b:e3:c5:22:50:22:0f:d1:f3:db:
0f:6a:3b:19:14:76:73:82:99:54:9c:73:df:29:58:8e:53:61:
f9:04:b6:c4:8b:60:f4:64:3b:6d:6f:a3:0c:c2:2c:d5:bf:11:
41:8e:98:35:3f:95:f5:e5:be:22:38:8c:73:b6:c2:ab:4a:37:
76:92:8f:56:50:fa:93:4c:21:df:c6:90:5d:f6:ef:48:97:e9:
94:3d:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:45:17 2025 by rpki-client