Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.mft
File: ch3rE6PZO332ar7Tx5h3F6zrPMk.mft (raw, json)
Hash identifier: mWDxK9/7ihxb5cdLbavBlnic9cYqX8TyNgJigARcE3c=
Subject key identifier: 64:55:FE:CD:0B:64:73:41:65:32:FF:E6:ED:6F:0E:46:22:26:3E:F7
Authority key identifier: 72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
Certificate issuer: /CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Certificate serial: 018BCBC6FDD0806F37812DBDB83897A39F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.mft
Manifest number: 0872
Signing time: Tue 14 Nov 2023 03:01:37 +0000
Manifest this update: Tue 14 Nov 2023 03:01:37 +0000
Manifest next update: Wed 15 Nov 2023 03:01:37 +0000
Files and hashes: 1: DXeGDE4YqHzmhlgXh78yU96Tsmg.roa (hash: Zsh1h41GYiWkAwcS5V4XGLTbYpniRHa8U8kF2ZsOY0s=)
2: ch3rE6PZO332ar7Tx5h3F6zrPMk.crl (hash: QslIPpu7xNqVt7S2f7cQaxNwKrxHnTqZ3eHy4d2qdiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cb:c6:fd:d0:80:6f:37:81:2d:bd:b8:38:97:a3:9f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721deb13a3d93b7df66abed3c7987717aceb3cc9
Validity
Not Before: Nov 14 03:01:37 2023 GMT
Not After : Nov 15 03:01:37 2023 GMT
Subject: CN=6455fecd0b6473416532ffe6ed6f0e4622263ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:f2:0b:16:b9:7c:03:1b:d6:57:51:63:83:
cc:3b:a3:b6:3a:8e:dc:6e:0e:ff:3b:af:dd:0e:10:
d0:c3:93:fe:d5:2d:bb:d9:9f:f6:fe:b1:b9:38:de:
08:cf:cc:41:78:99:fe:f9:41:3b:c2:35:7a:e9:40:
fb:dc:d5:0c:f1:cf:fc:41:f0:59:a1:92:eb:db:b3:
f1:b8:d3:b3:ea:73:8c:10:02:b4:2a:f0:00:7e:3e:
f1:06:d6:bb:f8:ac:4b:4d:e8:6d:65:e6:2f:d5:42:
20:af:eb:3f:13:90:50:6d:d6:5f:b9:4c:7b:61:6c:
45:a3:16:08:a7:f6:0b:72:3c:6f:3d:f6:60:f5:d7:
47:ae:a0:7b:2e:da:7c:70:2c:ce:3b:17:ed:98:5f:
85:e2:f7:72:7b:2e:07:06:bb:d4:d0:f2:7b:f4:fc:
92:b9:21:fa:ff:a5:74:1c:2e:a9:eb:0b:2c:8d:19:
53:12:f9:31:84:f8:28:6e:ef:54:76:b1:0c:84:6b:
cb:63:ff:6f:07:3d:5f:1e:5b:87:a8:4a:df:98:a8:
a6:6a:95:ca:bb:de:d4:89:bf:8f:f0:42:f6:01:40:
a6:fc:39:54:9a:ea:28:74:66:ae:f4:c1:de:1a:24:
71:d9:c3:79:75:18:d9:9d:95:e7:da:bf:73:c1:53:
2a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:FE:CD:0B:64:73:41:65:32:FF:E6:ED:6F:0E:46:22:26:3E:F7
X509v3 Authority Key Identifier:
keyid:72:1D:EB:13:A3:D9:3B:7D:F6:6A:BE:D3:C7:98:77:17:AC:EB:3C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ch3rE6PZO332ar7Tx5h3F6zrPMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa37b6-bf16-4836-bb9c-9208b0e2fa10/1/ch3rE6PZO332ar7Tx5h3F6zrPMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cd:7b:7c:0d:cc:04:1b:0f:2f:40:bf:db:a9:74:9c:44:c8:
ee:93:07:77:56:04:91:a6:73:65:63:1a:5e:2c:3c:c7:9e:55:
96:58:b5:ab:dc:e0:40:e7:b8:17:47:e8:0c:a4:88:3c:42:ae:
c3:6a:cb:68:69:a9:1e:fd:b1:32:5b:46:08:fb:77:36:2a:13:
9d:7f:81:be:c8:bc:00:36:ee:59:4c:fa:49:a8:53:4a:98:35:
43:d3:35:2d:b8:07:a7:67:66:16:d7:b9:11:0e:5e:49:11:4e:
e6:97:8e:70:e6:dd:ed:59:02:07:6d:03:95:ed:99:26:f3:3e:
0e:3a:b5:d9:cc:19:90:f4:cb:0c:a4:24:08:78:e0:2d:74:cb:
33:db:c8:27:b7:71:e4:9c:7a:e9:7b:c0:28:19:7b:8e:0b:f5:
e2:7f:b4:d9:25:61:ec:93:a1:85:e4:e0:05:3c:46:ba:96:a1:
1e:df:a1:41:3e:ea:c3:72:39:5f:94:06:ad:7f:20:2f:b0:a1:
01:c5:38:ed:ce:1c:c1:61:89:0d:9f:92:b6:04:87:de:2c:3e:
11:eb:61:06:7f:3e:4d:95:fc:07:fc:81:9c:2e:df:9f:fd:4e:
44:a8:45:6a:93:12:40:59:14:99:bf:9a:5f:a7:b4:19:cc:92:
1b:3a:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:14 2025 by rpki-client