Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
File: 3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft (raw, json)
Hash identifier: qQO3F7tWgB9T5oCFMzBA1/nz1rgHqBtDTdDFBeeiA1c=
Subject key identifier: 69:57:D2:22:1B:36:78:78:4D:14:EE:EC:D3:70:F1:3E:8E:9D:7D:7C
Authority key identifier: DF:1E:9D:52:74:8B:16:51:75:26:3E:50:D0:10:A6:FB:05:9B:CD:05
Certificate issuer: /CN=df1e9d52748b165175263e50d010a6fb059bcd05
Certificate serial: 0191FE240C06E5F2EC11EE62DCCC8A4CFD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
Manifest number: 0CDC
Signing time: Tue 17 Sep 2024 04:01:00 +0000
Manifest this update: Tue 17 Sep 2024 04:01:00 +0000
Manifest next update: Wed 18 Sep 2024 04:01:00 +0000
Files and hashes: 1: 3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.crl (hash: AakrkCOcDOsEQU8iDmiY4c4CBUmTl04GJlUZcIuphmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:24:0c:06:e5:f2:ec:11:ee:62:dc:cc:8a:4c:fd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df1e9d52748b165175263e50d010a6fb059bcd05
Validity
Not Before: Sep 17 04:01:00 2024 GMT
Not After : Sep 18 04:01:00 2024 GMT
Subject: CN=6957d2221b3678784d14eeecd370f13e8e9d7d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:93:e2:ed:45:4d:80:1c:40:73:d6:f2:a7:
2d:09:d4:46:5e:de:4e:9d:79:d7:7f:78:a4:65:68:
c7:6d:c3:4b:53:c7:7c:8b:37:2d:04:46:93:ad:d0:
8c:cf:ab:ae:4c:d8:d1:fb:a5:1f:65:c2:4d:b2:d9:
21:c7:41:82:0d:92:65:e5:ff:e8:ab:59:b8:51:88:
16:3e:26:97:9a:6f:ce:43:ae:90:7f:66:c7:ec:c8:
2e:8e:e2:93:5e:17:18:27:a4:3a:05:b4:a1:7b:d9:
4a:11:7e:b9:fe:e9:0a:10:15:d5:0e:5c:b6:d7:4a:
aa:85:ec:2b:b8:b9:01:fb:ec:3b:cb:39:ad:f2:c3:
ee:78:43:c6:10:fa:a2:75:0f:1e:e3:09:4a:82:60:
4a:aa:7b:b2:32:b3:d5:74:dd:97:80:fc:6b:9f:12:
f7:a7:99:cb:5d:4b:54:66:ed:5a:ea:a5:1c:ae:51:
d5:2e:4f:2c:ec:42:ef:11:a5:2a:4c:b7:c7:fe:93:
c6:c4:0b:4c:27:78:fe:c1:31:fd:7a:e7:fb:1f:9a:
2c:20:16:2d:1e:a1:8f:60:8e:13:a1:b3:94:26:e5:
66:2b:4d:03:c6:10:75:63:2f:f0:c2:c1:8c:6f:4e:
b4:d9:db:ff:8d:10:35:b0:6e:75:a9:bb:1b:2c:ab:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:D2:22:1B:36:78:78:4D:14:EE:EC:D3:70:F1:3E:8E:9D:7D:7C
X509v3 Authority Key Identifier:
keyid:DF:1E:9D:52:74:8B:16:51:75:26:3E:50:D0:10:A6:FB:05:9B:CD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/77ab56-855e-4a5d-95e6-5961f84a3f36/1/3x6dUnSLFlF1Jj5Q0BCm-wWbzQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:40:43:35:5a:b8:a3:5f:5b:ec:ef:d4:b0:77:f2:09:e5:16:
b5:3f:08:99:f4:3f:bf:3a:b7:c6:42:79:95:0b:e3:c8:9d:5e:
2a:b5:b9:8d:de:36:b3:ec:5a:f8:09:c7:92:54:d6:be:70:4a:
b0:9d:e2:32:c3:88:5f:fd:bc:3d:2d:c5:41:51:75:11:f7:68:
44:46:92:18:3c:4a:1d:89:6b:3b:06:43:f9:99:0a:9a:3b:24:
fe:24:03:72:23:95:b4:e7:4b:ed:14:bd:95:28:9a:42:15:b6:
98:9e:43:fa:09:4a:b1:87:3f:d9:49:27:b3:23:3d:ad:94:3c:
73:f4:db:86:ba:52:79:de:40:ca:e2:7e:26:9e:1f:72:a1:38:
b1:45:60:59:6c:5c:db:45:50:92:f5:f7:3b:98:86:04:ac:ee:
b3:2d:e9:4a:8e:3f:f9:07:a0:13:df:5c:84:f8:aa:b2:54:25:
56:2e:0e:6b:65:43:5b:9b:a4:83:ce:3f:39:23:35:9c:64:ff:
8c:13:42:d0:cd:a9:27:34:62:34:08:37:cd:72:0a:6b:2c:13:
d3:7a:33:c6:f2:db:17:10:4e:61:3c:3b:d0:74:99:f3:c4:a5:
ea:27:d1:2c:03:3a:e9:ab:da:c7:de:ed:8f:88:95:71:c7:64:
fd:ce:0a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:33:27 2025 by rpki-client