Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/3hI7PpnCbOS11otvEgwyjbF2-3o.mft
File: 3hI7PpnCbOS11otvEgwyjbF2-3o.mft (raw, json)
Hash identifier: /8uKkiTGZQI2LP2xH+sbWP6jK0NfHQ+TksI3gC1j80w=
Subject key identifier: 59:92:D9:76:8F:99:36:48:22:D6:45:50:82:D4:28:9C:5D:32:D7:85
Authority key identifier: DE:12:3B:3E:99:C2:6C:E4:B5:D6:8B:6F:12:0C:32:8D:B1:76:FB:7A
Certificate issuer: /CN=de123b3e99c26ce4b5d68b6f120c328db176fb7a
Certificate serial: 01837ECE9A5DFC4A851F8D7A1B66D444BCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hI7PpnCbOS11otvEgwyjbF2-3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/3hI7PpnCbOS11otvEgwyjbF2-3o.mft
Manifest number: 0ADE
Signing time: Tue 27 Sep 2022 11:56:52 +0000
Manifest this update: Tue 27 Sep 2022 11:56:52 +0000
Manifest next update: Wed 28 Sep 2022 11:56:52 +0000
Files and hashes: 1: 3hI7PpnCbOS11otvEgwyjbF2-3o.crl (hash: gQ6U1JKOA081itd+0woyx8FX/yln0avUkPB8oHD2V+k=)
2: WaVRaonSMj_Ssh0J1trjIqkdn-s.roa (hash: 45H0gN6yATyqD9ajtv5DHTcRRMGBy1zHM7rz4C5NScc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:ce:9a:5d:fc:4a:85:1f:8d:7a:1b:66:d4:44:bc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de123b3e99c26ce4b5d68b6f120c328db176fb7a
Validity
Not Before: Sep 27 11:56:52 2022 GMT
Not After : Sep 28 11:56:52 2022 GMT
Subject: CN=5992d9768f99364822d6455082d4289c5d32d785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:b6:cc:e0:53:e7:26:52:65:18:c5:f1:83:
9a:07:b1:37:91:fe:01:89:ee:6e:b6:70:58:ea:e5:
5e:da:18:48:71:19:96:19:f4:46:1b:0f:a1:9f:bf:
9f:54:98:27:b5:7c:e6:25:1f:5b:0f:1a:e6:ab:6a:
7c:74:54:95:f8:ae:97:1c:cb:e5:10:1b:21:c1:d2:
f6:26:03:06:ca:d6:6a:7f:6f:85:2d:ef:fc:23:22:
32:7f:d8:d4:ce:4d:9e:4d:19:e6:43:91:3c:bb:cb:
b4:26:d8:58:e4:9c:52:55:c7:21:8c:7e:53:5c:30:
c7:4e:6c:77:21:ff:0b:fe:56:87:8a:07:d7:76:93:
f0:36:d3:87:d3:6b:48:bd:ac:76:13:e9:af:e6:02:
7f:89:be:4a:0d:3e:eb:67:a2:c2:f6:ea:da:78:f5:
04:80:82:9f:de:6a:62:da:b7:5f:32:f7:ac:72:ad:
9b:79:70:88:fc:ce:8c:1c:76:99:30:71:24:98:fa:
3e:82:7a:67:81:df:8c:e0:b4:b4:3f:6f:59:6e:86:
ea:64:f4:c3:ff:86:e0:aa:12:d3:f2:62:8b:08:a1:
67:e9:96:38:c8:0b:b9:49:3f:4c:c7:eb:6b:d8:75:
c1:15:a8:5a:14:c2:12:3c:cd:80:a8:f2:cd:bf:f7:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:92:D9:76:8F:99:36:48:22:D6:45:50:82:D4:28:9C:5D:32:D7:85
X509v3 Authority Key Identifier:
keyid:DE:12:3B:3E:99:C2:6C:E4:B5:D6:8B:6F:12:0C:32:8D:B1:76:FB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hI7PpnCbOS11otvEgwyjbF2-3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/3hI7PpnCbOS11otvEgwyjbF2-3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/647b51-be79-4dc3-a6a1-72067644f50b/1/3hI7PpnCbOS11otvEgwyjbF2-3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:49:0f:a9:4f:36:1c:4f:d2:0f:14:4d:83:99:fd:e2:f7:01:
09:6f:54:9f:20:cc:74:a5:8f:32:7f:66:3a:48:3f:84:16:9b:
e9:84:d3:55:9c:94:8f:6e:f2:44:01:ec:71:c2:68:1a:9e:7e:
52:49:19:af:af:f9:5d:95:3b:98:06:bf:81:52:d2:51:10:06:
83:27:97:ae:89:97:25:14:94:e0:4e:cf:5e:db:ce:d2:e5:ed:
43:40:8e:1f:45:bd:b3:92:e5:20:68:da:be:07:97:4c:a4:0e:
71:26:5e:99:8d:c4:ef:66:61:2b:7c:4d:d9:96:b5:bc:7f:3d:
01:6c:fd:b7:33:97:9c:f1:db:d5:aa:83:68:68:90:0f:b3:7b:
c3:fb:7e:90:f5:17:4e:c0:b0:6c:b9:56:05:36:4c:08:9a:66:
e4:3a:bd:58:53:d0:14:8d:1e:9a:d1:86:22:82:c6:95:0e:e6:
44:86:96:0c:47:e5:50:56:94:bc:96:e2:82:c0:f8:c4:b3:85:
45:ec:12:c3:84:ed:a2:74:53:a9:31:68:1f:0f:37:83:39:fb:
f8:b3:17:ec:a9:cf:20:3a:17:e1:2e:8b:01:93:7d:71:06:51:
cb:cf:e4:4e:68:6b:82:95:cf:03:1d:f4:19:33:04:5c:c6:9e:
d0:dd:56:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:18 2025 by rpki-client