Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier: GspkCcpy6ymLC4R7Y6hDQ5rfdkes9Jrgj9BWNW5QiDY=
Subject key identifier: 98:1C:EB:BD:2D:E4:67:57:E0:CC:53:FD:CB:2F:DD:B5:84:9A:23:32
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer: /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial: 0197673BD027486BB075AE5329584C98A7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number: 0F46
Signing time: Fri 13 Jun 2025 03:01:02 +0000
Manifest this update: Fri 13 Jun 2025 03:01:02 +0000
Manifest next update: Sat 14 Jun 2025 03:01:02 +0000
Files and hashes: 1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: WmQ+9dCe8BxFG92Hv6/PVQ1cKe3USI41LNa88c77l4A=)
2: j2BsJZHL3LgBeU5YdWYJa32hdy4.roa (hash: d+oREESRuLvMYhUCDv9aLTd0uG0phphp5vORkyTT7cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:3b:d0:27:48:6b:b0:75:ae:53:29:58:4c:98:a7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Validity
Not Before: Jun 13 03:01:02 2025 GMT
Not After : Jun 14 03:01:02 2025 GMT
Subject: CN=981cebbd2de46757e0cc53fdcb2fddb5849a2332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3c:a8:18:5f:78:4b:7d:65:7e:d5:ae:6c:d2:
44:80:c1:2d:4b:98:57:a8:19:30:ca:0d:44:f3:61:
58:06:5a:1e:d2:43:d3:84:89:d1:81:8d:3c:b7:fc:
3a:df:b0:d1:74:2b:c5:35:17:fd:7a:c6:ca:18:9c:
bf:fa:98:eb:22:de:c9:6f:16:96:66:19:66:d9:a8:
cf:b2:c0:da:a5:a9:3e:77:9a:52:9a:dd:66:01:0f:
e5:39:57:4e:eb:4a:35:ca:d1:43:6a:df:47:dd:81:
5e:d2:bc:f1:31:df:fe:a3:a8:38:e2:c6:5c:c7:47:
90:c2:0a:5a:07:41:fd:32:d4:ea:23:31:d8:9f:57:
dc:ab:8d:df:10:3f:99:19:54:88:8c:b7:e6:40:ae:
bf:5a:d4:b4:c4:d4:22:71:f0:5d:0e:59:1e:f4:6d:
0d:84:04:8a:3d:5a:dd:f7:84:ab:55:e4:42:40:91:
40:fc:59:6d:43:32:f6:58:97:d4:16:cb:fa:f4:31:
65:5c:58:19:67:f3:71:27:f5:f7:d1:5f:ad:2f:3f:
3f:bf:37:98:e0:9f:e5:0e:55:10:69:ad:cf:be:e1:
07:33:82:f7:ee:a7:db:95:cd:6d:4c:ed:4f:1f:b1:
66:ff:c7:a8:e4:e6:81:99:2b:fa:2a:d3:43:42:a4:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:EB:BD:2D:E4:67:57:E0:CC:53:FD:CB:2F:DD:B5:84:9A:23:32
X509v3 Authority Key Identifier:
keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e9:16:23:5a:12:b8:5b:bf:5e:92:dc:6f:0c:58:4e:ce:82:
cf:d0:0e:fd:54:9f:35:0f:14:9f:33:7f:a6:8c:62:4b:28:41:
f3:ff:20:9a:0a:de:64:b9:07:b1:cc:bb:7b:ee:82:c3:6a:5d:
d5:a4:b6:05:9b:23:e7:70:a3:58:ce:e3:da:1f:77:ee:cf:ea:
5c:bd:4d:1e:2d:13:b7:3c:30:d0:76:53:74:0f:03:23:41:7b:
54:97:1b:19:1e:74:ea:c6:a4:50:3a:48:38:1b:96:7f:cc:20:
02:b3:a8:ea:6f:ad:f5:d8:1a:e3:93:a3:b5:f4:9d:3c:0d:df:
f5:2b:36:29:6c:ae:bf:fd:33:13:4f:58:c2:e3:d2:5f:b8:18:
c3:68:b4:aa:50:56:8c:13:16:5b:5d:a8:c1:e0:92:23:b0:e6:
c1:1a:a5:a3:78:cd:01:71:bb:b4:08:d8:52:0d:02:51:90:b0:
49:e0:30:ef:2b:1e:9a:ae:47:1b:b1:78:db:e2:30:57:75:62:
ec:19:f9:79:86:8f:18:d3:0f:32:4b:cf:87:3a:93:12:46:cc:
db:ac:21:2b:30:71:15:91:1d:67:3e:bf:7e:36:07:44:cf:4f:
98:89:74:b1:ad:c5:5b:bc:6f:cb:8e:b8:38:55:87:b6:c2:5e:
9d:6b:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:04:05 2025 by rpki-client