Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/93cff3-b452-4475-98a6-5fb3ac192533/1/j3aqSMwRSvxbHGXnt2BcaPH7bZ0.mft
File: j3aqSMwRSvxbHGXnt2BcaPH7bZ0.mft (raw, json)
Hash identifier: PuVqoGPEnO28P5bIV+Niy40GTE2AuLZ9XeSJH6v9Vg0=
Subject key identifier: D6:B6:BD:41:2A:01:01:75:45:D6:CF:5E:89:B1:A1:D4:5C:D9:00:54
Authority key identifier: 8F:76:AA:48:CC:11:4A:FC:5B:1C:65:E7:B7:60:5C:68:F1:FB:6D:9D
Certificate issuer: /CN=8f76aa48cc114afc5b1c65e7b7605c68f1fb6d9d
Certificate serial: 018CF22C6A1897E08986E25232C3A6C79A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3aqSMwRSvxbHGXnt2BcaPH7bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/93cff3-b452-4475-98a6-5fb3ac192533/1/j3aqSMwRSvxbHGXnt2BcaPH7bZ0.mft
Manifest number: 09B2
Signing time: Wed 10 Jan 2024 07:00:45 +0000
Manifest this update: Wed 10 Jan 2024 07:00:45 +0000
Manifest next update: Thu 11 Jan 2024 07:00:45 +0000
Files and hashes: 1: j3aqSMwRSvxbHGXnt2BcaPH7bZ0.crl (hash: J6xx28Zrd5g8Ld1DNbzxrLgd0IevkXYJR2ZquIEctFQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:2c:6a:18:97:e0:89:86:e2:52:32:c3:a6:c7:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f76aa48cc114afc5b1c65e7b7605c68f1fb6d9d
Validity
Not Before: Jan 10 07:00:45 2024 GMT
Not After : Jan 11 07:00:45 2024 GMT
Subject: CN=d6b6bd412a01017545d6cf5e89b1a1d45cd90054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:9c:f6:1d:04:24:2b:f9:7f:24:c7:e6:79:
bb:09:ac:12:2c:c9:94:7e:8b:55:3d:95:09:79:78:
da:66:92:f3:f9:31:a5:96:69:d9:ab:1f:1d:8b:7a:
ce:cc:5c:7a:5b:f3:f8:e2:af:8f:fd:0c:26:39:61:
67:8f:c9:90:55:4b:8a:95:47:84:ec:ac:90:5f:4e:
fa:9f:b3:54:3f:60:4b:4f:a0:53:6f:b5:28:99:6b:
a0:cb:6c:a2:cb:47:eb:2c:4c:39:e0:96:30:ce:91:
d7:0c:99:43:70:e0:84:bf:54:dd:6d:05:bb:19:ba:
ce:50:94:f1:ee:d8:86:8f:e5:85:37:24:9a:3e:0b:
7b:f2:9f:a8:4a:13:29:b7:79:e4:fd:02:1d:2c:63:
9d:a9:9c:42:ff:ce:aa:90:64:19:a7:9b:b3:04:52:
e6:78:1b:8a:18:b7:c2:df:ce:10:2b:2c:75:4c:37:
62:dd:19:4f:ab:71:2d:1a:65:8a:99:b4:b7:6b:a2:
49:b3:cf:81:d2:c3:d3:ca:35:ff:10:2d:79:26:6e:
62:d4:40:fa:75:23:eb:55:36:f5:7e:69:2d:c5:13:
d3:67:b7:60:f0:d6:e8:75:ec:84:22:ca:9b:82:97:
39:aa:b0:01:55:a0:46:53:c7:59:b8:f8:da:4e:2d:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B6:BD:41:2A:01:01:75:45:D6:CF:5E:89:B1:A1:D4:5C:D9:00:54
X509v3 Authority Key Identifier:
keyid:8F:76:AA:48:CC:11:4A:FC:5B:1C:65:E7:B7:60:5C:68:F1:FB:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3aqSMwRSvxbHGXnt2BcaPH7bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/93cff3-b452-4475-98a6-5fb3ac192533/1/j3aqSMwRSvxbHGXnt2BcaPH7bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/93cff3-b452-4475-98a6-5fb3ac192533/1/j3aqSMwRSvxbHGXnt2BcaPH7bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bf:c3:ba:60:a7:2b:ab:15:7b:08:f9:8b:ce:cc:52:90:40:
27:cc:ee:70:1d:90:ac:e1:b0:6f:bd:c7:bd:75:80:75:e8:b5:
09:5c:be:ce:8f:8c:b7:74:d9:20:7a:89:09:66:13:7d:3e:a5:
72:84:39:7a:90:94:a7:73:62:da:b7:77:df:2c:54:cb:c7:e3:
6a:94:d9:da:c0:a1:8b:e1:69:4d:23:19:7a:b7:27:2d:5c:30:
a0:5d:51:4c:c8:10:b2:2c:6c:b1:1d:d7:ec:61:e0:29:b7:15:
92:de:b5:73:a3:42:cb:9d:43:fb:7e:bc:26:0b:cb:eb:e7:24:
e2:38:e2:46:19:28:88:16:f1:8e:d3:ff:a8:de:da:7a:ca:7f:
3c:df:a5:6f:76:1b:48:fb:e3:69:10:97:3b:41:63:c7:bd:04:
c9:31:78:4c:85:b2:75:7c:27:5f:86:eb:42:1f:cf:50:5f:e8:
1a:93:7b:06:c9:3e:f3:2d:a5:94:99:01:98:c2:80:5f:ea:78:
a0:0b:16:09:0c:a8:67:f6:db:17:8f:a9:94:66:ef:9a:34:8d:
fe:bf:f0:b3:fe:ed:d7:ef:b4:70:fb:0d:7a:80:29:be:00:c2:
fe:37:f8:d8:32:97:a6:f7:9f:ba:96:49:40:41:70:5f:fb:17:
24:9c:e6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 12:36:06 2025 by rpki-client