Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3ff441-6f20-46d9-be3e-fa8960191261/1/EN-N8-3RT6USOQwRZYznNX6wy1A.mft
File: EN-N8-3RT6USOQwRZYznNX6wy1A.mft (raw, json)
Hash identifier: 8B70BRAqlzjtAeigcOWPbhSjrAC86tYkGpV70VHrWWM=
Subject key identifier: 6A:A4:9B:F6:94:DC:F5:E7:DE:50:AB:31:D9:18:3C:20:8F:01:6C:8F
Authority key identifier: 10:DF:8D:F3:ED:D1:4F:A5:12:39:0C:11:65:8C:E7:35:7E:B0:CB:50
Certificate issuer: /CN=10df8df3edd14fa512390c11658ce7357eb0cb50
Certificate serial: 019100B9501DFA75AD6036B10779FA61C9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EN-N8-3RT6USOQwRZYznNX6wy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3ff441-6f20-46d9-be3e-fa8960191261/1/EN-N8-3RT6USOQwRZYznNX6wy1A.mft
Manifest number: 02
Signing time: Mon 29 Jul 2024 23:00:30 +0000
Manifest this update: Mon 29 Jul 2024 23:00:30 +0000
Manifest next update: Tue 30 Jul 2024 23:00:30 +0000
Files and hashes: 1: EN-N8-3RT6USOQwRZYznNX6wy1A.crl (hash: H/BBsqtCgwKjCsPM7OT3bxgLMn3fhkGtHjdMA+NQ7lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:00:b9:50:1d:fa:75:ad:60:36:b1:07:79:fa:61:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10df8df3edd14fa512390c11658ce7357eb0cb50
Validity
Not Before: Jul 29 23:00:30 2024 GMT
Not After : Jul 30 23:00:30 2024 GMT
Subject: CN=6aa49bf694dcf5e7de50ab31d9183c208f016c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:92:19:8d:69:c9:cc:b8:c3:da:45:46:0f:
70:95:2b:b0:e8:71:2d:52:36:ac:02:ad:dd:df:7a:
7c:3e:98:f1:fc:0e:ab:e5:62:5e:44:c6:da:dc:88:
eb:92:9b:9c:95:b9:b6:cc:86:e3:aa:a0:1b:73:45:
58:01:b8:a2:13:c2:6f:15:09:7d:74:85:9c:f6:9d:
fc:7c:36:3b:87:8d:1a:74:90:80:4d:fd:cb:79:d1:
e1:50:9d:d8:ec:56:05:f2:f5:e7:e3:39:32:92:08:
a2:d8:e4:ad:9e:15:d2:97:77:ec:b9:30:c5:17:1a:
a9:43:87:e3:7e:6b:cd:1f:cf:26:8b:10:64:95:2f:
dc:8f:18:15:f0:e6:f5:14:97:b3:2b:fe:00:2e:d1:
5c:0a:cf:3d:e6:3f:70:11:3d:7a:eb:e2:d6:b7:05:
ea:81:31:fa:15:c4:26:2c:6c:3f:25:8a:b8:18:22:
83:53:07:20:a4:0a:8f:fc:f4:bf:64:67:f6:de:ce:
23:33:a7:90:b2:92:d1:2c:89:95:58:62:f6:b0:87:
62:90:7e:7c:fe:58:9a:11:ec:58:26:49:65:49:7b:
63:5a:38:87:67:2c:dd:85:23:62:7d:97:05:e9:8d:
97:67:44:5b:e7:62:c4:c9:f4:1f:cf:7b:01:47:a2:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:9B:F6:94:DC:F5:E7:DE:50:AB:31:D9:18:3C:20:8F:01:6C:8F
X509v3 Authority Key Identifier:
keyid:10:DF:8D:F3:ED:D1:4F:A5:12:39:0C:11:65:8C:E7:35:7E:B0:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN-N8-3RT6USOQwRZYznNX6wy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3ff441-6f20-46d9-be3e-fa8960191261/1/EN-N8-3RT6USOQwRZYznNX6wy1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3ff441-6f20-46d9-be3e-fa8960191261/1/EN-N8-3RT6USOQwRZYznNX6wy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:13:d2:08:bd:2b:28:57:90:74:76:63:b4:ff:e4:f8:62:2e:
07:f0:37:de:fb:69:a6:01:1c:47:0c:24:b8:c3:df:da:e2:b8:
b6:6e:53:f6:c5:8b:92:9a:4f:99:a4:54:1c:c3:e5:03:3a:95:
20:c2:a1:9d:70:2b:14:e9:c9:70:5b:74:40:b8:cf:bd:29:b3:
b8:73:70:ec:14:ff:8e:0b:03:9d:ab:98:85:f4:ee:74:23:62:
9d:b3:a8:b3:25:7b:f4:75:9f:33:a2:8f:82:76:6e:df:94:07:
82:97:dc:89:4b:19:f5:1d:25:2c:a3:18:01:c5:b3:fb:a0:9f:
a5:89:27:ab:81:90:0a:78:6d:05:2b:a6:e4:d9:4c:c9:d7:4e:
cf:0d:1d:9a:8c:2d:0e:51:83:c8:cd:30:fb:02:70:13:a8:70:
89:e4:d6:e4:d9:9e:bb:bf:67:eb:fb:58:b3:dd:3f:89:28:73:
65:4a:f0:8f:a0:f7:c8:36:c1:29:9f:ac:7c:b0:4a:67:14:bf:
d9:80:74:36:dd:64:5f:9f:5d:4d:eb:b7:bd:01:74:16:85:f2:
9e:5b:6d:f1:19:c9:30:6d:71:e3:de:23:54:95:94:82:2b:b7:
3b:4d:aa:62:ef:3e:11:e7:22:48:0f:3c:15:bf:2f:1a:2a:aa:
1a:a0:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:00:25 2025 by rpki-client