Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/3Sof0Kw3hpBWla9X8_8nf_qG_qA.mft
File: 3Sof0Kw3hpBWla9X8_8nf_qG_qA.mft (raw, json)
Hash identifier: LNslhSh8MEVw92UHzc1YKZv8Ko0spuUBjL3VuVIKwXI=
Subject key identifier: 38:7F:FC:62:6D:15:67:E3:D7:24:5F:BF:23:EF:2D:51:82:B1:CD:5C
Authority key identifier: DD:2A:1F:D0:AC:37:86:90:56:95:AF:57:F3:FF:27:7F:FA:86:FE:A0
Certificate issuer: /CN=dd2a1fd0ac3786905695af57f3ff277ffa86fea0
Certificate serial: 018870CD40CE43BCA82BC75C511F49E67E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Sof0Kw3hpBWla9X8_8nf_qG_qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/3Sof0Kw3hpBWla9X8_8nf_qG_qA.mft
Manifest number: 071E
Signing time: Wed 31 May 2023 07:54:39 +0000
Manifest this update: Wed 31 May 2023 07:54:39 +0000
Manifest next update: Thu 01 Jun 2023 07:54:39 +0000
Files and hashes: 1: 3Sof0Kw3hpBWla9X8_8nf_qG_qA.crl (hash: wUcCrihUZIbKjduqzUO+TBD3C77sG6k47yiiFypaP7s=)
2: KggI_agyWZEGcuvLUYbek7Jnzsg.roa (hash: XcvJq2viVXn6DT12PuISsc06xmUGkRIBvDBO/dOpSt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:cd:40:ce:43:bc:a8:2b:c7:5c:51:1f:49:e6:7e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1fd0ac3786905695af57f3ff277ffa86fea0
Validity
Not Before: May 31 07:54:39 2023 GMT
Not After : Jun 1 07:54:39 2023 GMT
Subject: CN=387ffc626d1567e3d7245fbf23ef2d5182b1cd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:c4:76:25:bd:6c:2a:c9:b8:d7:14:fc:ba:
66:b5:92:51:2a:2b:7f:07:07:bc:7d:1a:a8:3e:57:
6d:69:24:7d:da:70:c8:07:ff:c8:a9:24:36:45:d6:
ba:7f:58:ce:0e:e4:91:c7:bb:90:22:cd:f3:83:7c:
b3:9e:a8:16:a6:f7:42:6e:97:7d:76:e9:c4:df:c7:
b5:9b:37:6b:03:2c:dc:a1:9a:32:76:bf:f2:8d:57:
8b:67:f6:81:0e:78:04:3c:47:dd:c3:d5:af:ca:ff:
d1:5d:e5:8f:8c:98:09:df:cc:aa:f2:08:49:ba:bb:
d3:29:34:75:07:4d:5d:49:8c:70:57:cb:70:08:ef:
bb:a7:0f:ea:c4:84:cc:aa:ba:72:2c:2f:8f:02:59:
90:f6:e5:ba:f7:46:9b:6c:67:15:45:d5:0c:0d:a2:
54:55:d9:38:bf:11:31:6b:3a:4f:60:d7:b8:6b:a9:
37:d1:78:83:a3:4f:22:19:a6:f4:06:c6:66:cb:b9:
f2:fa:cd:e3:12:70:76:c1:d2:eb:f9:a1:58:ed:f0:
1b:bd:5b:63:42:03:2b:4b:d3:a8:6b:2e:1a:8b:31:
1b:65:ea:30:c1:56:74:25:75:a9:47:89:cc:c1:1a:
8c:82:75:9e:d5:a4:bc:23:d3:4e:74:9e:2e:e4:5a:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7F:FC:62:6D:15:67:E3:D7:24:5F:BF:23:EF:2D:51:82:B1:CD:5C
X509v3 Authority Key Identifier:
keyid:DD:2A:1F:D0:AC:37:86:90:56:95:AF:57:F3:FF:27:7F:FA:86:FE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Sof0Kw3hpBWla9X8_8nf_qG_qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/3Sof0Kw3hpBWla9X8_8nf_qG_qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/49fbdf-ae77-4b7e-b2bc-6312fd1ad954/1/3Sof0Kw3hpBWla9X8_8nf_qG_qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1e:6c:73:e7:0f:a9:86:73:37:12:15:08:9d:83:b2:b4:bc:
14:64:e0:5d:41:89:18:eb:a0:8a:50:c9:10:cc:bc:d6:25:73:
11:79:a3:d6:12:82:56:b5:4e:d5:11:c2:c2:1e:29:53:1e:af:
f6:0b:51:ec:f2:26:b3:22:7d:72:db:49:58:6c:23:39:12:ea:
34:ae:b8:3a:9a:a1:a1:27:da:39:17:58:74:83:fb:2a:86:1d:
d2:03:7c:4d:4c:75:21:5b:72:e0:8f:c1:a9:e0:7c:d6:24:34:
3a:ec:31:30:0e:89:7e:ce:60:09:49:ba:21:77:20:0d:40:89:
86:8d:a5:58:a7:c6:d8:ed:c8:25:27:ea:a2:df:41:f0:09:fb:
86:71:7c:40:59:31:3a:a5:d6:17:7a:fb:8a:2c:0b:9c:5b:89:
05:14:57:a3:97:5b:4f:05:d3:96:08:ab:6e:98:33:db:b4:01:
e1:b6:2f:c3:46:8e:75:70:31:40:6c:eb:80:9c:4e:49:8a:f4:
8e:71:c8:5b:6e:20:1b:b4:34:c4:95:23:ee:e9:e6:7e:7b:73:
8b:c1:63:03:45:14:17:eb:7b:27:4f:ff:2a:6d:ac:87:4d:5b:
2f:2f:94:1a:54:bf:f8:ab:45:9b:65:8e:a1:4b:42:ed:b1:14:
e4:11:59:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:22:20 2025 by rpki-client