Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f62ad6-6f37-4ca1-86a2-68b336484ae6/1/r-e3M3bkBJ4HGvrFK_294cxwhec.mft
File: r-e3M3bkBJ4HGvrFK_294cxwhec.mft (raw, json)
Hash identifier: aGo0x8AQqV3ns7Qi0XMQ9GEEmZKBLQbKeHnQBepT03s=
Subject key identifier: 9B:26:40:FE:C3:C7:B9:1F:25:FA:25:07:24:CF:49:99:03:54:8A:20
Authority key identifier: AF:E7:B7:33:76:E4:04:9E:07:1A:FA:C5:2B:FD:BD:E1:CC:70:85:E7
Certificate issuer: /CN=afe7b73376e4049e071afac52bfdbde1cc7085e7
Certificate serial: 02D9C145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-e3M3bkBJ4HGvrFK_294cxwhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f62ad6-6f37-4ca1-86a2-68b336484ae6/1/r-e3M3bkBJ4HGvrFK_294cxwhec.mft
Manifest number: 03A2
Signing time: Tue 12 Apr 2022 08:56:30 +0000
Manifest this update: Tue 12 Apr 2022 08:56:30 +0000
Manifest next update: Wed 13 Apr 2022 08:56:30 +0000
Files and hashes: 1: Ktzijd4gUhD9ihrTuyC_a6GXMR8.roa (hash: AnvW77VTVpseY6yXZxIoPWjASQ9phIGuVy0zXEp/Gp4=)
2: r-e3M3bkBJ4HGvrFK_294cxwhec.crl (hash: r5M0zm4HuVePj1nW1914HwHAD1c3Xnx8KwZ+G+ULKNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47825221 (0x2d9c145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe7b73376e4049e071afac52bfdbde1cc7085e7
Validity
Not Before: Apr 12 08:56:30 2022 GMT
Not After : Apr 13 08:56:30 2022 GMT
Subject: CN=9b2640fec3c7b91f25fa250724cf499903548a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:61:3b:11:0b:75:e5:ac:b0:02:b7:16:37:
fd:f6:d2:3b:26:14:d1:0e:42:43:03:2c:b9:45:eb:
c7:da:6d:9d:4b:83:56:ab:43:b9:f5:a2:9b:f0:95:
a3:98:bb:59:d0:00:0b:79:35:a5:c6:16:84:48:14:
25:1d:9c:19:fc:9b:6e:86:28:5f:20:ce:ca:bb:e1:
e0:87:36:2d:ba:34:57:db:a4:fd:c0:b5:e2:68:d4:
35:f6:a4:4a:5b:4d:40:cd:d6:bd:e6:d5:75:04:97:
ed:18:57:66:1b:42:a0:9d:34:86:92:d7:6b:00:28:
c3:94:f0:ef:e4:a1:cc:18:d2:65:0d:ce:c0:42:f3:
b3:85:82:56:a0:3f:85:8d:aa:14:b8:66:dc:83:ef:
5f:47:e7:e6:eb:42:de:58:94:52:15:b4:14:20:19:
4d:a2:6e:26:30:8b:95:d0:67:5b:2b:dd:74:c4:0a:
96:a3:3b:2b:3d:30:b3:1e:97:96:40:3e:51:fa:29:
89:b9:47:9d:19:0a:e1:ae:4d:ec:37:3e:72:1f:2b:
7e:4b:16:b1:70:6e:2b:91:4b:77:2d:52:3e:5c:e8:
8a:d6:24:87:9c:6a:16:38:4a:33:16:66:b3:a2:59:
ce:e0:d2:7c:9b:50:fa:34:36:d8:a5:19:7b:f2:8a:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:26:40:FE:C3:C7:B9:1F:25:FA:25:07:24:CF:49:99:03:54:8A:20
X509v3 Authority Key Identifier:
keyid:AF:E7:B7:33:76:E4:04:9E:07:1A:FA:C5:2B:FD:BD:E1:CC:70:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-e3M3bkBJ4HGvrFK_294cxwhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f62ad6-6f37-4ca1-86a2-68b336484ae6/1/r-e3M3bkBJ4HGvrFK_294cxwhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f62ad6-6f37-4ca1-86a2-68b336484ae6/1/r-e3M3bkBJ4HGvrFK_294cxwhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:05:69:df:8d:01:2c:83:a3:d3:f3:14:b7:b2:c6:44:32:fc:
3b:bb:e2:49:ce:00:6e:e4:bd:22:f9:4c:8a:0b:e2:c8:80:5e:
c8:25:63:2f:93:09:35:a5:b4:3a:c4:79:f9:e1:54:a8:86:4c:
11:cc:a3:a3:17:92:71:1c:04:93:63:80:b4:12:25:72:9e:92:
ed:24:08:6e:80:e1:6c:56:4a:e7:13:e0:26:db:81:9e:2a:38:
91:cb:e7:01:fa:b8:5b:dd:14:bb:e6:94:0b:96:f1:83:5d:22:
75:76:e3:44:6e:b6:92:4b:19:28:43:3b:87:5b:3a:e4:e8:9e:
42:62:0d:75:db:9d:ae:f6:ec:4b:38:53:ea:4a:07:18:da:87:
ba:c5:ec:a4:bf:81:cc:cb:e4:0a:15:22:b4:bc:b9:e0:85:11:
93:da:e2:41:de:2e:3a:f8:9f:1f:1f:af:ab:27:07:0c:b8:d1:
a6:54:ed:f5:e5:7a:de:dc:7f:54:f4:b2:5b:6e:54:73:d5:3c:
b4:73:c6:37:3b:0b:19:b4:ea:02:92:69:ff:b4:20:f9:8f:ad:
ef:47:0a:a1:b1:a4:e7:38:6d:ad:d5:64:f2:a0:4a:d8:e3:39:
a7:e0:63:c8:ef:82:32:15:d6:08:e9:d0:ed:b6:95:76:bc:12:
ab:a8:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:19:13 2025 by rpki-client