Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: ngCQDLTg9ItGtJVHl5x7xdbtBNmL1YSde5xdylHkS8E=
Subject key identifier: AD:B5:5C:7A:06:0E:9B:8C:65:20:77:24:3C:C9:DF:F6:4B:7A:13:93
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 0194BBCE0523311445BF1B9F38C6145FCA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 0BCB
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: kT9DKcMxWMwlKMwZjRGz4HIwaXR5BWB/Oz6ns9ut7Hg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:23:31:14:45:bf:1b:9f:38:c6:14:5f:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=adb55c7a060e9b8c652077243cc9dff64b7a1393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:3f:6f:78:9f:36:b4:c1:68:13:f3:d3:6d:
98:d5:65:89:49:f1:4a:af:2e:e0:67:c1:3f:0c:ac:
5c:d2:0e:1a:84:d4:92:9a:b9:21:ce:b0:2d:fd:a4:
d7:6d:22:da:72:30:cc:01:6b:d5:3e:f2:63:21:80:
bf:f7:5f:da:32:00:fc:27:b3:3e:8d:bd:3e:90:95:
e6:6d:50:7f:35:6c:a7:46:14:ea:da:f1:05:71:2e:
c9:71:d4:4f:64:b2:fc:bb:74:1a:c7:b1:be:b2:54:
8d:89:aa:d9:74:1b:50:69:43:e0:be:26:1a:79:ef:
ac:82:94:c6:26:ee:5a:ea:51:4d:55:29:bc:54:83:
15:4a:33:1c:21:4c:5b:4b:b4:16:a4:73:83:91:8a:
ff:cc:11:9d:0e:f8:e5:ad:13:fe:c0:c3:07:87:cc:
cb:0d:7f:39:ec:84:02:39:55:45:d1:e4:fe:d8:bf:
c0:b3:18:77:1e:96:66:26:5c:10:a9:07:83:2e:94:
a3:77:01:50:97:00:77:74:be:af:97:0a:a6:8e:97:
16:7f:e6:68:54:39:ec:dd:63:a4:05:bb:8e:4a:b6:
ec:2f:18:58:d1:da:d8:74:2f:e0:53:c9:06:23:1e:
fe:be:52:fb:be:30:c3:49:b3:f5:5d:af:dd:2e:f2:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B5:5C:7A:06:0E:9B:8C:65:20:77:24:3C:C9:DF:F6:4B:7A:13:93
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:c9:d8:fc:43:81:ed:13:33:3d:a3:5c:64:ef:5f:3e:8c:df:
27:d9:fa:e9:a4:d7:c9:8f:7d:a9:f0:a4:eb:86:39:3a:01:ba:
6d:f5:b3:73:16:3c:3c:bc:d9:e7:ad:d5:c5:bf:ef:72:7a:57:
44:c4:5f:22:6a:f5:83:14:b9:cc:3d:78:eb:db:fe:3c:3a:cc:
df:41:9b:cd:d4:f1:cd:f8:93:56:01:ef:cb:62:3b:5a:73:13:
44:ed:08:e2:e7:78:ac:54:2a:74:50:0b:2b:4d:83:63:71:48:
c6:73:20:a7:07:47:1c:23:c8:ba:11:1b:82:e0:b7:ab:62:8c:
9d:e4:67:a7:ef:89:24:bf:e4:db:0f:6a:72:00:75:ca:e7:9a:
a8:2e:cf:27:cf:d3:f2:25:03:a3:38:45:1d:0e:a4:03:f2:68:
b4:f7:7f:eb:a1:64:84:fa:76:e7:2a:7f:47:2e:0e:62:33:b0:
27:65:db:f1:bb:e4:2e:a8:f8:87:cc:b6:48:bc:51:4c:0c:ad:
e6:d3:e9:b1:da:e4:e3:c7:f2:d0:74:54:99:a7:46:63:b2:23:
1a:b3:d4:6c:05:d0:16:f0:1a:55:ed:54:c7:4d:19:e9:e6:2f:
6c:3a:12:5b:c6:4a:61:04:f1:ea:8a:89:5e:24:42:90:23:c5:
48:0f:ff:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:28 2025 by rpki-client