Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: Lgji2U/orlmtexGnpD7muf8U2YvdBf9jY+6slhXS3yo=
Subject key identifier: 87:40:72:93:42:81:E5:D4:09:C6:70:98:88:20:51:56:32:7C:0C:10
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 0194BCE0D4E48AF1C71955FC86A5261303A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 06BE
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: pU03JBNf5ANhrvWUR0ksE6QwXFP5isUlGF5/ijRNynk=)
2: ij43C7xr8xTz-pjXAc9irjAaFXA.roa (hash: TchsYLXYDpTrG6rR/zLX/7ji8qJkl2gfrI50UG67KC4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d4:e4:8a:f1:c7:19:55:fc:86:a5:26:13:03:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=874072934281e5d409c6709888205156327c0c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:05:36:4f:5a:c5:3b:33:31:7f:8e:96:25:
10:a4:66:00:6e:e9:59:03:0c:5b:7b:26:9a:7f:ac:
f1:e2:a7:78:81:5a:b7:ee:38:b9:48:82:f1:7a:43:
68:a9:f5:e2:86:6c:8e:e5:09:89:94:1b:80:f1:19:
15:b7:f4:8f:a2:99:5c:7b:d8:b3:48:7d:83:ba:ed:
b7:f1:01:9d:c9:a5:5f:3a:db:20:95:8a:6b:78:45:
03:55:10:e4:8d:fb:7e:95:ec:e7:54:88:a1:80:90:
ce:6e:f6:f9:18:61:c9:33:bc:e1:e4:ab:59:9f:32:
ef:73:06:28:1b:c5:0d:ad:06:ef:a4:3d:5a:89:d2:
81:f4:2b:a5:21:22:7e:5b:8e:dc:ca:11:38:62:0d:
19:68:ac:3c:b9:c9:2f:11:5e:b3:4b:37:6f:ea:b3:
ab:2b:7d:82:a6:65:ba:83:c7:26:f2:e3:4f:66:4d:
7b:5d:13:79:f7:c7:d4:d2:d3:dd:a5:e4:87:80:ef:
ac:3d:ae:43:5d:3f:49:c0:94:00:01:23:1f:6a:49:
2a:17:a5:54:bb:f6:ae:cb:05:ec:86:88:56:db:74:
b7:79:d8:94:d2:70:e5:27:46:a3:12:c6:3d:46:ad:
0c:cd:55:da:6f:5f:2e:7b:7f:5f:38:2a:fb:06:50:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:72:93:42:81:E5:D4:09:C6:70:98:88:20:51:56:32:7C:0C:10
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:48:3f:ca:ec:76:da:1c:92:e2:09:e0:b6:9c:34:2a:7a:1a:
0e:5c:b6:27:d0:33:75:36:ad:2a:87:14:ff:e2:4f:36:a5:7c:
4c:1e:ec:81:77:ec:7d:7d:46:48:96:1d:35:b6:e7:d9:34:2d:
3e:d4:f7:89:7d:82:aa:3e:18:a4:02:4c:b7:37:3b:4c:12:70:
b5:39:4d:bf:d2:a0:09:06:59:33:82:1e:ed:5c:69:eb:3d:42:
51:a7:42:f5:44:68:85:56:f0:56:a7:b7:98:60:45:88:c0:b2:
bc:a7:c3:da:cf:f3:2c:00:b5:9d:39:a9:4c:3b:15:b8:10:8c:
24:9b:ba:2e:89:4f:35:65:f6:fb:06:33:44:01:00:76:a8:fc:
2a:7b:ed:2b:70:f9:85:89:0b:fc:ff:56:bd:06:75:21:2e:46:
fc:67:d6:69:55:ea:bf:dd:f4:f8:c5:70:3e:c7:fe:b0:21:0f:
cd:c8:b9:2d:de:68:2f:f3:ee:cc:0e:a5:c1:13:d3:f3:e2:94:
e8:88:0c:29:96:43:c9:99:25:51:13:71:64:2c:e6:33:e2:03:
c8:12:2d:a3:fd:44:14:99:55:d9:cf:35:37:37:9a:38:9f:d8:
d2:b6:82:af:de:5e:94:c7:55:a9:d7:6f:b2:e2:62:84:f6:78:
57:45:93:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:59 2025 by rpki-client