Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
File: 386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json)
Hash identifier: KBl7VplgM1DUgfGTgTUq0L3jL15h2Qok3atYbSmHR4Q=
Subject key identifier: 67:AC:27:99:DF:F2:48:A2:27:CA:32:DD:29:12:B2:E0:18:7D:FC:90
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Certificate issuer: /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial: 0194BBCDC8F37CAEB961C62F6C0DC5E4C090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
Manifest number: 0363
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: Qog6ul1XTCjjoco+491r2Xqv3BKeZbfOmwGnldtc8vw=)
2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c8:f3:7c:ae:b9:61:c6:2f:6c:0d:c5:e4:c0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=67ac2799dff248a227ca32dd2912b2e0187dfc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:72:4c:0d:fc:9f:03:32:59:24:1c:27:70:
d0:ab:be:10:59:d5:97:92:5c:83:44:2c:6e:1d:47:
7f:c7:40:cf:85:bc:e0:52:82:cd:f1:5b:cd:5b:03:
96:b5:c7:51:43:a8:e0:8e:b0:67:da:93:35:c4:9f:
31:96:df:8a:e8:f7:25:53:45:c0:1d:f6:08:69:45:
44:b3:d1:98:c9:ea:b8:b4:50:ae:c2:bc:80:66:42:
9d:42:b7:f0:82:b6:b9:19:cc:75:ea:06:d3:e3:9c:
5a:6a:21:8c:c4:a7:7c:ca:6f:eb:4b:a4:bf:47:cb:
2a:67:43:bb:3d:3a:02:ab:d3:14:11:7b:a6:d0:74:
6c:3b:45:7c:ec:dc:df:81:61:39:7d:73:e1:f2:85:
40:de:29:02:37:53:63:fa:e7:1c:11:32:e3:68:e2:
5b:91:a5:c0:95:0b:f7:07:e7:ea:cb:50:05:63:ad:
a0:2b:36:07:c6:3b:7e:28:92:1f:5e:2f:42:8f:70:
46:da:28:08:8a:b5:80:2e:87:81:10:1a:a7:17:94:
87:4f:24:ff:04:25:04:d9:6d:97:fa:d0:3c:7d:2b:
b0:e8:53:8a:4a:8a:4e:0e:06:32:66:d5:04:0c:c2:
4c:95:0c:60:ab:16:89:23:1e:dc:a9:72:0b:1f:17:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AC:27:99:DF:F2:48:A2:27:CA:32:DD:29:12:B2:E0:18:7D:FC:90
X509v3 Authority Key Identifier:
keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:aa:69:67:b4:b4:ac:1f:60:cd:a5:5a:8e:1d:72:c2:de:a3:
f4:70:11:7f:63:b0:d7:93:f1:f5:22:1a:93:9d:b6:8d:04:c1:
5b:1d:46:f1:dc:f4:58:6c:56:26:96:79:22:70:b1:19:12:ce:
3b:51:b7:4e:9b:03:e5:47:18:e7:18:56:e9:7d:12:fe:51:68:
32:99:03:ab:db:db:6d:67:b0:22:02:39:93:99:36:4b:fb:60:
29:be:1b:8c:fd:92:0c:49:0a:df:8d:b0:3d:b0:44:64:8b:15:
39:7b:33:05:98:bc:d0:a3:0c:11:ae:76:07:bd:64:ae:06:2b:
ff:37:38:98:63:49:0b:2c:b7:7a:73:06:b2:9f:43:21:3f:99:
ea:45:96:82:8c:1a:34:bd:9c:51:0c:31:6a:f5:25:fd:79:21:
b6:9a:58:3d:37:c4:88:f6:ed:4c:c9:e8:17:84:61:7a:c9:a1:
e5:da:e3:fa:3b:62:25:d3:4b:46:9d:a2:76:ff:01:b9:05:47:
6b:1f:b8:6f:d3:5a:69:83:36:32:15:79:13:69:05:3b:7e:1b:
e8:ef:ea:18:87:38:24:36:6b:15:de:66:0a:46:2b:d1:49:fd:
a9:a2:c8:54:b0:f7:ac:2c:fb:48:b6:3b:3a:d0:3f:f6:9a:b0:
f0:4a:d4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:27 2025 by rpki-client