Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier: 4a+fz0BOXxjF7Cgsx4B48bWT5QwYMhkKJ8do/hm023o=
Subject key identifier: B3:3E:F8:D4:1D:97:C6:E3:D3:2A:B0:BA:AD:3D:12:1A:04:4D:C8:96
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial: 0194BD17C49921E906EB4CD12F70F24FAEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number: 030E
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: /exclCKETr6IPeXpT9wYIGuzKOAKgAeVtHunAjJdzS4=)
2: 7SUWhLqE8A7qWiGUQfWRk3P7j_k.roa (hash: vr+ZGiswiHAuEM9htC6Hmt6v0+gW2jHUeuGOqHmqzNU=)
3: vmUg0yzYcnRJZC2n9pSGw6JlB2A.roa (hash: f45/pAD/SVLyT8PSsTHGZFNyd/9e/fwYtYXEyg22gkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:99:21:e9:06:eb:4c:d1:2f:70:f2:4f:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=b33ef8d41d97c6e3d32ab0baad3d121a044dc896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:3e:41:ca:76:45:fd:1a:16:a0:be:bf:67:
2c:0e:30:e5:4e:b0:3e:b8:63:91:94:bb:38:2e:21:
69:3e:25:99:b5:d1:47:20:c1:f7:0a:7d:5e:05:de:
fe:1f:92:44:f3:48:07:f0:16:31:76:1e:bf:e8:c5:
88:76:78:02:fe:4b:49:dd:68:c5:03:2b:aa:db:c0:
40:8e:33:26:4f:f9:8c:57:15:a0:90:2d:d3:7c:95:
f7:29:db:a5:73:6f:78:d2:3c:30:6b:00:0c:ba:bf:
37:49:35:5a:92:8b:87:08:bc:f3:51:6c:68:bd:10:
fd:dc:ef:cd:f7:37:20:50:aa:67:05:5c:48:96:9b:
6e:9b:e7:b7:11:69:c5:ee:4a:44:7f:f3:28:55:da:
4c:14:79:ba:90:78:75:8d:92:33:6e:1d:c8:d9:6e:
3e:f0:d0:e2:1f:a2:a4:01:92:b5:34:e5:9c:b7:0b:
42:54:c7:36:f1:67:94:5f:7a:23:ab:9d:55:2d:c3:
08:12:a9:af:8d:1d:66:de:2b:6b:de:ba:cc:23:61:
4b:11:f8:5a:c9:a2:ad:78:1f:53:22:d2:5d:a8:55:
e7:ac:e1:d3:2a:51:ff:8d:81:77:41:ba:d9:32:64:
f8:64:ae:0f:49:fc:23:31:fe:ab:6e:45:4c:c6:6e:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:F8:D4:1D:97:C6:E3:D3:2A:B0:BA:AD:3D:12:1A:04:4D:C8:96
X509v3 Authority Key Identifier:
keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:59:ae:1f:1f:1b:3e:69:9f:70:92:e7:d6:38:df:0b:88:41:
a6:ef:a7:bf:fd:a2:c3:bb:df:b7:62:8f:94:e6:b7:a6:dd:a5:
57:7f:24:cb:b0:db:43:48:fb:3a:59:5a:db:b3:77:74:c0:37:
72:2c:f2:ab:87:91:97:3f:06:22:50:92:d7:d2:d6:83:2c:ad:
c7:81:5f:a2:fb:06:dc:b2:bb:10:79:51:0f:09:55:10:39:ce:
c7:26:f7:ce:f6:f2:56:df:33:32:25:ee:a9:f7:66:4f:be:63:
ce:2a:e3:52:ce:c1:b5:fe:f9:a7:fc:71:f3:42:6c:6e:80:a9:
e1:b2:d5:68:e7:bd:2e:10:1a:f1:12:0d:cb:02:4c:41:05:d5:
29:b6:37:c4:12:ab:ee:f7:f6:9a:e6:12:18:7d:e7:2d:7b:ca:
8f:be:89:7c:67:cd:21:d8:d2:50:66:d0:09:4c:fa:4a:75:7c:
f3:86:a7:26:81:54:dd:9d:87:82:8b:74:e8:28:9a:b0:d5:28:
8e:73:13:c7:68:ce:c0:bf:bc:dd:3f:0c:ec:a8:b2:ac:49:ad:
b5:9a:f9:90:41:70:da:65:6c:4d:57:cd:0f:5c:23:8a:80:67:
ac:37:f9:7d:2a:20:be:d6:16:5c:ec:1c:68:85:c3:3c:cc:c4:
49:9e:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:33:45 2025 by rpki-client