Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier: rFElXf9kUC1gOia9Wrk14EtcZpF0b+fEut8dmA00uJs=
Subject key identifier: 73:E7:8A:E3:E9:FF:27:0B:FB:2C:74:14:E5:F5:80:06:10:E2:4F:AC
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial: 0194BCE0D2A7369E3E78717720B944119E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: Y2zBekjvj7ERw43/IgYz5Fmwpyx1xzAJ3UaVBqjk0KQ=)
2: fl1IqJ22OZD_5WNed1aOqRFU-dQ.roa (hash: Kuo9lPYONUc1nk6pXtWGALeHz/jfanabaBDCbZ+GeWY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d2:a7:36:9e:3e:78:71:77:20:b9:44:11:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=73e78ae3e9ff270bfb2c7414e5f5800610e24fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:ed:83:2c:de:87:49:ef:60:8e:26:2c:f3:
31:ab:8e:b8:11:41:5d:8e:99:5c:04:9b:06:0e:77:
51:a2:a6:69:55:7e:38:50:b4:18:80:f0:1c:a2:e3:
6f:0e:a2:9a:cf:24:aa:01:fb:b8:81:5d:e6:b1:82:
07:48:af:04:a1:01:d3:55:06:fb:a0:cc:70:56:49:
fb:b8:51:bb:bf:5c:58:4a:7e:8e:fc:3c:e3:c9:ae:
a6:1c:fb:e5:ce:fd:ef:74:03:36:43:db:75:09:3e:
d0:9c:14:57:e2:0d:b9:0c:cd:a9:81:bd:a3:92:36:
69:b7:5e:85:17:fd:f8:61:b7:49:48:fc:19:73:a5:
e7:71:bc:49:c8:78:35:26:96:0b:aa:28:c0:09:59:
86:23:ac:02:f0:dd:ad:0e:73:83:61:69:2b:29:a0:
3e:ab:ac:72:3e:b4:51:bd:fd:f3:2e:da:55:fe:e1:
6e:85:70:6a:fa:77:c5:ff:b0:9c:7c:d4:7b:26:fe:
11:3b:db:51:c7:c4:d6:f0:41:3f:58:c7:9c:38:69:
b4:ad:0d:22:db:79:fb:a8:c9:2d:26:b7:b4:47:80:
cc:7f:f0:1e:4c:e2:2b:15:8b:8e:c2:34:71:43:80:
16:55:c9:27:c0:8d:53:bc:a4:de:48:f6:5a:d1:5b:
d2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:8A:E3:E9:FF:27:0B:FB:2C:74:14:E5:F5:80:06:10:E2:4F:AC
X509v3 Authority Key Identifier:
keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:e9:77:98:25:89:67:88:63:9a:8e:53:7c:81:ba:69:44:
49:6b:61:28:08:c9:e7:be:62:6d:7f:a5:77:c0:68:e3:cd:b5:
dc:79:06:59:0e:e2:56:92:88:1d:06:f0:df:e4:c6:f3:ac:0a:
1a:a0:f8:fc:44:9f:da:db:c6:50:c5:b6:71:0d:5f:52:7a:1e:
e4:d9:84:a1:a0:94:30:1e:4a:94:6d:d7:95:b9:f6:27:14:c0:
46:02:cf:bf:f2:20:bd:48:57:96:1b:cc:44:12:35:a8:dd:79:
28:0b:ea:66:f0:7b:1d:99:3a:f4:fb:1e:80:9f:cd:3e:3e:46:
8a:0a:06:d6:2e:a6:23:e6:d4:80:e4:2f:26:de:7d:79:0a:00:
1e:06:6d:5b:1e:0e:6c:d4:aa:ad:a2:2d:3d:d2:d2:d7:18:79:
15:02:82:d2:f6:81:e6:f8:e9:e9:95:ac:ef:67:e2:85:c4:0d:
5a:b4:27:7d:36:6a:4c:fd:b5:bc:bb:ef:af:62:d7:9a:c5:f6:
21:9b:c5:6b:cb:55:21:a2:ec:bf:16:93:7a:15:e2:cb:40:c2:
bb:de:0a:09:a2:58:5f:a7:86:52:e7:81:db:75:14:da:ca:cd:
b1:23:24:00:0b:e7:09:dc:93:e3:82:58:63:22:13:a6:73:5b:
ec:75:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:19 2025 by rpki-client