Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: HtAS55FWvjcmFzdl7GyYY/5X1uzj4CpLNab/P3g8klA=
Subject key identifier: 8C:67:74:0B:FE:2A:4F:CB:F6:8E:B5:6D:49:DE:41:8D:86:5C:37:AC
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 0194BC3C8A3A364CC4C3757601B1C2E4A5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 135A
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: Ryp6xJbxiDlF7lwBbUfanmHExOpgrdS233VPd0hC3aQ=)
2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:3a:36:4c:c4:c3:75:76:01:b1:c2:e4:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=8c67740bfe2a4fcbf68eb56d49de418d865c37ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:db:2b:35:11:72:cf:f4:7a:64:75:51:8d:
cb:3a:9a:09:67:44:b3:26:e8:ae:43:f9:86:35:8b:
4d:4a:e2:fc:c7:1d:39:45:16:5e:05:e4:39:d4:1a:
f1:f6:a8:7f:dc:18:24:0b:db:c7:01:4f:bb:1c:57:
67:13:bf:ef:96:45:a6:2a:7b:fd:7d:a9:5a:99:7f:
3c:83:74:b7:e8:c8:96:5e:e8:1f:3b:30:e6:36:97:
bd:b8:f2:04:80:7a:98:06:bd:34:b2:1e:3c:ce:bc:
79:a0:5a:77:28:27:59:6b:7a:71:8d:19:57:98:01:
33:c8:8b:85:d4:ed:96:c5:a0:6a:77:98:14:81:18:
ed:70:87:09:0a:5f:0a:0c:62:6d:db:94:93:1e:57:
64:92:34:98:a7:60:ab:af:e0:a5:0c:80:61:65:4a:
63:bc:81:dd:c1:dd:2f:8f:93:b5:cb:81:13:81:8c:
1e:73:e7:09:48:ba:79:eb:63:57:7c:76:11:9c:f5:
7f:5a:85:10:7e:49:ae:4d:c4:cc:bf:d8:06:0e:2e:
d9:40:77:bd:b4:15:e9:88:b8:e0:f8:0d:63:4f:fe:
5e:be:8f:b2:e1:42:d2:6f:78:fa:0d:22:ac:4a:aa:
32:5a:70:97:a3:ac:7e:03:2d:27:fe:0d:62:64:fb:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:67:74:0B:FE:2A:4F:CB:F6:8E:B5:6D:49:DE:41:8D:86:5C:37:AC
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:81:3b:4a:c5:b1:c3:1f:bd:c6:e0:14:b8:8d:d7:61:d3:
c6:3c:14:6e:a0:41:13:5a:3c:17:28:88:63:89:ea:12:57:58:
ae:fc:ec:94:e1:29:a6:e9:2a:50:71:fe:59:8b:77:e8:70:61:
f5:37:49:38:81:01:76:89:9c:9b:fc:8a:98:e9:d2:57:21:fb:
88:c3:6a:87:d5:bd:88:2a:31:87:2d:c1:15:68:00:7a:12:3b:
43:f4:8b:71:2f:85:09:c4:b0:b1:b8:1d:f9:59:6a:12:1a:ce:
9f:c6:b1:73:c0:a6:c2:6e:20:6d:9b:95:8c:cf:c9:ff:cb:fa:
e9:3f:95:2b:78:d9:25:bf:1d:b4:32:1c:98:d7:3a:7b:4d:6d:
c3:64:48:b8:e0:2a:dd:ce:8e:39:fc:d9:4b:c5:75:e4:1d:2b:
08:37:6d:f6:af:c5:a4:4f:79:ed:b9:07:30:b8:90:c0:1e:08:
3a:5d:33:0a:7d:e2:52:e2:ad:34:7f:2e:e2:16:46:45:9d:ca:
a9:55:69:c0:13:f3:00:71:1f:fa:38:0a:d8:85:9e:40:a6:d4:
ce:90:fb:48:33:11:4f:88:cf:65:af:30:e8:34:f5:53:53:20:
e0:12:60:53:e0:9d:0d:07:aa:4b:7f:8b:05:3d:70:b1:0a:b5:
5d:6d:e5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:54:33 2025 by rpki-client