Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: AyqJVcBtCOZu0prdgEeMZAmWX66t06R0+B6DCwnWoaw=
Subject key identifier: 3A:EF:E8:53:20:B9:E1:FC:FD:15:A9:1A:E9:A7:B8:FF:81:70:E9:42
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 0194BCAA2A88EA7965945838D812128A3CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 10EC
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: cFq/u++GCG9spu+GgmJBRx4BvUlUBEYFdghXLDq2uwU=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:88:ea:79:65:94:58:38:d8:12:12:8a:3c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=3aefe85320b9e1fcfd15a91ae9a7b8ff8170e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:fd:60:47:90:10:38:76:7b:9a:6b:ff:c4:
fd:2a:52:d0:c5:99:0a:8d:7f:27:82:b7:ec:e6:7e:
07:62:c4:26:65:9e:db:9f:48:23:38:c3:09:18:46:
1c:35:a8:be:b4:e9:94:5a:74:ec:b9:d9:93:9c:c5:
37:be:84:b6:1f:13:02:e3:b4:c4:73:23:06:2e:b5:
ee:77:c8:87:b8:6d:e4:2b:d3:2f:28:a4:87:12:2b:
61:d1:89:63:45:75:97:d0:b3:69:cc:9a:50:64:cb:
15:02:93:1d:97:55:52:d9:55:d2:1e:a0:3e:d6:2a:
30:db:3b:8e:ca:64:16:a6:a1:27:a3:ff:98:91:ae:
f2:83:83:0e:dd:45:e7:e7:5a:60:43:1b:1a:ba:86:
93:f0:f5:02:28:67:d7:4e:85:7e:07:b3:82:b6:7e:
58:81:2e:08:79:82:a1:2f:13:d0:60:c2:33:29:fd:
32:37:93:25:19:43:ed:01:89:bb:dd:76:23:16:02:
6b:89:65:63:da:95:2d:fc:75:48:4b:ae:25:cf:10:
ce:20:86:e8:a8:65:2f:d7:94:f0:94:4b:44:ea:5e:
ea:b2:24:15:75:0e:f1:59:4f:9d:38:bf:c8:f7:a2:
86:9d:18:9d:50:ba:bc:0c:b4:1a:24:b1:c4:3e:44:
fd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EF:E8:53:20:B9:E1:FC:FD:15:A9:1A:E9:A7:B8:FF:81:70:E9:42
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8f:4f:d2:06:ba:88:13:9f:79:a0:e7:f2:82:c9:a3:c4:7f:
13:c2:5a:70:a5:f7:7d:4e:bd:db:96:0b:a4:ab:bb:12:a3:1b:
31:f0:6e:59:bc:25:a9:ef:fc:73:f0:bb:1a:b2:2e:a7:5c:38:
37:b3:6b:aa:9b:81:e7:93:1b:bc:3c:8d:3e:ac:40:d0:fa:e2:
69:7a:84:5c:a5:83:64:5c:56:4f:57:16:d2:e3:a3:5c:01:cd:
05:e7:9d:c0:6c:74:dd:59:2d:31:7c:fb:22:80:9d:6a:5e:6b:
0c:7e:6b:bb:44:1d:3d:f8:91:80:7a:1e:e1:31:86:82:a3:72:
2d:a2:78:ee:41:fb:8c:e9:6d:d6:89:8f:d9:f3:88:04:99:ab:
6b:17:98:39:b3:71:d2:ca:1a:32:d5:55:2e:e3:79:9c:f4:71:
28:6c:31:a2:bd:d3:bf:4a:8a:46:eb:cd:5e:73:64:8e:80:6c:
a5:9c:59:4c:ca:ca:b6:15:f3:13:56:49:cc:fe:22:e3:21:ea:
5c:42:90:03:ca:1f:6e:a5:b8:c8:04:ff:10:ee:7e:0c:cb:28:
90:90:d1:b5:a7:50:12:4d:de:52:ff:3d:39:e6:97:33:11:94:
dd:f8:f5:d3:5e:f4:75:40:b5:d3:bc:d0:28:12:e0:ec:a9:bd:
26:db:be:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:26 2025 by rpki-client