Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
File: is3dXDDVgOsP7soqFs9cWoslaP0.mft (raw, json)
Hash identifier: xuMtXPEYsAnkrivVeVmKvSyGftrNzCEKW8y/ZCqZw8M=
Subject key identifier: 93:E3:AD:30:5A:48:50:4A:3A:6F:0D:38:30:08:1E:F2:82:A1:6E:6D
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial: 0194BCE06634D26A2BD709C9966861286292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: 1-BU0QGGPOY6StLl6EjdaPUoRp0U.roa (hash: YErgeEfB3mK/ybWEoY6pFZ+o+6uteNHWASk7smyhzI8=)
2: is3dXDDVgOsP7soqFs9cWoslaP0.crl (hash: csj80+EN1DaOORMAMdZztB6iugUlnIM8wDzE3TfLoIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:66:34:d2:6a:2b:d7:09:c9:96:68:61:28:62:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=93e3ad305a48504a3a6f0d3830081ef282a16e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:43:65:bd:40:88:50:a7:66:39:ca:ba:1e:50:
f8:4a:38:37:b3:79:71:0c:6a:90:24:ac:7d:30:1b:
d3:ef:17:a6:0a:a9:e8:bf:35:d7:c3:b5:fe:a7:18:
53:94:27:f0:fc:a1:c8:9c:af:c5:50:9b:fd:ca:e9:
97:ae:6d:2b:d7:40:47:cb:5a:b7:d8:a7:c5:ca:14:
89:3b:c2:53:0d:d5:83:26:b8:7b:37:27:e4:81:54:
cc:3e:67:98:00:99:28:6a:77:a2:eb:94:cc:7b:87:
dd:9b:1d:f6:a8:b1:45:b8:ef:47:c7:de:d3:14:05:
6e:32:bb:5a:61:0c:39:eb:8a:4d:3d:42:e9:62:3d:
e2:e9:34:5a:41:31:39:6d:f0:93:88:42:c4:f6:bf:
ef:c1:d0:e6:e6:6c:cb:74:5d:b0:60:98:c2:b6:77:
12:8e:c0:25:49:10:c9:2e:28:3c:ea:10:05:41:1a:
ac:c9:14:58:7c:b1:52:34:89:0a:43:d9:d9:59:69:
05:1e:32:22:d8:64:30:55:bc:80:15:f9:b7:8d:83:
ed:9c:70:5d:0c:81:ce:f3:be:4d:5b:bc:57:2f:a9:
bd:11:ac:c5:7b:3c:36:e9:5d:71:7c:ee:8a:e0:42:
4a:5f:cf:b6:ed:05:27:5c:97:08:11:67:0c:21:78:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E3:AD:30:5A:48:50:4A:3A:6F:0D:38:30:08:1E:F2:82:A1:6E:6D
X509v3 Authority Key Identifier:
keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:47:2a:3e:07:a8:9e:7b:be:97:97:de:4e:f0:48:8a:ae:d6:
25:08:b0:6d:1f:06:4c:0a:7e:d7:ae:1b:8c:45:d5:db:77:a2:
25:8a:fa:7d:60:f1:e8:57:d0:83:43:b8:56:c2:48:15:e2:c1:
39:63:5e:5b:3a:19:e8:0d:7e:d2:29:82:c9:db:f8:f4:74:79:
d9:a8:51:91:43:ab:df:f9:40:1e:32:08:9c:45:6e:72:25:d6:
7f:df:8f:fc:c1:c5:38:41:13:e6:bc:c6:aa:28:3a:92:a1:7d:
c5:f6:99:3d:c6:ae:fd:5c:e0:c0:8a:f6:71:04:ce:f9:cf:e5:
04:31:3e:a8:a3:ce:63:3e:86:b9:5e:5e:de:39:56:81:c0:d5:
2f:4c:39:61:60:0f:5e:ea:91:7b:70:94:46:0d:2d:ee:64:5a:
2b:38:be:4f:14:f1:7e:97:b9:03:0e:ce:34:f1:f9:ab:9b:b2:
52:04:2f:b6:dd:f4:9e:e9:c3:e0:03:cf:aa:4e:05:aa:4e:e1:
90:da:e1:4e:f6:aa:fc:74:c4:ca:44:e7:54:18:41:1a:75:30:
bf:a7:06:91:b5:ca:2f:11:22:18:da:e7:cf:92:8d:94:9f:f1:
a9:5a:f8:4f:6c:9c:a4:25:d2:b4:34:21:df:90:b2:a2:4d:42:
d4:33:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:00:55 2025 by rpki-client