Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
File: 3VShBsGZ81M-VritvPpLGsPmkJ8.mft (raw, json)
Hash identifier: UP8/C1YICXslOAe6OrI71Gsoz9iZelqX5/vmLqhk5FE=
Subject key identifier: 90:AC:F3:50:1A:F6:91:B8:68:E4:B4:E5:59:D6:BA:ED:7C:D5:C7:D3
Authority key identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
Certificate issuer: /CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Certificate serial: 0194BBCEEDA98D536242379F332322B1F2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
Manifest number: 06F6
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 3VShBsGZ81M-VritvPpLGsPmkJ8.crl (hash: Bi9agk3Q3wT2+CKp0uTP61d10LXWJRvX9aJWHKlRICs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ed:a9:8d:53:62:42:37:9f:33:23:22:b1:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=90acf3501af691b868e4b4e559d6baed7cd5c7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:b7:4b:e5:4a:1f:c6:60:2e:d0:60:45:f9:
b9:19:35:c5:b3:50:53:69:b3:e5:19:c6:29:c1:61:
8e:86:58:1b:1a:9a:67:13:11:b1:4d:1e:3d:98:1d:
e7:b4:42:b9:74:d4:a4:48:3d:1d:31:3a:74:9b:3c:
2f:9f:b2:7d:e1:f1:2b:91:05:7d:a2:8e:44:f8:fd:
b3:58:c3:12:ab:9f:74:48:fa:be:01:3f:74:f1:b2:
68:e8:27:60:dd:c3:27:45:7a:74:1e:47:77:69:3d:
2f:b9:75:8f:e8:3c:e5:7e:e7:22:1d:23:8f:6a:e9:
23:9c:81:51:56:76:0f:6c:34:ff:6f:27:67:c4:a5:
03:fb:f7:5d:0d:d8:a3:17:5a:63:e3:65:c5:d7:38:
00:93:04:50:df:06:c9:b2:cc:cf:b5:10:1e:6f:93:
1f:96:7f:2a:17:a8:a7:cb:98:1f:5b:8b:cb:bf:ce:
96:de:b4:43:f7:b9:21:85:ab:d7:d1:e6:c4:6b:13:
c6:fc:7d:0d:63:8e:e3:89:cd:bc:4a:a6:b8:cd:07:
65:e8:19:93:c2:95:f0:71:ea:7d:95:0a:23:b3:14:
4a:45:41:63:da:76:ce:ab:70:31:81:e2:f5:a8:95:
81:17:45:8e:f8:18:c7:a4:0a:7f:93:65:04:39:bf:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AC:F3:50:1A:F6:91:B8:68:E4:B4:E5:59:D6:BA:ED:7C:D5:C7:D3
X509v3 Authority Key Identifier:
keyid:DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:f4:8b:3c:e7:33:a7:be:28:52:30:e1:bc:94:03:c5:e3:
d7:79:10:59:3a:04:ae:68:da:b8:3f:3f:14:cc:5b:9d:59:66:
5b:42:77:ca:6f:77:2d:b4:d8:f1:40:ed:cc:de:75:0c:69:32:
2f:78:2c:21:70:c7:a8:ed:21:d7:c2:1b:d9:a6:67:cc:a3:df:
28:31:b2:a9:59:03:cc:d8:38:8b:6e:39:fc:8b:fb:0d:13:d4:
fb:fa:2e:96:21:70:a4:fc:1b:c1:c8:01:90:d5:e7:a4:c3:5d:
91:a1:0d:91:5b:6d:b6:ae:6f:82:41:77:01:6e:79:0b:18:20:
20:8b:79:64:a8:02:51:0a:fe:fc:ad:de:a5:ad:06:e5:3c:e7:
4b:7a:b1:e6:5b:24:f4:b6:52:ce:f9:03:8a:29:21:a7:a6:11:
ff:8d:1b:14:9d:e9:54:77:13:29:60:c5:60:a1:c8:9d:ca:1e:
b1:d8:d0:c2:6e:4e:96:ed:91:38:0a:e1:ad:0d:50:8c:8e:99:
bc:52:f4:f9:7d:97:d2:31:8d:3c:7d:4c:6c:5f:4c:09:9a:e1:
b9:c2:ac:f2:d7:a7:73:77:88:58:67:f7:7d:62:62:bd:87:1c:
48:c2:ce:1c:63:51:23:f9:93:34:d7:62:fd:1c:df:2b:e1:ed:
f1:1b:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:47 2025 by rpki-client