Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: t9A+39TsEw1n3GBv9lnV81YKeuRNJmxZgQi0cQsSzek=
Subject key identifier: 31:EF:E4:AF:4B:1F:FA:BB:DD:F2:AC:70:C5:E5:10:82:7C:5D:A3:6A
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 0194BC7300029DEAEE66D493D2D4FB495342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0523
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: L4Qb3hamkChPYzlozqsXSbxSD1RKS+/2LEqqWkGwLk0=)
2: xR2Kuj_X5JRY3WX_WqgPgukk9Lw.roa (hash: wP9kQODXoT56dWOB0bEFnWVWD/Y0ndzO5Fzna/QZSuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:00:02:9d:ea:ee:66:d4:93:d2:d4:fb:49:53:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=31efe4af4b1ffabbddf2ac70c5e510827c5da36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:32:b1:86:6c:07:ff:cd:25:07:61:bc:2c:
37:a8:d9:43:07:70:95:16:83:a4:e5:95:7b:11:9c:
b6:93:59:29:a7:f4:89:2e:b8:2b:32:55:35:1a:0b:
d5:55:a4:21:67:fe:19:4d:52:5f:4b:71:6a:4a:ea:
6e:c1:1b:d1:ff:4f:f8:c8:80:70:b8:99:bd:18:6d:
5c:8d:bb:2a:35:53:f2:b2:f4:03:91:53:3b:5d:ec:
96:d4:d9:c0:55:49:ae:40:47:f7:3c:bf:0d:ec:b9:
11:6b:29:75:ae:9b:f6:3d:9b:2e:6e:cb:51:6c:19:
06:40:c8:23:12:36:0f:cf:a2:3b:12:0a:1f:57:7b:
b8:0e:e1:b3:bd:cf:85:58:8a:3e:69:54:89:c8:06:
5d:05:77:36:f1:43:86:d6:ae:ab:50:48:0b:9f:7f:
22:a3:6b:75:da:56:90:c8:5d:9c:21:05:02:3e:f9:
47:ea:88:ac:1c:8e:e1:e9:2f:e9:f6:9c:e0:25:9a:
b7:2a:00:42:c1:6b:c5:13:ed:45:0f:e2:b3:2c:f1:
5d:e3:88:e2:a8:80:9c:62:8a:75:cf:73:c5:af:d3:
f7:0d:fb:d7:a3:5c:f1:cd:c7:4d:b4:f3:3c:6a:a7:
4c:88:22:a6:e5:6c:29:88:d0:13:6e:6d:66:18:6d:
53:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:E4:AF:4B:1F:FA:BB:DD:F2:AC:70:C5:E5:10:82:7C:5D:A3:6A
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:d3:25:55:44:ae:c1:24:78:ce:fa:54:e9:46:6b:09:9a:
a0:8b:17:32:63:8a:9b:7f:f0:e0:2f:9c:0d:26:50:cb:3c:a0:
45:7d:ab:66:4a:75:a0:6b:f0:46:ac:80:8f:aa:fa:f1:e1:05:
6b:1c:44:c9:46:dc:59:15:26:7a:ad:df:02:4a:3f:bc:ee:a3:
86:01:85:a8:42:b4:77:69:ec:08:eb:43:cd:9d:e9:e1:83:0e:
06:b9:4e:aa:7a:58:59:3e:23:21:09:e5:65:b0:df:81:c4:e6:
dd:21:56:6f:0e:f7:d7:ad:f8:db:53:d0:ce:37:f8:c7:6e:f2:
0c:16:5d:51:1b:80:c8:f9:1b:73:71:08:07:8a:1f:4e:6d:68:
c0:3c:da:bb:ad:08:f8:40:bd:7b:0f:d8:01:3b:04:bb:bf:a8:
e7:9b:fe:f5:bb:d7:b0:80:aa:35:1c:a7:d5:55:b8:70:c5:af:
6d:47:8b:90:53:e9:e4:a3:95:6e:c1:eb:10:1d:67:f4:92:71:
18:ff:69:36:bc:5c:30:d1:3c:a7:ae:d6:96:dd:a4:1e:90:cd:
a9:44:e3:b8:d8:7f:92:4e:4c:08:b7:10:ed:64:b9:28:11:27:
75:71:00:65:59:7a:9d:7b:d1:dd:c3:75:79:61:5f:86:99:ca:
db:5f:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:35 2025 by rpki-client