Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: +saKkAQhz+E0qJxbAanH2rI5CpTQpFaa8SWDtxtk0z4=
Subject key identifier: C0:79:3F:09:77:E8:1D:A5:AB:6C:F5:5E:43:AF:F9:D3:DC:B9:DE:68
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 0194BD8556A0C9A187F1BF561EBA5FA15742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: pgonmmDx1jQ7hqTEFauuMs/R/1CU+bqM0ndqu42vMtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:56:a0:c9:a1:87:f1:bf:56:1e:ba:5f:a1:57:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=c0793f0977e81da5ab6cf55e43aff9d3dcb9de68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:9e:28:86:cd:24:20:e9:4a:e2:dd:67:51:
b3:18:dc:7a:47:80:4d:a2:75:bf:0d:77:82:58:14:
55:aa:25:ce:94:99:9f:d4:e1:a2:4b:ce:a8:ef:09:
15:8b:ad:c9:f6:3e:96:e8:bd:a9:67:1f:9c:5c:a0:
86:2c:b2:9d:ab:e7:54:55:b2:88:72:42:83:7e:6a:
71:6e:00:df:c2:c9:37:35:cb:be:c2:fb:ba:c6:6a:
3d:32:f9:fb:a6:d4:e5:d4:da:c2:1b:80:51:d6:7b:
f2:22:27:69:ae:bb:41:6c:8b:07:fe:00:8b:8c:42:
06:e6:9a:d8:f8:72:cf:d0:0f:1f:07:62:1b:a8:50:
c8:c9:bb:31:44:45:d0:a8:a7:9b:03:4e:89:73:62:
c3:63:57:74:d9:5a:ec:65:7f:1b:0f:e0:dc:52:e9:
4c:c9:bf:1c:1d:ab:f8:fd:54:fa:d8:9c:b6:a8:07:
4c:94:6e:70:72:12:9b:40:df:3e:22:d9:18:54:f6:
b6:9c:b1:f8:4c:6d:d9:96:ab:0f:25:c2:03:ed:4c:
28:35:f8:e0:e0:7a:57:9f:08:b2:3b:f1:05:5d:60:
9f:9c:c9:2f:fd:e4:b9:65:7c:8d:95:f4:72:39:e1:
47:f4:a0:5a:9e:39:0e:db:86:b9:26:b9:81:68:a8:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:79:3F:09:77:E8:1D:A5:AB:6C:F5:5E:43:AF:F9:D3:DC:B9:DE:68
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:be:ae:69:ff:14:1d:d2:8b:d8:cd:cf:c6:cd:22:79:93:7b:
c4:d3:a1:8d:b8:ba:8f:b2:b0:da:53:ea:42:de:50:e7:80:af:
3c:a7:33:b8:c8:1e:65:e8:e8:ab:f0:e7:57:2c:68:55:80:49:
b9:84:66:38:1d:e9:8a:8c:15:84:af:48:e4:ed:61:62:be:1e:
32:12:d8:94:31:3e:ff:3e:a7:40:7a:6a:b7:85:50:3a:e5:2f:
24:a4:68:89:34:bb:4d:dc:70:2a:cd:37:99:74:5c:57:a5:4a:
44:e0:db:ea:97:7f:e0:60:2e:7e:43:fa:cd:b8:f2:0e:a4:dd:
65:e0:1e:ff:b1:19:40:4d:16:1d:87:e2:a2:25:08:86:81:db:
78:3d:7a:69:32:a8:af:81:39:64:31:17:8a:72:bc:87:96:49:
e7:05:22:de:3c:f7:ad:5b:95:38:65:05:0a:8e:25:fa:ea:06:
32:27:23:56:1d:82:c8:b0:04:21:b2:81:b4:f8:b4:41:50:32:
55:66:9b:a6:63:ad:99:b0:00:59:05:51:f6:cb:19:4b:2d:34:
bc:09:01:bb:2b:30:49:56:29:8c:ca:ac:97:0b:53:58:24:43:
f1:57:ae:88:38:d2:3e:1d:6f:68:d4:65:36:f9:3e:a0:a0:3d:
90:51:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:02 2025 by rpki-client