Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: Vcrq0AwuOqFOiI7eQT6cPr+daqXGxuyhUE7VApXd8bA=
Subject key identifier: 3C:1C:61:6A:84:65:74:A3:1E:03:3E:0D:55:BD:39:90:BC:F4:3E:DF
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 0194BD17894D61B817BFF99F5D2578DD96A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 03D5
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: rxtJ/5sIgdH/QhzvO3ivb0IASTT/tQEtAWIFjKPDHqA=)
2: _CsObP4Ze3uU9K2w6CdOR8S59eQ.roa (hash: 1vz8OL2ZT6+f1AOzld1JihOzraesTCmal5gPezTDoY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:89:4d:61:b8:17:bf:f9:9f:5d:25:78:dd:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=3c1c616a846574a31e033e0d55bd3990bcf43edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:47:ab:05:ec:84:6a:df:df:91:95:23:f2:
d0:89:c3:ce:a4:ad:b8:29:a7:10:9f:cc:55:49:97:
ef:23:05:fc:9a:43:25:c5:bb:c4:bb:8f:d1:a3:b1:
1b:7a:e8:5d:59:9a:a2:1b:98:f2:0e:bd:47:e8:f4:
50:88:ac:f3:41:f0:20:df:33:5a:b6:81:1c:c8:64:
9c:04:e9:9e:fa:56:7a:34:ad:7b:15:f4:f6:73:5f:
fa:bd:cf:3f:98:f6:f7:7c:3e:bf:90:9a:b0:52:4f:
31:07:4c:23:e2:22:21:67:e9:4b:4d:81:da:1f:b9:
25:a8:ca:b0:26:de:9b:f8:5d:ca:42:e7:e6:ea:31:
b3:4a:b8:d4:8b:a9:5d:42:d8:de:60:96:00:1a:fd:
0a:2d:13:92:73:fd:5d:54:08:dc:ad:7d:89:81:33:
3f:7b:56:04:88:74:65:22:15:ab:a7:6a:27:39:00:
9c:cc:1e:e6:68:35:d7:cc:65:ca:1d:67:27:de:eb:
15:70:fb:64:d9:5a:88:63:8d:17:21:fc:40:fb:06:
24:ca:94:17:12:1b:cf:5d:ab:27:10:0a:8f:24:83:
88:52:a3:b3:f3:65:25:12:d6:08:10:d1:97:ef:c5:
f0:27:b5:96:02:bd:39:cf:79:04:18:06:1e:4f:e4:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:61:6A:84:65:74:A3:1E:03:3E:0D:55:BD:39:90:BC:F4:3E:DF
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:73:23:6a:0f:29:2a:3c:59:8d:27:b9:3a:5a:fe:7c:9e:0e:
30:e7:82:b6:c9:09:fa:a1:47:8f:17:bf:40:68:8f:fc:8b:d0:
61:f3:d0:25:b5:0c:cc:91:bb:11:4f:a6:9e:ba:63:10:c2:cf:
88:28:d1:16:0d:06:77:02:de:aa:b8:17:42:c3:3c:aa:ee:14:
8e:04:f1:87:d1:df:41:27:71:a4:50:c4:77:3b:77:ee:02:4e:
aa:0a:ef:fa:8c:b5:5b:20:2a:a3:52:54:57:3f:6f:62:f0:c9:
ea:8b:3d:32:ca:7a:58:8d:dc:5c:2f:a0:06:17:68:f6:65:6b:
46:33:45:36:05:8f:9e:e6:c8:0c:b1:a9:c7:32:3b:96:07:53:
f7:18:4d:a4:76:14:b5:8d:3c:21:38:76:f3:f0:6f:2a:2f:95:
78:05:61:da:14:9b:fe:76:55:8c:b7:b1:dd:78:55:3c:c6:3d:
51:52:84:eb:e5:51:2b:1d:a2:71:f4:1b:96:57:80:95:b8:e4:
8e:bd:65:66:5d:82:9b:88:7b:05:8a:c9:72:75:61:ac:e2:97:
9f:b6:6c:73:32:1c:c5:34:80:fe:95:0b:04:5b:eb:6e:e4:b8:
99:1c:40:8e:f1:2c:11:f6:0c:cf:0c:f0:3d:55:03:f3:fc:4a:
ca:8b:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:08 2025 by rpki-client