Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: VEfDJfuqbMbCq2NXi5siKGZDZzE3mOhYKev007r8qdc=
Subject key identifier: 03:3C:8F:DE:D2:48:A3:3D:83:52:53:7F:A5:E6:22:F9:46:4F:D4:C6
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 0194BC733836A4A60A70E54A94DE11FF3157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 013B
Signing time: Fri 31 Jan 2025 13:00:55 +0000
Manifest this update: Fri 31 Jan 2025 13:00:55 +0000
Manifest next update: Sat 01 Feb 2025 13:00:55 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: /DnQWPY+Sn20IJS3ceAIMcMji0v4fhfZS/0j7mo8tVA=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:38:36:a4:a6:0a:70:e5:4a:94:de:11:ff:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Jan 31 13:00:55 2025 GMT
Not After : Feb 1 13:00:55 2025 GMT
Subject: CN=033c8fded248a33d8352537fa5e622f9464fd4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:2f:e3:f0:fe:70:d5:c0:7d:6b:c1:48:6f:
4f:53:8a:cc:9b:89:ae:94:36:94:3a:d8:18:11:5f:
8b:9a:8a:4f:b7:2a:d9:f5:22:4a:18:52:3d:a2:ea:
8f:f8:a9:ae:4a:77:f6:cc:e8:66:ef:e2:e4:d4:bd:
8e:40:d3:b0:23:ef:12:ac:e3:40:8d:1a:43:d9:92:
a9:52:44:dd:e0:0d:e8:f6:a1:b9:6b:27:3e:50:e1:
b0:f2:c4:32:c7:45:ce:1f:c8:21:ef:99:fe:9e:7c:
d4:9a:49:e7:93:de:66:68:a0:e0:a0:7a:1f:80:d9:
46:7c:5c:68:c9:67:f4:6e:0b:c3:7f:e5:86:2d:d6:
a2:91:6d:b4:5b:ca:79:47:5b:b3:14:ee:e3:a6:5b:
98:74:af:4e:2d:1a:74:46:27:3e:39:9c:de:45:61:
ee:f1:da:0e:8f:91:22:39:a9:15:2b:dc:cb:18:48:
4b:4c:56:ca:13:fc:47:bf:2c:db:d7:9d:21:57:5d:
92:52:0c:d6:bd:0f:16:7c:90:13:2e:ef:55:a6:71:
99:51:a2:60:10:1d:99:fb:c7:aa:92:3a:de:e5:3d:
a3:86:45:0e:d3:e6:84:b4:45:b1:24:77:33:6d:ec:
0f:ba:6d:2a:98:14:de:13:5e:9d:c6:98:a3:ff:12:
40:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3C:8F:DE:D2:48:A3:3D:83:52:53:7F:A5:E6:22:F9:46:4F:D4:C6
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a2:46:9b:2a:dc:99:97:4d:dd:5d:02:2b:a8:f1:7f:52:a0:
53:36:d4:e5:16:26:38:c2:de:04:5c:9a:6d:07:50:a9:27:eb:
15:21:b5:92:39:c6:72:81:52:9f:f0:a4:5a:21:16:eb:5e:1d:
3d:40:6a:b8:9b:93:a3:54:6e:a7:38:30:fb:f3:88:b0:f5:dc:
86:7d:86:c9:1d:ee:67:76:74:8b:7c:b6:56:ea:0b:e3:20:1e:
8e:7a:94:3a:85:b4:b5:1f:65:63:c7:2f:c5:ef:65:f5:98:4c:
0b:1a:ac:77:0c:c4:40:1d:e0:5b:ea:0c:91:d9:26:bb:2d:1f:
51:0b:45:87:78:df:b4:c8:f7:99:0b:e1:14:0c:2a:40:2e:64:
d4:a5:5b:f2:9d:08:d7:a4:29:2a:dc:fe:15:84:c6:ce:55:c5:
12:a3:b9:15:90:02:b9:65:66:44:6b:12:cb:39:03:6f:95:33:
25:b7:b9:23:17:b8:14:df:40:bd:86:b7:21:3c:cf:85:50:79:
59:2d:36:91:68:6b:b1:88:e4:90:94:f6:05:0a:95:dd:f6:e6:
95:2c:6c:a5:e0:ba:52:b8:18:d0:65:6d:ac:a1:0a:6e:62:3d:
d9:7a:07:b0:f1:09:66:95:89:18:04:d9:d3:5d:57:ba:89:03:
22:a3:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:22 2025 by rpki-client