Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d2749d-f773-471a-aca3-618d95fe3901/1/r39NEPAZQ0EHs7XcU6yakZjFxH0.mft
File: r39NEPAZQ0EHs7XcU6yakZjFxH0.mft (raw, json)
Hash identifier: Mq8IsQqUKaKT3Do6AigsZ1ExEw2+HgA253y2qprX/U4=
Subject key identifier: DC:34:7F:50:D2:98:79:0D:BA:8C:0A:A4:DF:04:B7:BF:16:D7:44:5A
Authority key identifier: AF:7F:4D:10:F0:19:43:41:07:B3:B5:DC:53:AC:9A:91:98:C5:C4:7D
Certificate issuer: /CN=af7f4d10f019434107b3b5dc53ac9a9198c5c47d
Certificate serial: 0194BC72D7ACA90350B29A59B4D8A14B5D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r39NEPAZQ0EHs7XcU6yakZjFxH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d2749d-f773-471a-aca3-618d95fe3901/1/r39NEPAZQ0EHs7XcU6yakZjFxH0.mft
Manifest number: 0C19
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: r39NEPAZQ0EHs7XcU6yakZjFxH0.crl (hash: XRWiyQUsC+7Z4qeyvb87/yNrAY9Y64bQLeeFe64Ih+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d7:ac:a9:03:50:b2:9a:59:b4:d8:a1:4b:5d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af7f4d10f019434107b3b5dc53ac9a9198c5c47d
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=dc347f50d298790dba8c0aa4df04b7bf16d7445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:23:51:67:29:ac:df:3e:1c:5b:cd:14:57:
bd:cf:d4:9f:a6:6f:b6:2e:a3:9a:bd:92:13:68:57:
a3:f0:3a:1c:b7:8c:4c:cd:d6:f0:8f:bd:d0:68:61:
07:81:dc:68:62:e3:58:c2:d2:be:86:91:37:0c:19:
53:29:b0:71:46:ef:17:80:3b:28:3d:d6:eb:63:ff:
3f:8e:4d:d6:83:83:3a:ce:30:ee:48:ef:1f:6f:f9:
5a:d7:29:9e:8d:38:77:22:ef:de:dd:8b:5e:fd:07:
a5:0c:40:73:f9:9d:f1:61:ab:82:ab:7c:3e:40:94:
51:cb:2c:cc:d9:4f:56:37:60:1d:a1:70:52:46:0f:
f3:a3:06:5b:a1:1f:b0:fa:5c:01:8d:d0:af:1f:97:
10:e9:9c:16:5e:e7:1f:54:cb:24:8c:d7:ee:80:7d:
e8:6b:39:d7:53:8e:7f:6d:29:77:fd:b4:59:16:06:
77:22:74:67:d6:04:06:ae:d8:77:76:47:0c:6d:7d:
24:50:8b:07:c5:e4:4f:32:60:96:c1:2c:1e:34:e0:
28:e7:90:b8:c2:19:cb:3f:99:51:af:f9:b2:8c:47:
81:c3:a7:d2:f7:15:cb:d7:cf:1f:38:a8:76:ae:b5:
c1:d8:7a:75:b1:5b:38:fd:e2:39:ec:f3:d7:c8:a9:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:34:7F:50:D2:98:79:0D:BA:8C:0A:A4:DF:04:B7:BF:16:D7:44:5A
X509v3 Authority Key Identifier:
keyid:AF:7F:4D:10:F0:19:43:41:07:B3:B5:DC:53:AC:9A:91:98:C5:C4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r39NEPAZQ0EHs7XcU6yakZjFxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d2749d-f773-471a-aca3-618d95fe3901/1/r39NEPAZQ0EHs7XcU6yakZjFxH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d2749d-f773-471a-aca3-618d95fe3901/1/r39NEPAZQ0EHs7XcU6yakZjFxH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d7:f5:91:fc:b4:6e:90:2f:e2:6c:fa:57:cb:2f:7e:8e:ef:
59:d9:25:e1:d3:09:77:3a:5a:dd:b2:ca:20:eb:ec:b4:bd:8b:
87:ab:0e:25:c9:e5:0d:91:89:d9:c2:27:a8:f1:22:cb:f7:d4:
c4:25:61:89:ce:11:ca:01:46:c9:5a:02:1a:0a:05:bb:7f:85:
69:cb:0c:61:eb:d8:1f:b0:fc:61:3e:d5:e4:62:0f:74:a1:44:
2a:9f:c3:3d:76:24:8d:df:4d:fa:18:2f:03:ca:9a:65:8e:0a:
ee:7e:70:10:5a:53:ff:87:c1:5d:4f:cc:ad:d0:94:cd:45:03:
2e:7e:ce:c0:6b:71:01:3a:f8:69:86:40:2b:8c:b7:4c:a3:3e:
9f:3d:74:05:e0:10:22:60:cd:8a:60:ca:51:70:27:69:11:7b:
19:f6:60:ef:05:5a:7f:95:b7:de:21:b7:5f:1e:83:02:10:09:
1f:c7:3b:12:0e:7f:05:62:06:d9:67:4e:34:a7:2f:81:be:75:
5e:f8:46:04:62:03:82:b1:7e:06:2b:d7:8b:38:76:90:b3:28:
99:77:ae:80:0a:5a:0d:e7:f3:02:d1:45:d5:11:30:93:c6:21:
cf:6c:c8:e7:1c:71:c5:cc:8e:d2:64:71:b8:14:99:2d:46:ab:
e6:95:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:21:45 2025 by rpki-client