Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier: d00XLVdWWI4DWtdZP46lDX3x/xav3G9QgWXgSY8NKPs=
Subject key identifier: F6:30:70:35:CA:81:46:57:DD:F9:EF:09:B0:02:45:21:D0:ED:D7:7B
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 0194BC727ED20CF5641DF3B934C297D5B61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number: 0302
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: Io3THSig4QPHWysFOrrCFqK++WWV1LaIB38ReZmk84s=)
2: gdQzieOsDk19MHxPUsWlQ5yL-6E.roa (hash: O4NLUsT+6P2pJIZ4vji37jHYnfU3emApXIC6cXFBisM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7e:d2:0c:f5:64:1d:f3:b9:34:c2:97:d5:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=f6307035ca814657ddf9ef09b0024521d0edd77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:fe:8d:fd:f7:a4:f2:03:6a:d3:be:c3:6b:
b7:6a:a0:a5:06:a6:96:f2:51:bb:e3:4f:13:95:3b:
4b:0f:ac:b7:77:99:d5:66:43:1f:7f:53:c1:39:fc:
e9:5a:ab:29:41:7d:8c:75:5a:70:89:c5:4a:15:e5:
4e:32:6c:0c:f4:68:c2:6a:b0:1f:33:37:60:f1:47:
e0:ad:8f:ae:cd:4a:82:f8:78:25:17:a2:cd:7e:ee:
2a:cc:3b:06:ce:a1:78:ea:f9:08:5d:b7:c1:cc:22:
63:cc:73:d9:38:dd:a0:aa:18:f5:68:45:0d:15:6c:
1c:11:b1:b6:ad:05:db:33:47:e6:2e:93:14:6e:c4:
94:90:da:32:2b:d5:be:c4:d4:02:8c:5a:e6:2a:b5:
81:ef:b5:8a:55:e8:4d:10:4b:be:85:be:40:9c:09:
f5:56:16:8d:f4:14:6c:64:e8:f9:db:21:a3:bb:95:
ab:66:67:c0:22:cb:ba:ec:55:07:6f:32:0a:38:88:
14:9e:ff:a3:6d:cb:2e:58:7e:83:d4:b9:ad:c0:2b:
16:66:c0:7b:5b:84:08:ce:8d:13:6c:9a:72:a8:30:
11:e5:f8:1b:22:29:8c:3d:07:81:d4:34:e7:ba:50:
d8:c3:48:4d:01:ff:0c:d8:dd:46:34:a0:02:36:98:
48:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:30:70:35:CA:81:46:57:DD:F9:EF:09:B0:02:45:21:D0:ED:D7:7B
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:8e:68:c1:49:04:fb:3c:bc:86:cd:fa:d6:45:dd:bf:09:
84:f1:58:64:cc:40:32:29:03:f5:2c:43:89:df:63:14:26:c1:
2b:a4:9a:99:17:4a:2d:9e:eb:e3:57:4b:41:5b:57:8e:f6:93:
ea:ea:5b:54:3f:b4:f6:81:62:10:d7:9c:af:c3:99:72:80:c8:
fe:36:6d:45:c1:cb:27:85:7c:b3:63:bc:0e:16:fa:14:23:d0:
ad:64:1e:dd:ea:1b:92:10:d8:5c:a0:4c:43:fe:64:82:b1:39:
b6:00:c0:4f:b5:84:0e:76:81:65:21:8d:81:32:57:8c:8c:14:
93:30:d4:83:9d:3c:2e:fe:84:cd:cf:b3:64:bb:dd:2d:2c:31:
12:2b:2a:60:90:6e:f6:f4:03:91:68:ad:3b:05:20:32:e9:35:
6c:b5:bc:7a:80:ae:69:7c:df:5b:eb:98:0f:ca:71:c8:64:57:
04:c0:9d:1a:2e:be:20:ac:8a:b3:8c:f7:d9:5b:ab:94:67:33:
8a:1f:16:92:0f:a7:44:d6:b3:75:fa:71:7e:0d:3d:d0:ed:16:
2c:a2:87:eb:b6:1a:7f:07:68:d2:10:be:b2:20:9b:c6:6b:ec:
a7:8c:a8:04:11:99:13:41:76:a9:2d:b8:d9:4d:bf:6b:f1:fb:
9d:89:55:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:43 2025 by rpki-client