Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
File: 3D56OUu_G77Efz-7aaGJ-KOx0FY.mft (raw, json)
Hash identifier: iYGbBVpxReXvzNiDXQ3xuDi7qWaBmemBbMzRydazwK8=
Subject key identifier: 79:FE:FF:29:09:5B:B1:7A:08:EC:DC:C5:06:C9:40:87:57:C4:2B:A5
Authority key identifier: DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
Certificate issuer: /CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Certificate serial: 0194BBCEF3037816B5084FE8A565879E3A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
Manifest number: 06D5
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: 3D56OUu_G77Efz-7aaGJ-KOx0FY.crl (hash: aD6ThOyly6l3iv8hvqUPjVvK+Z5qGFeZVwNat+kupdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f3:03:78:16:b5:08:4f:e8:a5:65:87:9e:3a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3e7a394bbf1bbec47f3fbb69a189f8a3b1d056
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=79feff29095bb17a08ecdcc506c9408757c42ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:87:b8:ac:c7:3f:42:0a:e2:48:d7:db:ec:
b5:b6:84:2a:51:77:da:be:0c:55:9d:b3:c0:e0:f7:
95:6d:20:59:fb:7c:0f:41:44:a1:e7:ac:19:9a:2f:
b3:09:88:ae:1c:7c:bc:1a:2b:c7:6b:d8:6b:7c:7b:
f7:5b:69:d6:7a:d2:c4:18:4a:fd:e3:0c:9e:9c:66:
e8:1e:66:1a:5b:a3:62:de:86:0d:cd:4b:14:3b:1c:
c4:80:72:23:77:29:09:61:4e:01:94:07:ba:6b:73:
d1:46:34:de:06:b7:94:eb:a2:aa:78:eb:fa:83:ab:
d5:52:09:49:77:73:40:e1:43:3a:1e:fe:70:f8:22:
f5:25:ec:f3:15:c9:08:05:3c:4a:d4:b3:09:f5:5d:
78:13:b4:ac:51:cf:7b:ee:f2:6b:03:db:e3:87:0b:
4d:9e:f3:e7:b3:9f:37:45:15:c9:08:1d:1d:b3:5a:
e3:2a:74:0f:74:7e:79:cb:36:24:3c:f9:b6:01:0d:
17:af:5a:98:e2:0d:47:35:cf:2d:f7:3d:94:7b:f4:
d6:ed:81:e6:aa:a4:fd:58:a8:3c:ce:86:19:66:1b:
c1:2f:0f:04:3e:bf:ac:69:91:ff:09:b5:71:3d:0a:
bd:01:b3:36:77:8d:e6:18:77:0f:9e:42:57:12:94:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FE:FF:29:09:5B:B1:7A:08:EC:DC:C5:06:C9:40:87:57:C4:2B:A5
X509v3 Authority Key Identifier:
keyid:DC:3E:7A:39:4B:BF:1B:BE:C4:7F:3F:BB:69:A1:89:F8:A3:B1:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D56OUu_G77Efz-7aaGJ-KOx0FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5b684a-e409-47ea-9ccb-44b21a8bebfd/1/3D56OUu_G77Efz-7aaGJ-KOx0FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:be:42:bb:a0:d2:c3:b6:87:3c:e1:96:ed:d1:be:77:25:1a:
fc:be:e6:b7:4a:61:f4:3f:c5:1b:a6:ec:f9:86:af:5c:ba:dd:
83:1e:cd:81:10:d6:c6:e0:12:d8:86:f5:e4:df:21:b5:ee:a4:
f2:3d:a5:70:38:b2:71:0e:c3:fd:0b:39:76:f6:59:d3:43:ee:
00:38:25:d2:69:e4:11:c4:38:8b:b9:5d:4b:96:cf:e6:76:55:
15:5b:02:d0:1c:22:25:63:0a:39:06:6b:d4:d6:7c:85:48:76:
45:c8:ca:c8:1d:cf:69:98:63:9e:cb:fb:14:f2:0d:39:53:a2:
39:39:ff:fc:50:dc:f1:d5:d7:71:79:5e:e0:e0:f7:ad:80:5a:
a2:68:e6:20:6a:69:f7:6b:4b:21:12:f6:26:6b:df:30:51:ec:
a4:ba:cc:de:b9:50:01:99:cb:6e:c2:31:1b:a6:e5:b3:e8:75:
f5:e7:73:4c:27:8d:27:55:f2:ea:68:db:a3:83:c8:92:13:81:
6b:b0:6e:53:8c:37:07:9c:c9:47:6f:0f:93:70:f1:eb:1c:cc:
5c:3c:e8:97:7d:43:8f:4a:41:9a:f8:cf:c9:22:4d:f3:b4:2f:
f7:52:dc:02:8a:b4:c0:e0:8a:4b:7a:fe:bf:03:eb:ac:f0:03:
94:ad:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:24 2025 by rpki-client