Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: N2pIO4bXMizhsrPgMp7Cp+elVmTdrIXwj856YctBdEU=
Subject key identifier: 40:E6:96:B8:DB:9D:72:24:2A:09:BC:AF:68:94:76:CC:B5:F0:BF:20
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 0194BC04A08D6946C8785E8450B52E20A3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 082F
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: Lzo5igGKiO/bwZcXoZaq5O4Fsv68+pAAtLjMlaL0ZfA=)
2: EiOjn6Cn36HWuMJFodH0EVbfYdc.roa (hash: prKCNtfilLl42pcGEF7Kjg7za6QhPHVZeIUhroTyVuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a0:8d:69:46:c8:78:5e:84:50:b5:2e:20:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=40e696b8db9d72242a09bcaf689476ccb5f0bf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:ab:27:93:4c:9a:86:01:82:b6:c2:b7:48:
7e:ea:6e:7f:cb:0e:ff:cb:c5:50:1b:44:67:0c:3b:
c0:58:16:72:65:01:9e:1a:4b:6a:c7:a7:f4:11:f3:
68:83:b8:b1:be:16:96:35:d2:c1:26:9f:a3:e5:2c:
0a:d3:b1:13:4a:e7:dd:e8:5d:26:c8:8c:d7:e6:3c:
b0:0a:58:a9:ef:6e:b2:14:2c:7e:e1:57:aa:dd:b1:
86:47:d7:b0:be:81:bb:ef:90:da:c9:a5:07:fa:05:
be:d9:8d:2f:fd:a5:3e:58:7a:db:19:b1:29:05:7f:
a9:8e:51:50:5a:37:66:3a:c3:94:c2:f0:d9:4f:79:
5b:80:b5:04:f1:d5:96:87:84:85:b2:9c:fc:f5:26:
c7:7f:bb:31:13:e2:0f:61:2d:31:d7:5a:02:2e:bb:
4e:8e:49:96:76:bf:9e:b4:8c:a2:67:26:20:32:05:
d1:78:d5:9d:71:7a:ae:26:12:0a:b3:45:74:5f:27:
3c:a0:15:7d:32:ff:a5:d0:bc:08:20:77:2b:54:a0:
e0:88:17:d2:b5:77:e2:e5:d9:5e:08:a8:29:f3:98:
26:2a:fe:82:e7:94:5b:c5:f3:36:55:2c:dc:04:6f:
1f:71:34:82:3d:69:1c:7c:b2:ba:6d:0d:4b:ab:34:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:96:B8:DB:9D:72:24:2A:09:BC:AF:68:94:76:CC:B5:F0:BF:20
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:16:61:f3:29:be:26:ba:4c:47:62:21:5b:5c:31:d7:e4:ea:
e1:a4:15:5c:90:f4:a5:78:84:d8:13:70:5d:d0:5d:09:6f:a9:
04:24:63:51:5e:01:f0:40:9b:d9:3a:e2:8d:c6:14:2f:ef:8b:
a7:9f:52:6c:f6:8c:fc:a0:cd:a9:c9:0b:bf:52:3e:34:fb:d5:
80:e1:46:0e:b3:c4:b8:cf:2c:c7:36:60:05:47:b1:06:16:7a:
98:1c:9f:11:76:5c:7e:32:2c:af:eb:16:84:fd:e1:60:a5:cd:
c2:51:50:9d:e3:b6:28:6f:75:4f:d6:c1:1d:0a:ad:ad:c9:4a:
c8:4a:87:99:6e:f6:8a:91:b7:9e:31:a8:63:29:71:43:33:7d:
e7:3d:63:22:09:3e:fe:b3:8d:c2:5d:8c:fd:bb:a2:3e:84:e1:
a6:55:79:67:46:01:30:e9:3b:f6:c8:0a:c1:62:3c:b6:79:09:
da:26:dc:be:bc:50:5d:41:bf:55:37:26:7f:c9:b3:72:5d:1c:
fe:16:f5:49:7a:d2:51:c8:2f:19:20:95:8a:e0:02:be:a8:bd:
90:37:37:fe:fe:2f:07:8f:0f:cd:25:cd:c7:1b:be:8d:dc:d4:
6e:15:d6:3c:7e:ee:35:cb:8d:34:e2:94:5e:77:46:0e:0c:18:
d1:f2:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:06 2025 by rpki-client