Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: AxSFtZrFJ7Ki+NeP79FM2N1AVkYPNVBw5kt7QYt/GjM=
Subject key identifier: DA:A3:F7:E6:9F:1B:51:69:68:1A:D6:E4:4D:35:A1:08:90:B5:1A:7E
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 0194BD4E916DE27B76A46620996E71EAD283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0963
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: ZeB/1TD1ak1InmSUypRORlsfF1iyMkoAT8928A0on6g=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:91:6d:e2:7b:76:a4:66:20:99:6e:71:ea:d2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=daa3f7e69f1b5169681ad6e44d35a10890b51a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:1e:43:a5:1a:28:4f:9d:53:ee:90:2a:ab:
c0:64:26:91:50:ca:45:cc:db:e1:cc:0a:ec:5e:a4:
20:36:08:43:99:69:c3:f1:0a:a9:01:c3:00:6a:83:
a3:93:42:83:c2:b5:08:a5:9b:f8:8d:f8:81:45:65:
b8:ea:3e:ed:9e:d3:76:7a:66:40:03:63:45:a9:f2:
f8:ba:91:0b:5f:f9:31:df:dc:aa:d7:e1:06:94:93:
e0:cf:3a:03:2b:34:a6:b3:84:df:fd:32:38:46:e0:
db:65:9b:a9:49:88:e0:a7:00:54:32:58:72:9e:4a:
69:40:56:fe:35:af:65:fb:6f:37:a5:cd:62:cb:b5:
30:ac:43:ec:dc:45:49:80:8d:aa:b0:75:d0:5e:bf:
b7:43:1d:48:52:51:a4:89:40:31:36:8a:2e:52:86:
b7:af:76:80:e2:75:0c:2f:00:e6:72:7d:02:9d:8d:
8c:a0:4c:f8:32:87:96:c3:04:30:7f:0b:3c:d1:41:
7d:c6:85:18:f4:e1:d3:e0:65:be:ac:f5:29:e0:97:
0a:04:d1:25:a8:53:cf:be:20:6d:94:c9:2f:db:00:
d2:c9:73:a0:bb:c8:5f:bc:25:aa:bb:18:d9:f9:f6:
71:76:53:16:bb:d5:2f:ff:8e:f3:61:1c:ec:e7:24:
6e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A3:F7:E6:9F:1B:51:69:68:1A:D6:E4:4D:35:A1:08:90:B5:1A:7E
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:02:b8:47:c5:bf:f9:5c:f4:af:cf:e0:ad:18:71:aa:8b:bd:
df:c5:dd:a6:6c:a6:92:4d:13:a5:d6:44:aa:00:d6:b1:ac:aa:
2b:dc:e7:2a:dd:bc:bf:20:82:ef:a1:86:d9:fb:36:ec:b5:2d:
7d:b7:04:2e:7c:c9:b0:31:bc:3c:a9:3a:67:7d:6c:5f:f0:8a:
4c:6a:25:41:f2:d5:b9:7e:f0:ff:b3:c1:a8:11:bd:44:94:a5:
d7:93:0a:4f:65:04:a7:e1:24:db:61:83:46:29:10:0d:4b:24:
de:82:14:74:a7:ca:12:ae:a0:1c:7f:7f:4f:73:f3:8f:15:45:
c7:5d:d3:83:52:f8:cc:74:9b:bb:5f:61:63:fd:2e:46:51:35:
b6:62:f9:d2:d8:50:ec:9a:28:85:a9:b3:b1:0d:b2:7b:b7:10:
0c:28:ad:6b:5a:75:21:af:e6:6d:c8:71:dc:ad:97:f5:64:4b:
76:d4:27:6c:2f:a0:5f:cf:1c:65:a0:9a:87:1c:9d:62:20:09:
cf:4c:da:15:19:e5:03:8a:26:5b:1d:3c:4b:90:cd:0c:9e:0d:
7a:0e:f1:34:4f:fc:ae:18:f9:52:61:32:b3:c9:44:05:e7:28:
bb:2e:0a:a5:9f:db:56:09:b3:16:9e:7f:18:a6:bf:19:bf:56:
c8:f9:17:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:48 2025 by rpki-client