Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
File: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft (raw, json)
Hash identifier: vgL+l2yvqh6VAfPPIJvY9VMns4vFn5ddLaeKyGx6fj4=
Subject key identifier: D7:22:2A:26:F5:98:61:7F:9D:6C:8B:5C:1B:88:C4:39:36:CD:01:CF
Authority key identifier: DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
Certificate issuer: /CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Certificate serial: 0194BBCEB5E3D95081EC565FC8AD3B9D2AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
Manifest number: 0550
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl (hash: iHDrAaNrA8K9PaehgaBoCUiTeHeNbVy06K/xI/pIZNg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b5:e3:d9:50:81:ec:56:5f:c8:ad:3b:9d:2a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=d7222a26f598617f9d6c8b5c1b88c43936cd01cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:3f:01:f0:0a:bd:e0:89:b9:ff:0d:30:5d:
c2:10:ad:e9:d0:59:e1:bf:54:fe:13:67:69:00:24:
55:7a:50:84:17:7e:f8:9b:d3:10:a3:07:67:4c:69:
ef:2b:f6:28:b7:09:72:2f:e8:ac:da:79:85:a8:b5:
83:ce:7a:7c:d8:a8:cb:ba:91:36:e5:b2:20:5f:74:
1f:44:f9:ad:1b:da:45:5e:57:f9:7b:0a:b7:40:c7:
b0:61:02:48:db:f6:d3:a1:84:87:34:21:78:12:8c:
c2:47:b5:80:85:61:5e:48:10:3e:4a:81:68:65:42:
08:64:46:10:ff:8e:a4:75:f7:da:07:24:10:e4:7d:
c4:25:40:d3:52:ea:6d:44:b0:9d:c9:65:74:d0:b0:
96:c0:15:47:06:bc:3d:4f:4c:50:70:9f:db:de:ad:
08:93:67:01:c3:4f:e6:00:69:4e:39:67:51:90:7d:
80:00:52:c8:ba:33:9d:dd:25:d8:c7:c6:94:a1:cf:
44:cf:02:a8:a8:11:2d:59:be:1f:68:b5:93:3a:58:
e2:2e:5c:4b:20:71:6e:a7:94:94:f6:1d:eb:55:b5:
75:cd:f5:96:6c:37:bd:66:ab:12:ff:11:d3:9a:83:
6b:cf:15:82:0e:d3:87:30:08:06:3b:16:ae:37:d0:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:2A:26:F5:98:61:7F:9D:6C:8B:5C:1B:88:C4:39:36:CD:01:CF
X509v3 Authority Key Identifier:
keyid:DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d9:12:3f:e9:34:60:63:e0:a2:6d:45:58:cf:79:66:2a:dc:
86:f7:98:84:07:34:e3:53:29:4d:fd:67:e3:e2:79:1b:9f:28:
e2:35:ac:1a:7c:37:b1:b6:8c:9e:1f:12:8d:05:46:5f:3b:3d:
91:c7:9b:be:59:8a:f1:fc:be:ca:cc:d2:eb:76:44:e8:c7:ef:
65:5c:1c:40:4a:7b:97:11:62:4b:17:ba:32:63:cd:f3:c0:11:
a1:79:e3:de:1e:46:33:0b:1a:42:d0:95:7d:2e:44:79:b7:a7:
95:68:d1:79:9f:fe:f6:d9:17:b1:c5:10:97:c1:1d:b6:24:e1:
93:20:4b:bb:cf:94:9e:7e:a2:e5:45:3d:f3:53:c0:8d:cf:9d:
ee:2b:28:0a:5c:e9:af:c7:7e:30:51:35:35:ff:6e:34:c3:9c:
b5:9e:e2:36:8d:11:95:c0:c9:06:cc:e3:d5:62:c7:07:56:e0:
40:14:c8:49:ae:d1:b0:0a:06:79:96:ee:ad:03:74:66:09:10:
1f:ea:46:10:ae:82:e7:3b:df:0a:26:05:ed:8d:64:8b:06:47:
12:cc:7c:01:d0:df:94:e8:9b:c6:0e:97:1d:16:53:39:20:cf:
c4:d3:64:c3:c5:3a:58:7d:b6:68:be:fd:60:f2:52:6d:21:a0:
fc:d2:1b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:08 2025 by rpki-client