Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: /1/6B002W5o/VgwjfA4GFpU9TFsd9rT8zTB83r4yfwU=
Subject key identifier: 15:E8:3B:35:17:92:9D:5A:3D:17:93:3B:BA:AA:9A:2B:3F:2E:E4:45
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 0194BCA9C908BD0180EBA6BD2AD1442BBE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: fb5Wuz4WN5D9kJOBg6v2YhTySuoa1J74s7JGKP2CqLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:08:bd:01:80:eb:a6:bd:2a:d1:44:2b:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=15e83b3517929d5a3d17933bbaaa9a2b3f2ee445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:cc:dd:12:9b:5c:8f:2b:86:b8:b8:8c:40:
50:94:99:d1:22:08:06:d2:63:75:de:36:08:04:a9:
ae:8d:be:5d:9e:7d:01:3f:e0:e5:65:ba:11:ac:0c:
3f:51:1c:59:66:69:fa:91:ab:05:d8:3a:7a:c8:7d:
41:eb:e6:48:35:1e:b6:fe:6c:d0:bb:54:d7:0c:bd:
91:b1:19:39:16:14:ea:09:fb:89:f3:7e:06:bd:38:
5b:38:36:3f:8e:7f:f6:b4:51:20:f4:91:b1:e0:1d:
9b:2c:ab:f0:45:a2:22:dc:e0:16:e7:30:8f:52:69:
58:25:6b:01:50:e6:13:a1:5e:ba:8a:f2:ea:13:69:
e7:93:ad:a5:6c:9b:99:19:a6:0e:43:66:14:40:96:
6d:b3:ac:b3:06:61:52:d6:1a:17:8e:ab:dc:55:13:
14:b7:e4:51:db:00:a0:c3:24:e9:b6:74:36:63:47:
89:e4:ca:11:d3:4a:bc:94:80:72:f7:26:f3:b0:aa:
19:40:c3:e6:72:24:db:98:93:5b:e6:2a:c9:46:c2:
31:0c:2a:6a:4c:3a:2e:97:75:d2:70:2b:3f:e7:a3:
b2:e7:52:55:74:82:10:f9:02:cf:54:b9:d9:32:c3:
29:e5:a2:4b:01:08:a8:cf:01:bd:1a:60:84:69:35:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:3B:35:17:92:9D:5A:3D:17:93:3B:BA:AA:9A:2B:3F:2E:E4:45
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ac:1e:39:c2:e8:2e:ad:4c:80:31:69:75:26:ee:6f:15:5e:
16:87:26:01:6b:a0:18:49:11:35:c7:fb:ac:3d:a7:9b:16:ca:
07:1e:87:06:94:79:4c:ee:6f:50:95:eb:d2:47:f1:18:64:e7:
7f:8d:1e:f9:08:01:69:00:e8:a2:a1:f6:63:72:fb:61:1c:6b:
dc:67:aa:ce:1c:85:13:85:89:f8:20:82:b6:f7:ee:46:82:90:
ca:fa:05:7a:57:71:db:e0:a2:14:45:69:05:3b:64:92:c5:f9:
57:4b:e7:2f:7b:33:e3:ca:3c:30:7e:2b:d3:c1:bc:9e:03:9a:
3e:25:4c:99:34:66:7b:82:ca:77:07:cf:76:ef:f9:3d:6b:13:
db:01:0f:68:2d:77:8a:42:f0:e8:38:3d:f2:87:52:60:54:fd:
0b:4c:a0:78:3c:e0:86:d2:fb:0c:87:d8:51:98:f4:3a:24:2e:
b2:8c:c0:d7:41:26:ef:e0:39:b7:fd:99:0e:06:fe:86:df:2a:
b5:2c:ed:94:eb:4d:fa:76:99:81:d1:7f:96:8f:38:13:85:a0:
c5:b1:9e:bb:f5:60:6f:e0:7e:ec:75:f6:99:58:da:42:50:9f:
52:f6:72:e8:3e:98:70:2d:5a:45:2e:70:34:a8:60:4c:92:3e:
9f:4c:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:50 2025 by rpki-client