Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: TSLdRFLwz2tF+EIe4X3BpESAtvJvuP62mPHm7icS5qU=
Subject key identifier: 13:2C:24:D4:95:D2:31:2E:76:B7:94:AA:0E:C5:D8:E5:38:A5:05:87
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 0194BCA9B31E4C573156DF48F1B7EB196CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 09D6
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: M/CsziZrMxwE1We2/hovcrNs1ifVBUR6lRy/6euv6mk=)
2: qHsLN52OLV40PkdsNg1LTDhrI1k.roa (hash: o2jlcmcZCFuQ0+N7Kss7ufNJs+2izJmB43Pkb+WDd2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b3:1e:4c:57:31:56:df:48:f1:b7:eb:19:6c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=132c24d495d2312e76b794aa0ec5d8e538a50587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:bc:d9:f0:46:32:c5:95:d8:b4:e8:7e:df:
20:88:91:a5:54:52:0c:5e:97:c3:9a:5b:d0:35:87:
41:63:a5:6f:19:08:07:d2:d0:2d:41:99:96:12:dd:
b7:f4:08:8b:f7:56:33:fe:82:aa:5a:ff:b6:31:d5:
2c:2e:38:ad:ca:8d:1e:c6:a3:9d:87:1b:8d:88:34:
e8:73:b5:60:a1:d2:9a:84:e3:1e:41:d8:a3:10:8d:
62:ab:a0:32:94:1b:ff:96:f4:c5:c1:77:42:d1:2b:
c9:77:00:da:77:71:e1:f3:7b:bf:5a:18:2c:53:fa:
f7:51:42:04:ed:27:40:15:c4:fa:a1:f9:57:ee:01:
fe:69:3e:d3:c6:ea:9e:98:fd:7b:ca:2b:2e:4e:64:
3c:10:19:d3:1d:46:62:cd:76:f3:f4:74:1f:5c:5b:
e3:14:7e:f9:87:ed:23:cb:26:ba:ea:ab:9f:b5:eb:
7e:b2:fa:76:8f:11:95:35:1e:c1:ca:e4:93:bf:af:
89:6b:11:55:23:a7:b8:8b:66:2d:c7:46:e8:ae:7c:
7b:23:e9:c0:2f:f1:e8:4c:82:6a:0f:58:92:44:f9:
49:b9:c3:64:0d:2d:9c:e2:60:c2:f2:f9:13:e2:36:
6c:58:22:6f:d9:81:0b:a2:01:9b:57:2c:7a:44:64:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:24:D4:95:D2:31:2E:76:B7:94:AA:0E:C5:D8:E5:38:A5:05:87
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:16:53:a9:f9:fe:c4:a7:55:5a:61:b8:51:fe:d3:78:5c:8a:
0c:ee:e8:a3:4f:4e:fb:5c:d7:9f:9d:e8:81:fa:3f:92:83:97:
49:85:6e:e3:00:11:dd:13:af:8e:a3:47:e7:8f:35:eb:1a:b6:
b5:81:dc:a8:74:b1:99:c5:e5:9d:20:69:2c:99:f3:60:21:90:
9c:99:06:0f:70:67:0e:46:eb:d6:4e:5f:e5:be:c5:fd:75:d4:
fd:24:03:c3:6d:ff:96:76:61:b0:da:68:6e:9c:52:55:81:c7:
e8:2a:c1:12:3e:49:66:7a:a1:f1:fc:28:f4:fd:78:8b:51:ab:
93:11:91:e7:d0:76:1d:50:7e:df:56:14:6c:c9:cc:e0:37:78:
ef:98:ef:6f:19:6f:89:91:eb:39:d1:c9:9c:74:c6:99:0d:f4:
94:f6:72:9a:0e:0e:27:6f:88:bb:50:3d:97:67:4f:14:43:89:
07:88:c0:72:3f:98:10:67:7a:3c:42:06:59:be:aa:77:25:5f:
ff:ea:1b:b1:49:d5:52:6b:56:62:db:65:fc:1a:58:45:5e:a3:
42:bc:06:2a:3f:8a:14:db:0d:72:f9:8e:11:cb:9a:63:e3:5b:
d0:b3:09:41:65:ea:f7:44:8b:ba:dc:61:0a:9c:ce:03:3f:33:
b9:37:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:36 2025 by rpki-client