Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
File: 3ohLjkYvPsE6QCTWaamdlK8FzbI.mft (raw, json)
Hash identifier: GnPBBYzzGLOMQm2jmNyuQGXvBeREehN1tWyBYICCtZ0=
Subject key identifier: D2:63:5A:8D:00:20:E5:0B:5F:13:D5:9D:FC:0B:FC:84:6B:E4:CA:82
Authority key identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
Certificate issuer: /CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Certificate serial: 0194BC72AC99A0068CDE56197BDEFF2DA4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
Manifest number: 04D9
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 3ohLjkYvPsE6QCTWaamdlK8FzbI.crl (hash: B8NhpE6k41HfeQiClAoHEcMOaMBvHMwK4fxz4Gln0Vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ac:99:a0:06:8c:de:56:19:7b:de:ff:2d:a4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=d2635a8d0020e50b5f13d59dfc0bfc846be4ca82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:9f:0d:1e:a7:b0:1e:e2:78:65:6b:6e:53:
f5:c4:04:b8:d8:e0:e8:c1:71:63:d8:64:de:be:60:
ee:a0:3d:6a:a7:6a:d3:8f:a4:70:6a:48:31:93:88:
60:c5:78:25:fe:22:92:9c:d7:ce:07:46:05:87:e7:
2b:e0:27:28:ea:3e:89:6a:fb:c2:af:5d:e7:00:c0:
10:75:47:61:ed:84:d1:e7:83:e1:66:75:94:7d:a6:
11:70:2b:b6:fa:5c:bb:db:a1:a7:e4:32:8f:18:b6:
9e:53:b8:b1:fe:b5:5f:6c:61:1b:38:3e:75:b1:92:
ca:b4:e7:45:11:69:8d:b7:0b:5e:48:a4:df:4d:33:
03:ec:55:a4:d4:cb:1f:d5:54:5d:d7:f3:24:49:b4:
66:f2:8b:89:02:ab:d1:3e:d5:05:39:67:6f:13:6a:
f5:ad:60:7b:fb:fe:f0:d4:2b:a4:e4:c7:2a:1e:d9:
f2:e1:41:67:04:74:d0:0a:7a:1e:4c:0c:e6:d6:35:
ca:04:2a:66:a9:98:6c:a1:fb:dd:4a:ec:3d:f8:82:
c1:a9:ec:b2:a2:cc:07:92:87:e9:20:30:e8:ce:a4:
0e:f3:49:b7:8f:ee:a9:e7:f6:23:d8:56:e5:ac:0b:
58:d0:96:30:6a:56:56:c3:76:fb:a8:13:e2:db:d5:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:63:5A:8D:00:20:E5:0B:5F:13:D5:9D:FC:0B:FC:84:6B:E4:CA:82
X509v3 Authority Key Identifier:
keyid:DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f3:a6:85:b6:53:58:d6:9d:56:51:b6:30:d8:e0:86:a9:15:
21:7f:e4:41:6f:a0:11:34:60:dd:a3:b4:79:dc:db:5c:62:ad:
61:96:db:b2:f9:f9:f5:b8:71:ba:c8:39:25:3f:02:c3:1a:8a:
88:d2:4c:d5:d1:70:78:bb:b7:3a:b6:6a:11:7e:c2:d2:1f:96:
c0:00:c0:6e:bf:1f:83:ba:23:a2:6f:75:b8:d3:4a:1a:58:94:
35:9f:d8:16:75:ee:4a:de:2e:1c:8f:da:cb:81:94:4f:cf:e1:
51:b7:27:9b:7c:c1:37:f6:38:ca:ac:e6:89:e8:64:0c:83:35:
a0:94:74:71:b4:34:1e:a3:33:a3:c5:bf:e5:1e:9c:fa:97:30:
6d:65:66:d4:8e:72:ea:0e:18:61:56:de:b8:a7:80:e1:03:6a:
e8:b6:19:c0:6e:c8:bd:67:88:a7:69:b1:3a:2d:96:34:5c:fe:
40:fa:bf:9a:69:3b:d0:c3:a8:09:d7:4d:c5:08:d6:2a:e1:ea:
8a:b3:67:83:ec:c0:0f:05:9f:6a:b1:88:99:23:19:c0:4b:b8:
64:2e:75:4a:42:de:2b:82:fa:5e:c2:a3:1e:50:1b:53:72:2f:
23:47:1d:74:62:16:ed:f1:74:39:85:12:0e:1d:7a:32:28:c5:
fb:1a:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:23 2025 by rpki-client