Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
File: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft (raw, json)
Hash identifier: ZipMlthLMTD8/x+13QBcK3+8OZqPU+2Uykadaabd5Q4=
Subject key identifier: 36:65:16:37:3D:94:4E:60:C8:C9:9C:F4:2B:62:B4:3F:78:88:E0:C3
Authority key identifier: DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
Certificate issuer: /CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Certificate serial: 0194BBCE9F1ACCD445B0694787A327CEDAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: 3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl (hash: KY+cNEprgx0nVxwGpPF7Vdg4AvztQMvEtMPjAyIIzbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9f:1a:cc:d4:45:b0:69:47:87:a3:27:ce:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df12a5bc5008f48248265fd2ed60fffc2c3e9ccc
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=366516373d944e60c8c99cf42b62b43f7888e0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:38:87:be:0a:04:71:d7:e0:3c:4c:8e:e4:
62:e2:f5:77:0c:16:eb:94:ad:06:29:50:a1:63:9b:
dd:4f:62:cb:eb:e9:c2:fc:14:3e:0c:c3:3b:c0:6a:
c9:c1:af:1c:0e:d0:0c:18:7c:f9:dd:98:35:87:a9:
61:8a:c4:a1:bb:2c:1a:0b:74:29:c5:f4:ee:c4:92:
ca:b4:08:d7:f6:f1:69:47:0e:12:78:3c:f2:43:f0:
c3:93:7d:79:4b:65:42:d0:cd:fc:2e:9d:b1:72:a7:
a5:be:ef:ca:99:97:91:89:81:d1:24:b9:93:58:7d:
ec:68:e2:50:30:bf:ce:12:ad:ef:5f:1d:c7:c5:75:
4a:42:d6:23:7a:7b:93:6a:6f:2b:c6:bc:e7:79:ef:
2d:b9:0a:8e:c6:c8:df:d8:5b:d4:b5:23:a0:d8:eb:
32:29:3a:a4:35:fb:6f:f2:d0:f6:5e:ae:36:72:61:
c7:f9:c5:db:95:92:18:2b:73:e6:11:92:5e:1f:e1:
be:7a:64:4c:3c:f8:ce:4d:c6:4a:d2:f5:ad:6b:7b:
41:e1:31:00:45:f9:b8:34:89:3a:98:b5:51:0a:54:
26:39:1c:e0:ac:45:92:8e:4a:13:67:6c:9b:15:6f:
43:04:99:70:61:0e:51:08:9e:28:62:88:76:38:c2:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:16:37:3D:94:4E:60:C8:C9:9C:F4:2B:62:B4:3F:78:88:E0:C3
X509v3 Authority Key Identifier:
keyid:DF:12:A5:BC:50:08:F4:82:48:26:5F:D2:ED:60:FF:FC:2C:3E:9C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xKlvFAI9IJIJl_S7WD__Cw-nMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8a0dce-9df6-43da-99d6-90456f1ea757/1/3xKlvFAI9IJIJl_S7WD__Cw-nMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0a:38:59:80:9f:9b:6f:d8:92:bb:f9:50:38:b5:60:c5:d1:
24:8e:98:27:5b:2d:83:54:72:35:fb:9f:44:48:3f:ff:ca:d3:
d1:ea:a5:4d:a4:f9:53:c5:19:f4:07:d5:20:a3:02:81:cb:65:
ff:16:58:28:0a:54:08:2d:09:7d:64:35:5e:60:65:4d:5f:27:
1d:3b:f0:8b:d4:7e:4a:68:fb:c9:61:6b:50:60:67:b6:6e:be:
a4:eb:a7:dd:59:fb:b8:ca:14:d8:4d:84:b1:d8:ad:c3:f0:59:
2d:8c:f4:d0:bc:69:84:05:da:c8:2a:d8:2f:b4:a9:5c:fc:2b:
e1:5b:45:d7:b5:da:32:bc:5f:f9:19:35:dc:7a:cb:06:fb:19:
ed:37:d0:55:1c:71:5e:f8:23:4d:4b:07:71:ba:75:cf:8a:13:
82:67:c8:f7:0d:0b:8f:3d:4c:7e:7e:0a:af:fd:2f:97:94:29:
b2:1c:7d:49:c4:94:f6:13:2f:ef:48:6e:8a:af:36:ce:07:02:
d3:7c:07:17:e8:52:2d:99:05:8f:d7:8e:17:ef:71:5f:40:a6:
dc:f0:6c:8e:76:03:67:38:0b:00:61:0a:f2:87:f7:63:1d:df:
60:75:5c:e0:30:44:0e:60:9f:4f:bf:4d:11:a7:04:74:3e:72:
f5:b7:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:25 2025 by rpki-client