Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: 8AJQUuVB01m95SWVz7KHotcMZou6Vs1oktaKBcxcb0I=
Subject key identifier: F6:C3:38:3C:8F:A7:C1:BD:F9:95:01:BC:E6:36:49:27:A8:8B:EE:D1
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 0194BCA9882CF427F6A784CA648A1E450257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 137F
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: VWcxam1NaE+5diNasfEWDqYhyUbOBxV8AlqPOdVPPVQ=)
2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:2c:f4:27:f6:a7:84:ca:64:8a:1e:45:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=f6c3383c8fa7c1bdf99501bce6364927a88beed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:95:c5:2a:c3:74:eb:34:89:a3:03:0e:f0:
e5:b8:79:cc:58:15:58:27:45:60:5e:ac:e3:b3:0c:
38:00:c9:4a:89:f5:a4:83:85:8b:66:27:54:a0:58:
ee:83:5b:25:64:56:52:c1:63:63:39:6d:de:8f:53:
2a:c9:42:1e:a7:6c:c5:77:c7:0d:e3:27:ab:9f:02:
04:2d:eb:eb:8b:8d:a8:c6:fe:4e:77:75:a1:c4:70:
0d:6c:99:b6:34:6c:02:19:0e:61:fa:9f:6d:31:4e:
b6:ec:fa:a0:70:31:d9:03:90:b4:f0:f3:2b:2d:11:
ae:97:ad:fd:fd:ed:f5:68:ad:76:da:0c:6f:e6:63:
b6:7a:29:9a:91:0e:bb:e2:40:0d:a2:03:bf:42:b0:
88:23:65:50:93:8b:7b:a1:73:2d:13:41:78:3d:76:
9c:d4:cf:2c:e8:0f:81:d5:f3:d3:e3:bb:57:14:36:
15:81:0d:c5:71:b1:9e:25:c4:0f:54:c3:c1:b7:d8:
0a:fc:60:17:f4:68:78:f9:17:ed:7b:f3:30:71:0a:
52:6f:60:ba:90:09:fd:ef:9d:18:bf:84:00:6b:58:
28:65:88:b2:42:c8:9d:5e:f3:19:a8:dd:aa:df:ec:
90:c4:b5:5b:95:40:0e:65:95:b9:39:c5:36:b7:a9:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C3:38:3C:8F:A7:C1:BD:F9:95:01:BC:E6:36:49:27:A8:8B:EE:D1
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fd:f1:c2:67:c4:89:77:77:e2:23:8b:0b:76:e2:41:35:56:
1c:16:af:0b:13:f8:db:5d:9e:92:06:ea:81:8b:aa:38:d3:ee:
40:25:fb:64:1d:fe:34:4c:dc:3a:7b:d0:4a:48:cc:63:d6:d5:
2e:77:5b:4b:6b:a3:65:3f:8d:7f:ec:bc:25:2a:ce:e6:06:a0:
8d:3c:20:cd:b3:fc:76:e2:3b:d0:39:07:0f:6b:7c:92:00:ba:
f0:33:a7:72:f2:9d:d8:b3:ca:20:e3:6d:b4:7e:cb:f3:8e:18:
5b:be:91:8d:8a:cc:5c:fd:c5:2e:8f:87:22:4f:4c:dd:4b:f6:
b0:57:4f:47:12:1b:7f:85:bc:fb:ee:58:78:fa:11:3d:a2:0f:
6e:15:1f:75:bb:84:46:e2:be:93:34:00:97:15:73:8f:d1:f5:
d0:4d:07:01:05:c9:9f:01:bb:9a:46:bd:95:bd:bc:ac:ae:56:
78:8e:02:aa:8a:93:78:7a:0d:62:8e:c7:0a:1d:f7:f5:a1:c2:
7d:32:b1:e9:d6:0a:79:6d:d2:a9:db:9f:95:03:93:50:33:f7:
8b:e4:36:19:94:35:e1:57:ba:ce:15:ba:86:3f:ed:5f:f2:e1:
9e:04:48:79:72:ba:c8:9c:ed:71:e6:45:aa:ba:53:45:5d:8b:
06:3a:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:53:11 2025 by rpki-client