Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
File: s3fRc_TqOk-bJT7lLrnugUaxDj4.mft (raw, json)
Hash identifier: uN/lzjQXSeJpklMk5HJxUqmI1zU2V9b9K7d3Q20mNTc=
Subject key identifier: 7D:C3:6C:B6:66:0E:93:BD:B3:42:9A:68:AA:65:21:4B:6F:CF:DC:89
Authority key identifier: B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
Certificate issuer: /CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Certificate serial: 0194BBCEF89C46ADD642C379F28E2B07F5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
Manifest number: 1062
Signing time: Fri 31 Jan 2025 10:01:30 +0000
Manifest this update: Fri 31 Jan 2025 10:01:30 +0000
Manifest next update: Sat 01 Feb 2025 10:01:30 +0000
Files and hashes: 1: s3fRc_TqOk-bJT7lLrnugUaxDj4.crl (hash: wzEmDwn8VsvWHQ2/UNna/C+y1NnTpG+u3Xcg6cD/AuM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f8:9c:46:ad:d6:42:c3:79:f2:8e:2b:07:f5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b377d173f4ea3a4f9b253ee52eb9ee8146b10e3e
Validity
Not Before: Jan 31 10:01:30 2025 GMT
Not After : Feb 1 10:01:30 2025 GMT
Subject: CN=7dc36cb6660e93bdb3429a68aa65214b6fcfdc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:96:5b:7f:86:dc:2a:df:d4:64:ff:61:3f:
36:5a:7f:6c:5a:1e:d5:72:97:90:d7:c8:ea:b8:c2:
26:27:15:2e:15:9a:b5:43:d2:4a:70:51:82:3d:af:
39:37:22:39:5d:e2:72:81:f7:1b:42:9d:b6:00:98:
59:f4:ea:c7:14:ec:1d:1e:0d:fd:01:db:6b:c1:9a:
e5:9b:12:3e:fe:e8:73:b3:44:09:a1:56:08:d7:ab:
cf:6b:7a:61:97:e3:6c:54:9b:e2:f3:d9:14:cd:ef:
d8:7c:2e:da:62:33:d4:d6:26:31:ae:1c:a6:7a:72:
e7:38:6b:00:d0:57:89:f2:4a:ce:26:a9:ea:38:a6:
d1:ca:1c:79:ea:d1:d7:c5:43:ac:94:45:34:0c:6e:
a7:09:46:59:05:d0:bb:43:53:b5:27:d0:18:e4:95:
fa:ff:0b:0c:99:04:28:d9:a3:93:a1:a9:d9:8d:b5:
35:30:8a:32:e4:53:c0:75:16:8d:99:e7:e8:1a:e0:
30:a1:7f:24:28:c7:3f:c4:d1:54:b7:30:0e:20:e9:
86:dc:ce:4c:e2:bf:69:61:ee:10:5a:de:d5:91:e0:
11:0d:46:9a:b4:10:7e:6c:18:de:60:68:67:cf:3b:
aa:e4:65:85:77:e3:a3:17:67:15:f1:45:75:86:b8:
5b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C3:6C:B6:66:0E:93:BD:B3:42:9A:68:AA:65:21:4B:6F:CF:DC:89
X509v3 Authority Key Identifier:
keyid:B3:77:D1:73:F4:EA:3A:4F:9B:25:3E:E5:2E:B9:EE:81:46:B1:0E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3fRc_TqOk-bJT7lLrnugUaxDj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0e2146-978a-439f-9570-7960985d35a3/1/s3fRc_TqOk-bJT7lLrnugUaxDj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5e:38:05:60:38:13:f5:86:1d:6b:88:9a:7c:1a:0c:27:d8:
34:c9:72:ed:db:2c:72:60:8d:25:92:b8:b0:12:d0:6d:54:43:
b1:4b:be:da:be:21:67:ab:05:f8:52:a7:38:a6:6b:da:a9:3a:
7c:fa:23:ce:7d:73:c8:73:19:90:29:13:41:ea:23:a8:6a:cf:
4b:f1:5b:a9:4c:51:1a:77:66:b7:5e:22:4e:5c:12:18:31:96:
a3:70:36:48:e2:58:73:13:0c:d5:3c:76:c0:dd:56:98:6c:68:
65:6e:12:75:3b:fb:15:c6:69:e9:97:33:89:aa:c7:a0:0b:46:
d4:85:43:ef:ec:dd:46:92:0e:44:4f:7d:20:29:a6:cb:80:8d:
37:dc:67:9c:0b:d8:52:49:6c:58:c7:14:0c:16:ff:80:d1:51:
a3:c1:d1:e7:fa:aa:c4:8c:5d:a2:61:37:0f:a6:9d:21:61:b6:
73:9c:e1:c0:7a:f6:04:99:81:2e:19:f1:7e:35:54:5f:76:63:
64:ff:80:49:f7:b3:0f:78:55:b7:1a:ba:f5:83:a5:bf:4f:ba:
0f:dd:7e:87:59:96:29:25:e7:0b:27:d2:e4:27:f0:bc:0f:21:
7b:54:7a:34:02:b9:e8:76:70:c8:3c:b0:fd:89:d5:f0:bf:d4:
52:0c:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:26 2025 by rpki-client