Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier: 7wp+wsyJ+T3GC+xAtrXL42L2pHurBch8MRiIVVpp6YU=
Subject key identifier: 91:93:CC:06:C1:73:CD:77:EE:E1:A5:E7:60:97:FD:FA:2F:64:6C:BA
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer: /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial: 0194BD8552AE2EDE57373CCC0DD485436029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number: 0DE5
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: 2Z7HAta7pOyt7Kh/u3DPiJ+tt+rFm0guvsf2TsrvwuU=)
2: j2BsJZHL3LgBeU5YdWYJa32hdy4.roa (hash: d+oREESRuLvMYhUCDv9aLTd0uG0phphp5vORkyTT7cw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:52:ae:2e:de:57:37:3c:cc:0d:d4:85:43:60:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=9193cc06c173cd77eee1a5e76097fdfa2f646cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:11:94:72:44:1b:c6:64:62:a4:ff:a5:00:
a1:88:3f:6a:5d:af:42:ad:80:1c:23:e8:0a:79:e6:
22:34:e2:8b:84:e5:ca:b6:9a:1f:59:e9:8a:84:ff:
6f:01:06:8f:c2:5a:01:56:a1:ad:e0:ff:46:0a:f3:
b3:7d:67:78:85:dd:08:30:cf:8e:32:ca:c8:ec:40:
ab:b3:1d:0e:83:e3:4f:29:f8:fd:65:37:15:71:10:
53:4c:47:1a:27:9f:43:13:44:af:f1:38:79:b4:51:
b9:7c:a9:c0:f7:0b:43:45:cc:55:05:8e:3f:5d:35:
cc:a9:c3:a7:4a:67:9d:9a:4b:45:eb:ed:98:c6:b7:
fe:ce:fd:7e:43:55:df:5e:45:02:9f:d0:8c:f7:9c:
e3:60:17:02:f2:3d:0b:14:c9:e3:07:11:da:80:19:
31:49:01:4e:89:30:9e:e8:16:c7:2d:bc:0a:d4:22:
02:9b:25:91:95:44:04:1c:dd:2c:78:ff:b2:e6:c7:
be:33:9b:31:01:40:b6:03:3b:7b:28:ad:b0:0f:ca:
9e:cd:fc:32:9a:7d:53:e4:33:60:7e:67:93:1e:e0:
0e:6f:09:ff:0c:0d:e1:15:9b:b7:4a:90:da:ea:a6:
6b:b4:31:2d:73:52:26:1d:a3:0f:bf:c7:53:60:e1:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:93:CC:06:C1:73:CD:77:EE:E1:A5:E7:60:97:FD:FA:2F:64:6C:BA
X509v3 Authority Key Identifier:
keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:dd:b7:61:d2:b2:dc:fa:09:16:22:43:98:0f:2a:23:8d:ac:
e0:47:30:21:cb:94:ec:53:71:85:44:50:ce:43:a4:25:dc:f1:
d6:9e:8f:6c:28:3d:6f:8b:5f:57:8f:13:a3:69:9a:db:d9:b2:
13:40:ad:1e:df:43:ed:d4:e9:7e:4d:5b:81:28:ec:71:1f:64:
63:a9:8a:02:c6:85:6d:8a:c8:67:a2:5a:11:e3:40:ae:98:ec:
b6:5c:45:1d:c2:59:8a:d3:e7:6a:83:b0:2f:b8:6b:47:12:d9:
4e:23:aa:9f:ac:e1:4d:f5:0f:f5:83:f7:41:a1:ab:22:8e:e9:
ff:d7:47:5e:a3:35:bb:eb:31:04:6d:10:fc:4d:9f:fc:ed:9d:
20:1f:5d:bc:f9:08:60:1b:66:92:d2:ac:e7:92:20:11:d0:fa:
d1:20:50:e8:a4:07:a4:75:93:a6:9c:85:20:46:22:d4:4f:b7:
00:54:cb:bc:ec:19:fc:55:41:31:0d:1a:de:b4:7e:8b:66:3b:
6d:f4:5a:fe:26:3e:b7:28:65:74:fe:77:63:91:58:91:58:23:
b8:e3:4d:ee:05:ca:85:3b:77:10:53:9a:42:6f:8e:4f:50:d2:
9e:09:8e:fd:72:a6:de:51:73:0f:f3:26:38:8a:33:c0:da:dc:
5e:98:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:40 2025 by rpki-client