Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
File: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft (raw, json)
Hash identifier: YK2dzKL2RyiVrQf9dqDWCxgwipV68wXduyWIz6qc6s8=
Subject key identifier: 37:87:A6:3A:28:4F:98:61:1D:CE:3A:EB:C7:91:E7:7C:3C:63:96:8E
Authority key identifier: 23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
Certificate issuer: /CN=237aff0df48083c7e21d794ab147bb9711141244
Certificate serial: 0194BC7281456502AFA6C2B7BD9C759B21FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
Manifest number: 083B
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl (hash: gGq3qlzBmwalB7GWITtLAbQMA5zWhSKF4SdOm38AVNU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:81:45:65:02:af:a6:c2:b7:bd:9c:75:9b:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237aff0df48083c7e21d794ab147bb9711141244
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=3787a63a284f98611dce3aebc791e77c3c63968e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:ab:2d:8d:9b:58:95:7c:2d:f2:56:dc:b3:
76:a1:bf:10:93:86:b7:02:f0:04:1c:e2:7d:e6:a8:
af:09:92:00:c0:4f:23:b1:d3:64:ec:22:4e:7e:39:
26:12:ce:6a:b1:da:6b:1c:7e:a4:e9:74:34:e1:35:
6b:e4:df:84:ed:d5:6f:0d:49:a2:3c:6d:10:97:53:
c5:2e:18:8b:ac:29:9c:84:54:26:1f:87:3d:00:a9:
3e:c1:ab:a5:30:a0:60:81:ad:e4:c8:9d:50:f2:15:
b5:3f:db:62:f2:05:e8:36:16:ce:63:94:27:27:d4:
60:c3:8b:dc:70:f3:d2:c8:c9:50:99:eb:39:80:d3:
3a:eb:2e:a4:23:ed:6c:d0:4f:ee:7a:58:86:f6:19:
92:41:0f:d4:56:ca:90:38:91:5c:37:00:80:13:ee:
a9:60:22:4e:db:1e:4d:ca:e4:69:f0:65:a0:7c:29:
21:52:90:80:a2:f9:f0:90:58:f3:f5:2a:80:36:cf:
9d:d5:f2:a5:03:84:07:e4:e9:8a:7d:e6:fd:88:6b:
7c:0a:cb:a0:e7:6d:08:d5:7c:05:7b:5f:93:b7:1d:
e3:b4:f7:b1:ac:24:6d:1a:a5:ab:15:b8:00:13:b2:
a0:87:fb:d8:67:5f:dd:74:33:b3:b7:88:3b:86:0c:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:A6:3A:28:4F:98:61:1D:CE:3A:EB:C7:91:E7:7C:3C:63:96:8E
X509v3 Authority Key Identifier:
keyid:23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:61:c4:1e:84:4e:06:0d:bc:76:77:56:40:46:a8:0d:12:
6d:01:83:45:a8:e6:01:95:22:6d:aa:52:43:9b:41:21:92:03:
09:8a:d9:24:40:ed:a0:14:48:8b:7d:43:2a:61:00:74:e6:07:
fd:e5:1a:fb:90:91:0b:a5:f3:53:7b:3e:bf:96:0a:8d:98:f3:
5c:42:88:93:82:0d:cd:06:3c:1d:77:c1:66:96:d7:46:d4:7c:
d4:c5:5d:02:b4:e6:6e:c1:bc:ba:22:22:da:61:42:78:1c:59:
e6:8c:15:21:67:43:b9:9e:7b:d7:7f:d1:44:f6:fd:20:33:04:
80:00:7e:40:bf:dc:13:11:e9:e2:95:99:70:27:6d:db:5c:d6:
b0:c6:9d:be:d8:00:38:b3:41:0d:47:c2:0a:f8:96:c6:c2:ae:
fe:a8:cd:ea:18:f5:2e:25:9d:13:73:2b:3d:e6:c2:00:7d:62:
c4:95:65:dc:67:c7:46:49:83:61:88:c1:c8:3c:c5:80:5d:90:
99:43:d6:11:ce:79:3b:84:5b:88:05:0d:57:64:9b:29:87:4c:
2e:3d:bb:ec:24:fd:86:ac:c3:4c:55:ac:b3:50:56:af:e1:6e:
2f:e7:71:5e:f6:cc:92:5a:a4:2c:3e:c3:4a:ff:2b:a7:90:15:
8b:7e:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:05 2025 by rpki-client