
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
File: 03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json)
Hash identifier: 3e8vq18dOwLECWeUNL+qjE0ZCAMEbVWvir+9338UU7E=
Subject key identifier: 17:61:14:C1:72:EE:55:2B:C2:C8:BE:53:E7:BB:9D:AA:03:BD:12:1B
Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Certificate issuer: /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Certificate serial: 0194BBCEEB32FE1816F79CB17F86EF7D3AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: xpGPNffP2emTJpoyQf/mO+p0/WdUBqAcszmaRJc38kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:32:fe:18:16:f7:9c:b1:7f:86:ef:7d:3a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=176114c172ee552bc2c8be53e7bb9daa03bd121b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:1f:9c:6e:ea:69:23:a7:6b:15:63:11:aa:
f2:7a:46:07:45:03:0e:88:09:ee:6c:09:a4:87:ea:
f2:db:d2:0a:58:11:c5:f2:ad:d3:b4:aa:9e:22:63:
2b:7a:88:e3:fa:d2:8c:e6:a5:9e:c5:61:0c:b1:f4:
7a:c8:4d:4a:20:6d:52:34:83:fc:bd:98:65:64:ed:
1d:67:61:19:c5:51:b1:bf:76:bb:b1:a5:6f:73:9e:
c6:c2:b1:69:9f:fd:c8:27:38:1f:91:7d:61:3c:4c:
91:6d:06:be:c2:2b:95:e0:55:17:e1:ff:86:ff:6c:
20:51:43:2a:4c:1d:46:52:54:53:fc:4a:6f:37:9e:
2f:11:3e:9e:9f:f6:6c:26:bf:95:49:42:dc:7e:d6:
4e:17:7e:ae:45:5e:cf:9f:88:cd:ca:bf:7a:7b:f1:
27:db:48:ef:1e:df:89:93:77:e5:3d:b1:57:3b:c2:
b7:cd:0d:83:b6:4b:d3:0f:b5:4d:f2:e5:f1:24:86:
ea:b3:83:02:68:68:e9:38:88:65:10:7c:1a:a1:bd:
23:2a:4c:e2:71:3f:be:83:e0:e6:95:93:ae:b9:25:
93:97:9c:60:b8:c9:53:af:24:b0:a7:5a:c5:65:28:
72:fc:94:9a:42:13:7b:5f:e2:8e:2d:e7:db:9c:1a:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:61:14:C1:72:EE:55:2B:C2:C8:BE:53:E7:BB:9D:AA:03:BD:12:1B
X509v3 Authority Key Identifier:
keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:f4:0b:f3:f7:4b:4b:dd:1a:1c:a0:77:d2:8e:7a:09:13:
b7:2e:0f:2d:74:a9:32:63:76:79:51:04:cb:68:39:d0:cc:84:
3b:b8:65:a7:dd:31:d9:c2:69:05:7f:83:d6:da:22:4c:3a:be:
28:83:b4:dd:b5:d1:e0:61:20:17:6f:6a:6d:d7:fd:bd:4c:fa:
a5:5b:23:67:05:18:8a:fe:9a:d2:4b:55:89:e6:9f:44:72:81:
34:d7:cf:9b:52:c5:b9:f1:23:d6:bb:ee:1e:8f:d3:ca:87:5d:
72:b8:b6:7c:4d:2e:c3:a2:9a:38:2c:f5:2d:0e:cf:b6:c2:03:
d2:b7:66:df:69:dd:39:a1:84:a7:f2:99:b6:fc:71:e0:59:0d:
6f:9c:74:03:a2:34:9c:1c:2f:fa:6b:1e:3d:a5:82:f9:e0:17:
a0:34:da:45:5e:dd:e4:be:f9:0f:0c:25:cf:cb:1b:1a:cf:c8:
e3:2a:3e:6a:77:16:9a:37:52:57:e1:35:20:e5:86:af:98:d5:
ac:41:57:a7:4a:05:59:1c:68:b8:f2:e4:4f:94:45:82:80:16:
fd:ef:79:29:3d:eb:36:93:88:d5:49:f0:78:4e:e9:39:7a:70:
cd:76:6e:83:a8:ae:5b:8f:3c:dd:eb:0e:b0:21:4c:10:85:49:
2d:93:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:25:01 2025 by rpki-client