Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
File: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json)
Hash identifier: 63Sv/qsZ/nFzmkzHaT0zX7NuN8oHdrxwauUmnmmBbnw=
Subject key identifier: EF:23:F4:DC:C0:7B:62:F3:68:62:57:32:68:FF:EE:70:40:FD:CF:BC
Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
Certificate issuer: /CN=dd70c5f09b62683292fd9109e694713590281f8d
Certificate serial: 0194BC7323D36120ECB75B13A2B3855134CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: 0OorhyZYBZw9zSzKbfaVmKq0gjE7E0FGYlpOREovucw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:23:d3:61:20:ec:b7:5b:13:a2:b3:85:51:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=ef23f4dcc07b62f36862573268ffee7040fdcfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:46:53:15:a8:54:4b:da:0c:2b:7e:bf:74:
91:eb:f0:54:cd:71:ab:91:a6:53:cb:53:3b:94:44:
e8:1b:93:f4:b4:ca:5c:61:36:33:60:2a:b4:4f:93:
67:10:d3:b0:e2:e3:08:2d:32:6e:43:b3:cb:1c:15:
63:e7:4f:6a:79:11:21:c1:fa:20:34:be:c0:78:05:
04:d3:be:6a:1c:22:1e:66:85:98:47:59:9e:63:5d:
b3:a4:6d:d7:b8:15:17:cd:2f:2b:dd:b4:52:7b:3e:
1f:42:15:c0:6a:0d:15:aa:07:da:e5:87:fe:7b:bc:
c7:04:6c:fc:db:47:14:47:c8:25:9d:93:a4:b1:a0:
22:d3:bc:b2:47:54:9e:c9:7a:b6:a1:74:bc:69:34:
e3:46:99:53:74:90:dd:eb:6f:a3:27:97:17:3f:d9:
2a:1d:de:cb:4f:9d:f2:a7:b2:c7:86:4c:ae:c6:7c:
5c:82:d4:33:4b:4e:25:79:59:72:be:e7:fa:76:7e:
a9:c7:c9:f4:b4:d8:cd:fe:93:7b:a2:08:0f:d5:f8:
b6:b7:8d:89:59:18:cf:5a:03:c5:e6:1a:4c:bf:4b:
ab:2c:36:ad:dd:6e:c4:ad:fc:5b:eb:e1:9c:ea:1d:
0f:16:38:46:f2:95:7e:d5:d5:3d:8f:3d:2c:5a:27:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:23:F4:DC:C0:7B:62:F3:68:62:57:32:68:FF:EE:70:40:FD:CF:BC
X509v3 Authority Key Identifier:
keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d2:9d:b7:27:b3:da:5c:87:91:8d:4a:23:df:ac:1e:3b:0d:
76:e1:0c:56:cf:2f:ac:81:6b:12:3a:4a:0a:3f:45:06:06:66:
e0:1a:92:9b:20:ad:46:66:66:02:f6:48:0f:12:a0:c7:a5:01:
40:f3:e3:cc:bb:10:5f:51:41:b0:bb:77:a6:72:24:e5:c5:1d:
09:02:77:df:76:2c:4a:ed:e8:d1:e4:9e:e1:78:a6:72:36:79:
51:41:3d:15:7f:f9:6c:c5:51:04:bc:a7:b5:7c:2a:07:0a:91:
bc:a6:18:b3:eb:59:35:d1:97:f6:63:92:d6:e7:5f:bc:35:37:
8a:dc:b7:2e:8e:9e:ab:9c:9a:a3:ab:1c:15:81:a5:52:51:3e:
d0:54:42:e5:37:63:5b:b5:76:50:7e:f5:5e:f4:bb:34:7e:0b:
a9:61:b4:d5:23:3b:7e:75:66:89:0d:be:ec:c1:b3:8b:d1:d3:
56:12:b3:88:d6:38:64:3e:5c:0b:46:77:2f:99:53:ed:0b:f5:
22:0d:dd:ca:2b:b0:6d:30:de:67:30:55:08:fd:6d:7e:64:60:
8c:0d:9e:af:f5:76:98:ad:1d:c0:25:c9:d3:5d:cf:81:28:4e:
4e:ac:25:4b:17:8d:71:1c:4b:02:06:75:61:6f:c1:31:bf:93:
58:92:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:51 2025 by rpki-client