Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
File: 3q91C1wrlTnZblZJdyr34Q7-D-o.mft (raw, json)
Hash identifier: H4hnXb4LC0D94ZCSAa+x4gbvdPECdo4dsnwgVlGYksw=
Subject key identifier: 0E:54:C4:67:F7:53:F5:55:8F:8E:49:3E:64:53:36:3A:20:6B:19:84
Authority key identifier: DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
Certificate issuer: /CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Certificate serial: 0194BC3C2136E5C888EF2961E292D01ED483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
Manifest number: 0ABB
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: 3q91C1wrlTnZblZJdyr34Q7-D-o.crl (hash: E87fWJexXegQFdPcL7WXrzYB3+4HT88fKcEtDDcW5H4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:36:e5:c8:88:ef:29:61:e2:92:d0:1e:d4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deaf750b5c2b9539d96e5649772af7e10efe0fea
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=0e54c467f753f5558f8e493e6453363a206b1984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:6e:af:28:7b:3f:08:32:72:cb:de:73:29:
34:00:3d:71:d1:b1:b8:3a:5f:0c:50:c4:c8:b3:cb:
2d:39:b3:5f:48:50:2d:ef:51:a6:33:56:d5:b5:57:
55:57:9b:80:cb:9c:02:56:3c:74:50:c1:57:3f:1f:
0a:92:66:3c:60:c5:35:77:91:f6:0d:05:39:dc:1a:
13:87:49:9d:9c:8d:e1:a7:0e:c0:8c:05:1f:a5:19:
7e:2d:a7:20:38:25:f6:fb:53:ce:9d:0b:a5:3e:02:
af:9e:15:d2:df:fa:42:5c:52:a8:53:a5:a1:97:09:
73:c1:c1:a8:af:59:e5:9f:89:6c:eb:0e:72:46:c7:
f3:e0:a6:bf:69:87:2b:d7:7e:b5:57:c4:81:c8:aa:
fe:95:ad:45:9a:70:c7:f3:3b:83:27:91:bd:81:ee:
7e:d1:6e:c0:8d:6a:fd:3e:ec:91:63:5b:0f:30:e2:
1e:e0:27:12:9b:4c:6c:85:3b:c1:a9:ef:a6:6c:9a:
ad:85:6a:ad:e5:8d:04:bb:70:1c:0c:f1:a0:f9:ce:
ed:37:56:e1:c0:29:ae:d5:bb:6e:91:ab:46:e8:a8:
97:d3:fb:06:c8:92:d9:4e:ff:0a:28:ca:3f:60:c1:
fa:1f:46:07:36:42:6e:20:93:f6:19:99:b0:a8:ed:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:C4:67:F7:53:F5:55:8F:8E:49:3E:64:53:36:3A:20:6B:19:84
X509v3 Authority Key Identifier:
keyid:DE:AF:75:0B:5C:2B:95:39:D9:6E:56:49:77:2A:F7:E1:0E:FE:0F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q91C1wrlTnZblZJdyr34Q7-D-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0309fb-6f84-47bc-a7c9-5d31d1fe428f/1/3q91C1wrlTnZblZJdyr34Q7-D-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9c:a6:f2:f3:f8:9c:e7:c0:80:fb:42:a1:bc:c9:49:7e:1a:
b0:df:a3:1c:1f:6c:94:39:3a:58:e3:69:91:65:b1:cd:e7:7d:
4c:11:c8:f0:e0:24:3c:28:09:3c:a9:7f:4b:a8:8c:c8:ca:c7:
76:f5:a9:df:8f:0c:ba:bb:2d:03:12:99:94:8d:10:7a:98:e4:
66:12:c6:c9:03:a0:ff:97:71:ae:5f:65:20:4e:9b:ae:f9:33:
99:5c:b1:89:b8:a4:3f:49:78:11:2f:d2:ee:77:1b:1a:ac:08:
01:cb:01:ad:b2:ff:9a:84:59:15:54:74:69:e0:ef:aa:4e:e5:
dd:e1:a0:27:c0:71:92:92:72:49:a8:d2:b4:9f:24:20:55:e9:
ff:e1:5a:3b:6c:51:7d:9d:8a:fe:37:a8:f6:50:d3:a0:0e:de:
b7:94:ce:06:ae:91:76:76:71:a2:df:1c:06:24:ed:58:17:d4:
e1:c9:a3:88:5d:c0:d7:e2:91:4c:da:5f:ec:2c:11:c9:c3:0c:
57:e8:dd:71:2e:de:4e:6a:5c:ea:f2:7a:b2:4f:77:d3:11:ed:
e9:84:20:81:14:00:67:fe:a9:12:43:53:fe:1a:a8:a5:0d:64:
3c:0c:a6:37:c5:1b:d5:d5:5f:89:f5:81:7c:7a:75:b9:ef:e4:
01:c8:c2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:44:45 2025 by rpki-client