Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: HuRVXWK1xsdU9xIxM0k9UznFUwu2FxSsuu3fLXkMcSE=
Subject key identifier: 04:41:19:96:9A:BA:E4:5B:D8:37:4D:B3:3E:85:DF:6B:F4:9C:77:31
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 0194BD4E811FCB0FDF6C80BF40C5D70A5804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: IkhqlxvOGhqr/8iiQ/N/7D6vRTKDF31OtCNE7j1DDNY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:81:1f:cb:0f:df:6c:80:bf:40:c5:d7:0a:58:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=044119969abae45bd8374db33e85df6bf49c7731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:36:8c:62:1e:03:7c:cd:8a:a3:27:85:d6:c9:
de:d1:97:c7:95:85:6f:e7:ba:85:dc:52:21:cf:8d:
f2:3d:83:34:07:de:a8:0c:f4:ba:c7:c9:02:94:77:
da:11:71:d8:41:41:d3:ce:55:e0:6c:21:14:5e:ac:
da:83:d2:4b:b9:df:5b:62:3f:a9:41:49:1b:2e:40:
80:28:81:59:7d:74:6d:a5:54:74:be:ba:53:9c:69:
82:8d:cd:78:08:af:71:21:68:2a:82:f2:5e:ef:dd:
61:56:53:0b:3f:5d:a4:3c:45:37:68:ee:a6:ab:04:
3e:d7:46:d9:82:83:20:47:13:f3:86:c4:fe:14:5a:
91:e7:fb:11:aa:0e:d5:b9:3d:e0:0c:c1:95:09:b8:
f2:da:cd:b4:24:29:fa:17:76:a9:f4:ab:75:8f:01:
40:74:ff:28:1c:81:14:6f:96:18:00:66:27:23:70:
b9:fa:ab:75:08:11:f7:69:70:12:96:8f:90:c7:72:
a7:4b:c3:d6:21:32:96:ca:37:e6:e2:32:8c:ba:9e:
6e:08:15:94:61:b7:1c:00:dd:18:32:14:5e:95:22:
14:19:af:ba:82:c2:dc:6a:4a:6c:4a:2f:17:fe:43:
67:fb:99:70:24:99:67:13:34:05:60:1e:fb:d4:72:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:41:19:96:9A:BA:E4:5B:D8:37:4D:B3:3E:85:DF:6B:F4:9C:77:31
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:9b:b4:33:d7:df:27:77:b7:a1:f4:3b:30:7d:ac:d1:fc:
09:1f:80:5b:6a:4f:a5:f4:28:2b:7c:52:9c:19:6f:a3:8d:6f:
7e:c0:3c:00:96:2d:b8:69:ee:5f:af:6e:9a:e9:8d:d6:95:6b:
5a:81:88:6b:3e:12:b6:75:a7:a0:7a:f1:43:16:16:ec:17:ec:
13:ea:38:dd:18:20:30:fc:3f:ca:f2:03:51:4b:07:da:71:78:
5c:be:4e:95:df:35:ec:22:6d:44:9d:d5:13:13:4c:21:33:b6:
e4:be:37:c8:ba:bb:9e:da:91:30:19:ec:4c:ed:69:ed:10:21:
f6:4d:ca:44:76:8f:f2:c8:70:62:78:ab:fd:68:22:c4:36:2c:
cf:06:9d:23:7d:e9:db:8d:54:4d:b3:69:1a:12:7f:27:ad:01:
d4:9e:08:cb:ed:c2:3e:3a:72:52:85:e8:2b:72:74:0e:25:f4:
62:74:f5:1d:0b:02:cb:c2:02:23:6c:dd:57:b2:a2:df:83:90:
5e:be:2f:46:49:2b:85:0d:6c:39:9c:22:1d:9e:fe:4b:95:90:
d6:20:db:72:ec:dc:4e:95:f2:83:1e:af:ef:ec:91:d2:6d:c1:
58:e2:c2:2a:84:c7:10:d7:db:79:bf:be:56:e7:b5:52:c5:19:
31:a8:21:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:32 2025 by rpki-client