Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier: eJQyPG+q+Aso/eGNfNg7xSUUYcsQoUtNeypEaAv0dFo=
Subject key identifier: 68:1B:CB:6F:30:F9:D2:E3:34:AA:EC:C2:81:6B:B3:8D:C0:F5:F5:C0
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 0194BBCE3D3518786ADAB60030D7C0895B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: DCoGAvK3I4AgJDt4ab7Zdu7/YEgu6/LbEWOrhtyRVnc=)
2: g8bJIfF739dpWrk-7QT4aTcvUGE.roa (hash: SKJ7CL8rH8g+s+KCm+HZtsoz700tuvfd1R4IORTq3LQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3d:35:18:78:6a:da:b6:00:30:d7:c0:89:5b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=681bcb6f30f9d2e334aaecc2816bb38dc0f5f5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:cb:3a:9d:ee:35:2f:06:7a:9b:8d:36:e1:
9a:5e:04:05:5f:29:a6:93:75:ae:20:35:d4:72:db:
df:45:e2:27:82:f0:81:8e:10:7e:b7:6a:c4:11:a6:
f6:48:95:13:bc:86:83:74:98:2a:3c:41:b7:f1:1d:
5c:dc:ff:77:1a:19:8d:24:e6:68:c9:2d:d8:07:12:
f5:8c:25:d2:1c:83:22:28:6a:fa:19:20:99:1d:b2:
87:ae:12:20:d0:81:7e:96:6a:9d:ba:db:bc:6b:e3:
95:4f:5b:f6:9a:94:26:35:25:2a:2b:d6:ac:5f:6d:
ab:cb:67:9f:6b:0b:18:6b:fc:e3:34:f4:8b:23:2d:
b2:ad:26:c3:7a:3b:f6:82:b7:57:41:3d:b1:66:f4:
39:2e:84:94:f8:da:5c:70:01:b2:35:43:1e:b0:c0:
bf:5f:85:d0:12:87:c8:31:e1:1d:d7:fd:2b:5f:d9:
32:b3:f6:52:a4:b5:98:01:55:53:34:e3:52:0c:c4:
e0:e4:fe:8e:22:1e:cc:26:04:ad:65:00:89:54:51:
64:68:6e:e7:45:b7:82:7b:32:51:42:37:98:19:a4:
9d:74:66:9b:92:1e:d1:c0:58:f9:c0:1e:bc:37:12:
91:34:ff:7f:0c:d0:93:6b:d4:3d:e2:19:2d:76:51:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:CB:6F:30:F9:D2:E3:34:AA:EC:C2:81:6B:B3:8D:C0:F5:F5:C0
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a6:f3:e6:be:f9:75:21:15:1d:25:80:d9:72:59:f6:0d:6c:
ac:0b:79:ee:e4:43:7b:1a:4d:97:bd:1a:d6:94:17:1a:45:4b:
f9:4f:aa:e1:f9:d2:1b:c9:5f:e2:c0:d0:e9:7c:2b:d5:c4:a8:
89:c3:df:04:ea:1d:7e:11:ea:c8:7d:ae:6b:ef:bb:b3:46:9a:
16:73:78:84:2c:cd:26:48:48:85:fa:8a:5b:20:1a:b7:b0:2b:
84:e0:26:44:f4:38:7e:5d:c3:5d:9a:7e:0e:de:98:79:87:aa:
a3:19:4a:4b:da:fb:a7:ef:a7:94:7b:bb:10:de:3e:b0:3d:81:
ed:46:56:a6:97:2d:47:7b:0c:9f:72:44:f9:57:01:cc:25:65:
02:71:95:13:19:60:7b:fd:eb:6d:49:a8:4f:ed:96:65:f5:94:
1e:f0:17:a0:69:d3:1a:c7:d7:23:72:63:ab:d2:c2:7c:8a:7b:
e4:ea:e8:cd:86:bb:c0:4c:2f:7d:d1:d5:d6:4f:08:7c:7a:2a:
2f:f9:8c:4a:9a:1f:82:ce:b5:b4:8c:ce:05:88:f6:c9:91:93:
c6:d3:17:09:10:20:71:c6:ba:3f:f1:a3:b4:ff:1f:95:d2:2b:
de:c1:59:b3:de:e6:b8:7c:85:a5:3a:f1:84:73:10:45:a9:af:
e4:41:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:55 2025 by rpki-client