Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier: +ZA9UaXSE2XYB1oMEj18X1p5ykcN8ifbkYbYyqOHdOU=
Subject key identifier: 8B:90:8C:95:7D:4B:44:A2:5A:AA:E9:29:67:5B:27:13:F9:A9:95:16
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer: /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial: 0194BBCE96955AE7E0F10CBEC263DC7241DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number: 10E5
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: kJKy3w/ScI9u2IanadNy7pMcvvs1k9D62uTvcFU+Hc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:95:5a:e7:e0:f1:0c:be:c2:63:dc:72:41:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=8b908c957d4b44a25aaae929675b2713f9a99516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:66:f5:e1:d4:9a:eb:a2:d1:ca:97:ce:c3:
68:69:e2:ec:43:f9:22:9f:fc:20:b8:0d:08:79:b8:
66:25:44:e7:a5:0d:9c:62:10:fb:d0:0f:5d:21:0a:
32:4a:4e:01:84:d4:da:b0:b7:ab:f3:1b:34:9d:53:
b6:70:cd:23:02:eb:97:4e:7d:d2:1b:00:dc:d2:8e:
17:cc:22:8a:9c:13:a2:84:0b:54:8f:0b:df:c4:c2:
46:bb:42:42:d5:26:a6:a7:8e:94:69:4c:4c:d5:fb:
49:84:36:7e:f3:22:25:07:55:c9:3a:ed:fa:42:3a:
5f:9e:9b:a7:1c:44:6a:83:8b:52:40:c0:52:c5:9b:
e2:09:e2:0c:4c:f3:32:17:70:d7:28:13:4b:2a:4f:
9f:1d:41:6d:1d:83:65:26:09:71:24:0f:1b:f7:a7:
fa:ee:26:41:25:61:02:96:5e:9a:19:c6:b2:0e:35:
44:a4:dc:ed:ae:7e:45:ba:5e:9b:78:91:20:e5:42:
ef:46:a4:08:3d:a7:1f:57:57:9d:a3:6b:21:16:d9:
db:b7:3c:90:79:50:1e:22:64:92:3f:80:b0:fe:fa:
dd:c2:ce:df:0c:4f:c0:1f:d6:61:69:ff:25:fb:87:
bd:0d:11:0c:3b:4b:b9:32:fc:e7:aa:7f:53:3a:7d:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:90:8C:95:7D:4B:44:A2:5A:AA:E9:29:67:5B:27:13:F9:A9:95:16
X509v3 Authority Key Identifier:
keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:71:f6:5e:f9:80:b5:90:1c:35:1d:64:5d:91:7d:d1:00:b4:
f6:9b:6f:61:ec:8e:d5:82:b6:b7:be:87:94:c8:8b:08:cb:29:
10:f3:43:0e:18:a6:59:99:4e:22:0d:74:33:b7:59:0a:76:68:
c6:9e:d4:c4:40:6e:0d:89:0e:7b:b0:9b:f3:a9:26:b4:c9:c7:
43:9d:b6:3a:af:fd:e1:50:1e:2b:8c:4a:ba:6f:cd:dd:c1:8e:
ce:f4:3d:14:68:bc:e8:db:6f:4f:7b:b1:74:44:93:e2:f6:07:
94:a2:30:e5:99:3c:45:f5:51:2e:94:4d:b8:2a:07:98:e9:f2:
56:f0:20:20:ac:b8:20:2d:7a:96:a1:40:e0:bc:84:96:c4:73:
4f:58:70:5e:06:e5:ab:ae:3a:27:b0:0a:82:c1:f5:d9:89:67:
6c:4a:5d:03:d8:b1:23:df:39:27:c0:83:92:a7:00:c0:71:1d:
38:de:75:dd:57:9d:b0:a9:09:fc:98:29:7c:31:f3:2f:e1:4d:
a4:59:6e:ea:cd:7e:35:a1:b3:1d:f3:f2:51:f7:6c:48:ef:d3:
09:76:ae:97:29:b4:39:60:17:2b:15:e1:95:a0:b0:26:83:3d:
e3:64:25:ac:86:3e:82:b0:c6:b4:5a:5c:22:c5:fb:f4:6e:ea:
dc:12:a6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:55 2025 by rpki-client