Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier: lGr0Zkv1pBuGgc5pYfSQuvPtFjspGKhIBgP8SmEAO+s=
Subject key identifier: 4E:78:0D:D4:F5:13:BC:24:A4:81:5E:44:30:8C:02:18:78:33:DE:0A
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer: /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial: 0194BC7324305C6B3B06CDB81D52A3CFCE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: 5QND2W8xDF2L9O6YWsicEBVqXzc5OfX2w0nBUDpxkGI=)
2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:24:30:5c:6b:3b:06:cd:b8:1d:52:a3:cf:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=4e780dd4f513bc24a4815e44308c02187833de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:42:d9:75:2c:75:d6:f4:0f:7f:77:f1:32:
19:aa:0f:5d:4e:8f:ea:bb:12:4f:f9:c2:be:8f:d5:
ac:ca:bc:fc:6b:44:91:d4:b3:52:59:4a:1b:60:2e:
1d:2e:ce:96:13:be:5f:cd:b8:0d:62:d4:0e:d5:d6:
46:68:4e:42:e2:b2:57:b0:04:89:b1:2a:04:15:84:
d5:41:df:5b:c0:88:a6:98:7b:2d:42:3b:f1:81:39:
30:6d:d9:3d:35:be:89:7a:9a:32:d5:c7:dc:20:18:
12:36:84:3b:d4:79:89:8e:9a:8a:4f:0c:48:2e:12:
99:dd:d5:c8:50:1f:cd:2f:11:c2:3c:4e:3a:16:30:
29:e9:4f:b2:48:0e:af:a4:2e:af:bc:26:73:85:62:
a7:08:15:09:39:c8:33:1d:cc:b5:40:fa:75:5a:a5:
06:8f:8a:97:01:60:ca:dd:90:10:72:a2:fe:e2:b3:
ea:11:e0:ba:83:39:0d:9d:0c:a8:0d:f1:22:34:f4:
21:18:57:b3:7f:9c:50:4b:81:4c:45:be:0b:df:e4:
d1:8b:c6:37:ea:b6:64:cd:d9:17:11:94:11:71:87:
5c:90:50:d1:84:65:1f:6a:8a:bf:74:69:ce:43:ea:
f2:35:58:5c:9d:27:ce:87:8c:25:54:0d:8a:2f:58:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:0D:D4:F5:13:BC:24:A4:81:5E:44:30:8C:02:18:78:33:DE:0A
X509v3 Authority Key Identifier:
keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a1:0b:55:f7:da:e2:de:98:ea:e3:bf:05:48:55:2e:76:b7:
d0:54:7a:e5:98:c7:8a:d6:1b:94:ea:61:f0:ba:b9:70:eb:fe:
e5:af:a6:2b:73:aa:0d:c4:e4:1a:9c:87:fc:34:8f:3b:37:55:
05:9d:88:69:4e:20:2c:7d:dd:d7:3f:96:68:0d:4c:51:e0:46:
5f:59:86:36:0c:5c:4f:60:ab:0d:c2:a7:e6:fa:4f:71:55:98:
52:14:36:06:21:f6:9d:0c:7f:b2:75:04:24:41:d7:04:a8:ad:
c6:99:68:74:69:aa:31:84:ff:2a:97:93:a7:ca:53:8b:76:b7:
e5:e7:b2:89:04:bd:86:65:2b:d2:18:f9:5c:7c:85:05:58:bc:
df:59:b8:64:b1:7d:92:7a:0b:e5:f2:34:7d:d8:64:41:60:b7:
71:91:21:3d:7c:30:7e:7a:16:68:fb:b0:8f:71:e5:72:36:e1:
b7:27:9b:d1:b0:ee:8c:89:37:cd:86:6c:f4:85:8b:cc:b8:eb:
bb:a0:0b:eb:27:86:c2:cc:09:23:1b:a3:6f:db:e3:06:b2:de:
99:eb:91:03:55:58:c2:b1:58:69:8e:c7:ad:10:8e:cc:db:c7:
6b:ac:08:cf:a4:11:43:2b:e8:7a:d5:37:f0:5c:39:34:94:c5:
8d:16:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:52 2025 by rpki-client